Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91499D20AA7F11F0940CE17FDAE4EC9C.roa
File: 91499D20AA7F11F0940CE17FDAE4EC9C.roa (raw, json)
Hash identifier: v93Xwzrwcz+EoRucoRxCsN1AFSbGxpMlwY2U+jYzf2M=
Subject key identifier: DD:6C:2A:A5:69:84:8B:05:D2:67:C7:B1:54:04:8E:8E:F0:4B:F0:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91499D20AA7F11F0940CE17FDAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:02:13 +0000
ROA not before: Thu 16 Oct 2025 11:02:08 +0000
ROA not after: Tue 25 Nov 2025 11:02:08 +0000
asID: 203020
IP address blocks: 154.94.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107502 (0x1a3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 11:02:08 2025 GMT
Not After : Nov 25 11:02:08 2025 GMT
Subject: CN=68f0d0b5-b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:9e:ea:a2:32:77:11:6f:e2:97:82:64:d7:
c2:5c:0c:53:51:25:84:d6:39:35:2a:3b:aa:43:47:
d0:e5:4f:31:8a:5f:d6:40:3c:89:10:a7:f1:66:78:
47:ce:db:1e:d5:67:c6:d2:9b:99:05:c1:e9:f5:68:
94:d8:f3:3e:82:8f:9b:3a:d7:4e:48:6e:d0:ba:49:
89:11:25:21:bb:0f:6b:fe:2b:4c:ad:a7:0a:87:3f:
7a:cc:52:ee:73:43:8e:33:24:46:76:76:cf:7c:b9:
1a:9c:70:11:72:6b:d6:38:e8:ec:ef:0d:7d:ba:cd:
f8:cf:4c:4f:07:b0:38:d7:5e:1a:32:6f:6c:87:20:
e0:fb:8c:5b:b3:25:fa:69:a9:89:14:9e:5c:f2:95:
19:68:05:57:75:74:c1:d0:96:8e:46:b1:db:d0:1d:
22:0d:72:79:c2:19:28:67:12:61:31:99:82:cd:35:
be:a7:62:a5:f5:b3:5b:72:3c:b0:fe:dc:3b:36:42:
62:2f:21:6c:18:69:2a:bd:9b:6c:50:2e:23:51:c7:
2a:74:23:2e:ab:e3:8e:27:bb:3c:cf:2c:c1:64:19:
d4:44:20:77:01:98:26:86:23:bd:df:fb:36:a5:c8:
55:c7:31:7d:38:d6:a7:8b:4c:a2:4a:b5:3b:d1:a4:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:2A:A5:69:84:8B:05:D2:67:C7:B1:54:04:8E:8E:F0:4B:F0:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91499D20AA7F11F0940CE17FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:50:f8:43:4b:4b:76:27:7b:c9:a8:a1:01:99:be:15:31:91:
f3:d4:df:47:0b:2b:78:91:df:a7:35:77:6b:0b:97:cc:fb:97:
5b:43:e2:df:d6:d8:bf:41:f8:ee:53:a6:17:18:b3:b2:c7:df:
9e:58:1e:10:09:a5:08:87:40:65:9d:58:6a:d3:e8:b9:ea:aa:
83:c8:c2:e3:4c:78:cb:23:b7:0b:b1:1c:2e:57:3f:d6:20:3b:
6f:27:d9:c1:63:db:04:47:2d:0a:1b:1b:3b:23:ff:2f:fa:14:
5a:42:f9:e4:df:1f:7e:9a:ca:eb:7a:b6:b2:b8:19:1e:7e:58:
3a:3d:ee:54:3b:cc:01:d0:aa:05:dc:8c:6e:d6:57:47:e3:d6:
1e:e2:7e:3e:63:a4:68:b9:ae:73:8c:00:20:17:33:80:01:0a:
48:45:f0:3a:15:03:bb:bd:6b:08:42:11:20:52:4f:22:1f:bd:
85:b7:10:b7:04:9a:7f:de:7d:2b:4b:78:9a:da:78:ff:b0:22:
49:90:12:c1:44:27:18:de:90:ff:a5:fa:3c:83:10:e1:4c:18:
4e:d4:b2:73:07:c7:2d:ee:50:8f:54:8b:b6:fc:4a:ba:6b:d4:
13:99:b2:59:46:c5:71:5c:5b:0b:1d:00:28:5e:93:e1:c3:4a:
c8:d7:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:54 2025 by rpki-client