Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8023FBC8B0D111F08F875EAADAE4EC9C.roa
File: 8023FBC8B0D111F08F875EAADAE4EC9C.roa (raw, json)
Hash identifier: 5NnKm0JzBciTvqbcP3aJ4ZXnK80V2ZOUq6h5OSYF7z8=
Subject key identifier: 17:D8:A5:C5:F3:0E:4C:3C:C0:2F:A5:1A:AC:03:4A:CB:66:F9:D1:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8023FBC8B0D111F08F875EAADAE4EC9C.roa
Signing time: Fri 24 Oct 2025 12:03:50 +0000
ROA not before: Fri 24 Oct 2025 12:03:42 +0000
ROA not after: Mon 08 Dec 2025 12:03:42 +0000
asID: 53616
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107720 (0x1a4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 12:03:42 2025 GMT
Not After : Dec 8 12:03:42 2025 GMT
Subject: CN=68fb6b25-12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:67:8b:54:34:d8:da:94:b9:05:5d:c4:ce:
fd:ca:f2:21:90:96:57:52:e8:cd:b5:e1:02:3a:32:
40:41:bb:12:e6:fd:fb:e2:39:eb:04:25:9d:0a:7e:
ba:ec:23:cc:49:cc:bf:56:fa:c2:12:51:35:cc:c9:
b8:52:4b:a0:b0:50:76:73:14:4c:05:d6:4a:7e:bd:
27:cf:94:14:d7:69:9d:40:24:81:18:18:fd:32:57:
f5:f4:57:8d:54:28:31:1e:ac:96:b1:dc:47:b2:55:
29:89:ac:f6:64:30:b5:a2:0b:50:30:fe:fa:94:8c:
8b:e1:9a:ad:13:a8:43:8a:77:a3:17:f9:0b:9a:3c:
f3:57:93:f0:9c:42:c9:9e:30:90:0b:97:95:e7:43:
10:dd:fe:34:52:2a:51:cf:52:fd:e5:04:a9:23:57:
ac:a8:bf:6a:3e:0c:87:bb:69:6d:0c:47:2f:88:e3:
3d:94:1a:62:5d:69:fe:43:74:09:5b:f6:db:ab:b8:
bb:ac:33:0a:38:ee:3c:7f:30:07:45:e3:bc:46:16:
34:1c:e5:60:bd:59:dc:ea:93:fc:65:27:d1:cf:ba:
86:b1:f4:58:b6:6a:61:1a:9f:b5:66:2b:7c:db:63:
b6:fd:74:e9:34:ad:0e:bb:9b:54:60:7a:01:0c:9c:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:A5:C5:F3:0E:4C:3C:C0:2F:A5:1A:AC:03:4A:CB:66:F9:D1:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8023FBC8B0D111F08F875EAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:20:09:c2:64:a9:cc:49:e2:dd:0d:60:ff:df:6f:6a:be:96:
9c:66:2c:56:0c:58:2e:43:83:6a:13:06:47:85:58:6f:25:70:
3d:bd:87:5d:8a:3e:62:96:bb:38:23:f2:4b:85:23:c1:ec:5b:
1c:20:d9:1e:41:c4:4a:aa:ba:37:b0:b4:ea:14:f2:48:18:2a:
a4:bc:b9:37:5a:64:00:ec:a7:1f:15:de:1c:bd:e6:31:81:b5:
09:d0:ca:d4:6a:90:2e:4a:2e:21:fe:d7:a2:6e:71:f4:3b:3a:
5a:4d:53:c5:de:be:02:77:81:34:4a:ff:5a:8b:d7:2f:18:88:
12:26:c1:c7:f9:36:49:b7:cc:be:85:e8:12:cc:4f:3c:1b:be:
6f:ac:fc:ae:74:79:2a:c5:36:0d:3e:3c:3c:59:9f:2c:34:ef:
a7:d6:39:ad:9b:4f:1b:fb:aa:93:f5:78:23:e5:26:1c:b3:7d:
66:cf:b8:8c:f7:ba:4b:38:80:04:52:1a:e7:7d:65:87:92:93:
e6:fd:9b:56:22:b8:88:0e:29:71:29:9d:33:c2:b2:d2:e4:50:
8e:84:92:d1:f9:86:c3:b0:33:e4:bd:d0:42:46:70:a5:da:89:
2d:74:09:9a:91:fb:50:65:5c:f7:12:46:c6:ce:88:c6:c4:16:
fa:61:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:58:19 2025 by rpki-client