Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8154C374A28F11F0BF9E1DD5DAE4EC9C.roa
File: 8154C374A28F11F0BF9E1DD5DAE4EC9C.roa (raw, json)
Hash identifier: QWRkI0Cjl0+nio/YvfvzTjPrAFg/rtVNf+zh8+XZMCY=
Subject key identifier: FC:3B:0A:EB:13:07:7E:9F:39:F2:9A:65:CA:B3:20:8C:A0:D6:00:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A261
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8154C374A28F11F0BF9E1DD5DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:36:09 +0000
ROA not before: Mon 06 Oct 2025 08:36:04 +0000
ROA not after: Tue 11 Nov 2025 08:36:04 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107105 (0x1a261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 08:36:04 2025 GMT
Not After : Nov 11 08:36:04 2025 GMT
Subject: CN=68e37f79-565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:62:16:4b:42:8e:78:59:02:ea:ad:ba:c4:
13:06:e3:d6:2b:bc:c8:c5:3b:d4:bc:b8:e1:28:2b:
6a:bc:55:55:9e:1e:72:1c:3f:39:35:6b:44:a6:ea:
41:5f:36:31:db:fe:9f:35:4a:27:a6:a8:19:bb:32:
8b:35:a5:7c:47:5b:f7:86:38:e1:f7:bc:36:9a:2d:
14:0d:ce:9a:2a:13:00:9c:0b:7b:ce:bb:80:f3:34:
78:b1:ac:d7:91:21:95:b5:ba:de:ef:f5:6c:55:4d:
39:08:b9:b6:31:4a:8e:f1:41:f3:30:30:6e:aa:31:
ce:f4:ef:be:1b:53:66:84:b7:d7:8f:be:7e:5e:71:
94:35:d5:c6:63:f3:54:fa:9b:d2:35:59:8f:e3:af:
86:a5:1c:cb:81:e4:0d:fb:a6:f6:38:9a:07:82:cd:
e8:0a:77:45:1f:4a:54:e0:98:61:7e:d7:b6:89:03:
3e:00:69:ef:b2:ee:ca:ca:1a:58:44:57:37:a3:47:
30:36:d4:0d:f1:13:af:78:91:36:99:f0:05:6a:00:
e2:74:11:eb:b9:c5:1f:c7:99:9c:a0:cb:8a:43:32:
08:b1:06:5a:49:4d:b3:f4:7b:3f:91:9f:93:8f:c2:
fa:71:ec:bd:04:ba:dc:bf:cc:be:89:d5:49:7a:95:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:0A:EB:13:07:7E:9F:39:F2:9A:65:CA:B3:20:8C:A0:D6:00:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8154C374A28F11F0BF9E1DD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:47:7c:9b:59:79:a1:0a:30:22:2a:d7:c6:61:13:d6:64:6c:
e9:98:fc:0c:fb:47:5b:26:ff:dc:a6:af:a3:54:3a:5a:66:83:
93:c8:58:cd:bc:b0:c4:6f:31:4c:b1:85:1f:5a:cc:20:6f:73:
80:e6:fb:4b:ea:c0:3f:03:1c:30:52:f7:12:7d:e1:9e:d0:b3:
82:54:05:42:14:b4:3f:42:e3:32:23:20:3d:8b:38:20:c7:85:
8e:6e:55:93:f7:c7:9e:87:59:c0:43:c7:21:dd:96:29:7e:77:
04:9a:6d:b1:cf:36:89:32:6c:74:5c:34:2f:fe:98:5f:78:b5:
44:7b:ad:99:be:80:0b:2f:4c:80:14:c4:b3:41:17:61:29:f9:
ae:e7:9c:4c:ad:fc:b1:9e:ab:b9:e0:25:1a:a9:a2:a0:ba:d9:
81:b1:21:37:1a:59:80:51:ee:d0:7e:ab:a2:fc:e0:70:6b:ae:
70:3b:f5:bd:d8:5e:56:c9:4b:45:de:bd:de:5b:14:73:d2:eb:
40:95:fb:45:67:f1:d4:39:c9:72:99:dd:f1:1e:32:98:6f:fa:
b5:f1:e1:49:14:9c:6a:75:5b:40:52:da:a9:e7:2e:66:52:09:
b5:1e:eb:65:81:57:9e:b6:d1:74:71:2b:40:ec:10:85:46:4c:
88:0b:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:12 2025 by rpki-client