Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B2A92AAB3611F0BE136FA4DAE4EC9C.roa
File: 87B2A92AAB3611F0BE136FA4DAE4EC9C.roa (raw, json)
Hash identifier: Ub4BMS5q5CPpWO6b7cesKCVhZfexTpb5xsnvNlcNh5A=
Subject key identifier: ED:F1:7C:B3:49:8B:87:23:2E:12:81:48:A1:8C:0F:E4:9A:FC:53:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A41C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B2A92AAB3611F0BE136FA4DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 08:51:55 +0000
ROA not before: Fri 17 Oct 2025 08:51:50 +0000
ROA not after: Mon 24 Nov 2025 08:51:50 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.148.0/23 maxlen: 24
154.89.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107548 (0x1a41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 08:51:50 2025 GMT
Not After : Nov 24 08:51:50 2025 GMT
Subject: CN=68f203aa-d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:c9:9c:13:5d:d7:8c:10:44:b2:d2:da:47:
33:81:35:2f:24:bb:18:26:dd:58:86:2f:8c:99:3a:
b8:07:af:fe:a0:56:2a:9a:9c:ff:4f:7f:9a:dc:15:
dd:04:f9:7a:7b:ce:93:79:1e:22:a5:8c:bb:8f:62:
8b:f4:9c:2c:3d:eb:6e:a8:74:4d:99:fb:52:9e:9e:
34:7f:7e:a0:7c:1f:9e:ee:18:8f:04:74:00:4a:d2:
2c:63:3b:9e:b5:5e:6f:47:3b:1d:67:1a:8d:67:4f:
3b:a0:c4:66:33:1f:94:25:fb:62:8e:0b:19:30:85:
d6:2e:f7:d6:bf:3f:22:34:f5:70:aa:3c:ce:b6:50:
6f:6c:8b:c7:13:bf:bb:5c:6a:ec:56:48:9f:02:85:
84:ed:c6:50:d0:8b:0c:9d:9e:80:d4:f6:fd:86:66:
ba:49:f4:0c:96:68:86:8d:d6:4f:1c:c0:2e:c1:68:
53:8c:a0:15:6f:8c:23:7b:a5:72:a6:30:73:63:3d:
84:9d:df:f2:b1:1c:a6:16:4e:d7:86:36:90:72:42:
ae:39:1f:bc:73:13:4b:71:91:d6:7d:1c:e9:44:01:
72:3f:37:a6:1a:e4:4b:1c:bf:34:8b:95:93:46:fb:
8a:a1:2b:4c:d7:15:08:cb:5d:8e:a0:bc:f3:1a:49:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F1:7C:B3:49:8B:87:23:2E:12:81:48:A1:8C:0F:E4:9A:FC:53:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B2A92AAB3611F0BE136FA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
05:d1:11:93:0f:49:08:ae:0a:12:4b:f7:76:c8:1b:cf:28:42:
2a:38:99:41:8f:4c:41:63:ad:a5:05:9e:1e:19:5e:fc:0a:1c:
51:60:15:44:d4:92:9c:e9:c5:ed:2f:6d:c0:4a:44:c8:80:ba:
64:85:24:4a:d7:c7:d9:24:ff:13:ab:50:6f:87:ae:3c:dd:ab:
c9:c3:94:1f:60:4f:f9:4e:9f:a1:93:d3:da:ae:9e:bc:29:72:
9b:cd:5c:fb:fa:d7:e7:06:bf:b5:b1:ee:54:a4:c5:cc:36:f9:
81:b1:ad:01:36:77:0d:01:71:ba:74:e6:53:b5:03:83:06:da:
33:55:2d:78:cb:ba:fe:b5:ad:c6:36:a2:44:55:4c:ac:d0:5c:
7b:73:55:f8:e7:84:cc:80:d2:4f:9d:48:34:33:5b:cf:93:b4:
32:4a:27:da:73:8d:8a:e6:c5:b4:43:50:31:72:4a:f5:cb:b2:
a8:7c:3c:67:f5:39:99:b4:ce:67:81:de:5d:1e:ad:f3:9f:cd:
20:8b:fc:28:4e:6e:c4:12:77:3c:98:eb:a1:da:86:4b:59:c7:
09:cb:6c:5c:a5:1e:fd:3b:ec:16:c7:52:db:47:2b:94:f1:4d:
05:4e:63:90:6e:a5:5a:ee:bb:19:c6:c8:6d:49:98:cb:3f:f8:
c9:76:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:11 2025 by rpki-client