Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDA41129AB811F0A6AABC7DDAE4EC9C.roa
File: 7DDA41129AB811F0A6AABC7DDAE4EC9C.roa (raw, json)
Hash identifier: D65otvdQY3ndSDfTa7W6KpuWSGHglP0Troy6POV/7OU=
Subject key identifier: B6:1C:8A:55:1C:A9:56:04:5E:DB:42:69:2D:08:32:A3:5E:F9:77:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A11B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDA41129AB811F0A6AABC7DDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 09:09:23 +0000
ROA not before: Fri 26 Sep 2025 09:09:18 +0000
ROA not after: Sun 02 Nov 2025 09:09:18 +0000
asID: 23470
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 06:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106779 (0x1a11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 09:09:18 2025 GMT
Not After : Nov 2 09:09:18 2025 GMT
Subject: CN=68d65843-7fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:e3:28:71:fb:f8:6b:87:e2:7f:49:87:b8:
19:12:d0:fc:e9:c6:1f:5b:33:f7:0d:e7:ac:73:3f:
10:f1:0d:fc:6b:ba:8c:5d:a1:9e:15:2c:2a:7b:ce:
b5:de:9b:46:5d:e9:05:19:f6:91:e4:fe:e4:6f:c0:
2d:3b:77:cd:dd:bd:36:f5:17:c1:d5:e2:1f:28:6b:
6f:43:7d:df:df:c1:4c:fb:89:fc:42:c6:2c:a8:de:
38:bd:b1:d5:8e:53:78:aa:dd:71:07:f5:df:18:da:
37:5b:78:cd:29:a3:a1:51:6f:d8:ff:0c:62:a9:5f:
9d:91:d5:11:18:79:17:1b:15:a5:44:aa:af:dc:62:
30:14:4d:7c:68:74:db:42:29:3d:ec:7b:d6:e9:67:
3a:f8:4b:9d:f8:06:0a:eb:6b:f1:a5:dd:48:0a:d3:
4e:d0:32:a7:94:91:e2:35:50:99:72:13:d6:f9:35:
2e:8e:97:d6:10:73:a3:c1:82:ad:e0:9d:d3:59:3e:
62:be:4b:ec:73:45:70:3e:e1:89:86:14:e7:6d:0c:
06:6a:7b:28:78:36:86:1c:f3:a6:dc:ef:01:26:49:
35:9a:54:9c:c6:95:96:24:ee:ba:87:5d:7e:f1:5e:
42:94:f5:ce:8a:ed:d1:84:ca:14:ab:cb:42:89:2e:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1C:8A:55:1C:A9:56:04:5E:DB:42:69:2D:08:32:A3:5E:F9:77:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDA41129AB811F0A6AABC7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:49:81:32:8d:82:34:61:ce:08:50:6f:ae:c5:7c:7a:a7:99:
9b:f9:01:53:d7:fc:81:eb:08:fd:69:45:ab:64:82:94:73:68:
0c:2e:82:e6:ad:cf:e9:74:c8:a9:7c:0e:92:40:4a:ab:0a:9f:
16:b5:f5:25:34:5a:7d:02:75:f4:d0:3e:da:d1:4a:f2:65:ec:
ae:93:cf:20:d9:b9:f9:fd:4c:1d:f4:51:58:f5:d4:a9:a0:30:
dc:b2:e5:16:a7:d5:73:3f:eb:60:d8:62:70:4c:0c:9d:83:69:
b3:50:50:fa:bf:b7:76:eb:73:31:6b:8b:3d:33:bb:32:7c:57:
d9:d0:66:e1:46:a9:bb:5d:da:eb:d3:55:bb:e8:96:19:e8:35:
da:33:74:47:42:7d:fc:c0:7b:4a:35:65:d6:ce:d8:54:75:5f:
03:0e:09:7c:64:48:26:40:40:34:c1:67:7c:41:d3:a3:24:9a:
a2:02:49:f1:d6:1e:bd:10:7d:29:0b:dd:fa:ca:58:df:6a:2c:
7e:04:9b:be:1e:b1:23:c0:41:5e:2d:0f:47:fa:ad:a9:af:0a:
6b:e8:0e:c7:dd:49:5c:ef:7c:4a:f7:c2:48:a6:3d:2f:4d:f3:
26:6c:8b:bb:e8:3d:b5:4e:09:ec:71:e3:43:65:79:7d:95:1d:
24:76:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:05 2025 by rpki-client