Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4D31688D5211F0ADE3038DDAE4EC9C.roa
File: 8D4D31688D5211F0ADE3038DDAE4EC9C.roa (raw, json)
Hash identifier: D1A5m5eTZitaqcXIwo82Mwtty63yimHlfu7SskdZ1PY=
Subject key identifier: CA:4A:DD:39:4C:57:D2:6D:53:F2:BF:C1:B0:8B:00:7D:35:FB:EC:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4D31688D5211F0ADE3038DDAE4EC9C.roa
Signing time: Tue 09 Sep 2025 07:56:55 +0000
ROA not before: Tue 09 Sep 2025 07:56:50 +0000
ROA not after: Wed 06 May 2026 07:56:50 +0000
asID: 140227
IP address blocks: 154.86.24.0/23 maxlen: 24
154.86.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106243 (0x19f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 9 07:56:50 2025 GMT
Not After : May 6 07:56:50 2026 GMT
Subject: CN=68bfddc7-3d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:5a:76:f8:ed:16:89:59:93:7a:bf:18:f2:
50:d9:e6:6b:d2:3c:79:89:e7:f3:6e:c8:03:e5:6e:
da:be:65:1c:f2:c9:77:a8:d8:c8:30:9c:57:b8:7a:
50:d4:09:8e:ed:89:d7:1d:b7:9c:22:70:06:b0:19:
6b:39:9c:a9:82:4d:d6:33:a1:f9:35:cd:63:8a:40:
54:ab:7b:17:0d:59:fb:ae:02:44:e7:f7:50:1e:5d:
12:10:e4:2a:00:65:9d:75:89:fe:15:2a:d1:3c:cc:
ef:ae:49:ca:50:de:0a:9f:83:81:46:16:4b:2a:cf:
ea:56:be:e3:11:9a:c1:fc:18:32:ce:29:cb:18:ee:
c5:0d:95:aa:d1:36:67:81:fa:60:53:aa:46:6b:e6:
9f:92:94:b0:cb:27:b9:6d:8e:ec:2c:7d:c8:87:1c:
92:97:dd:66:d2:b7:ee:a2:be:50:23:53:b3:16:fa:
cf:9c:1b:88:3d:db:f4:6c:1e:0d:d9:ca:e9:fe:b4:
b4:82:df:33:95:1c:4c:3d:c6:a7:9e:eb:1c:b9:82:
e0:55:ab:96:d5:f6:17:cc:e9:7e:c7:52:44:04:58:
46:43:94:3d:57:db:4b:ce:a3:20:bf:93:31:63:36:
48:f4:bc:e1:65:f4:63:bd:65:08:81:8a:78:0b:65:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:DD:39:4C:57:D2:6D:53:F2:BF:C1:B0:8B:00:7D:35:FB:EC:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4D31688D5211F0ADE3038DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.24.0/23
154.86.28.0/23
Signature Algorithm: sha256WithRSAEncryption
63:c6:12:9e:3b:10:7d:c6:96:da:c6:fd:0b:7e:09:e8:4b:de:
24:c5:ba:3c:a8:04:a1:8e:43:0f:da:e2:b9:fd:20:78:8a:5b:
eb:d1:db:01:3c:c2:a6:b1:68:fc:7e:d1:88:a9:35:56:8d:ab:
81:3f:17:0f:d4:5e:00:03:8a:33:9e:dc:f0:84:d3:59:f3:dc:
8d:cb:7b:d3:de:54:51:d3:a3:6d:29:83:66:fc:5d:b9:30:31:
9f:e8:ab:34:70:78:9d:85:e1:80:ca:84:85:78:76:74:0a:82:
74:49:39:dd:96:88:68:e4:83:f1:e1:32:3b:76:9b:18:b6:0f:
af:82:fc:84:f9:49:26:43:1e:ba:b6:cc:9c:39:82:04:77:00:
19:9b:c1:30:02:d2:4a:14:4d:23:e2:c7:9f:38:a7:90:1a:ca:
ba:55:52:53:0d:0a:f7:95:2f:27:ae:00:3c:50:b0:94:4a:85:
7b:ff:fb:6a:07:1b:27:3a:90:83:c8:63:77:1d:8d:39:81:41:
f0:9b:e1:90:a8:dd:06:ad:fd:1c:f6:bf:19:83:e2:b0:42:9a:
0e:78:07:07:30:25:71:56:73:c2:98:fb:56:3f:71:5e:65:0f:
2f:c3:9e:07:31:d3:7d:41:1e:82:af:fb:26:93:ac:cf:4d:11:
6e:5b:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:02 2025 by rpki-client