Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E773209DD511F09C7519A9DAE4EC9C.roa
File: 92E773209DD511F09C7519A9DAE4EC9C.roa (raw, json)
Hash identifier: Yj1txqApi/0ME3VpYzrtJqXFg4hS3F2rJCgIXTI1lzk=
Subject key identifier: 2C:79:7A:20:18:0A:ED:F5:D7:9F:44:DC:D0:62:51:F4:91:C9:9D:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E773209DD511F09C7519A9DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 08:15:07 +0000
ROA not before: Tue 30 Sep 2025 08:14:58 +0000
ROA not after: Sat 01 Nov 2025 08:14:58 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106944 (0x1a1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 08:14:58 2025 GMT
Not After : Nov 1 08:14:58 2025 GMT
Subject: CN=68db918b-34c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:18:60:10:b5:3a:ff:ad:9f:c4:eb:38:2c:
ea:f5:6c:e0:53:a0:fb:73:d5:a8:f2:3a:33:af:d8:
ef:f2:2c:db:b3:9d:a6:6b:d8:d2:c5:85:77:bf:cc:
c4:ee:f8:22:ec:2f:ca:1d:11:f2:45:4b:54:72:57:
ea:33:d1:d7:42:f7:a9:b1:8f:9c:bb:d4:00:29:4e:
e8:57:c0:0e:0b:3a:8e:8c:40:66:6a:3c:4f:cc:69:
65:34:55:45:2f:af:98:69:6b:ce:f0:aa:3b:6b:7e:
30:42:8c:c3:6b:14:a1:4e:91:1f:71:e4:f0:66:09:
3b:a3:0e:23:80:1a:70:3c:f4:4a:c5:e7:dc:b6:9b:
c1:17:90:9b:74:87:5f:0d:d6:45:22:62:b3:6e:c2:
30:23:c9:d3:4f:ea:9b:5e:7d:d5:e2:62:76:bc:1c:
2f:82:96:9e:73:89:a0:40:07:64:e5:a8:e9:72:19:
77:d8:c6:95:e4:58:95:a0:6f:5b:65:07:65:4f:e6:
56:94:79:95:e0:76:bb:ce:d6:de:5f:38:2f:9c:bd:
f2:e7:d4:a0:cb:0f:a5:c2:69:b7:80:75:f8:fe:f6:
48:50:35:a2:f7:81:db:c7:dc:d5:e7:c9:57:ed:62:
61:f4:0f:1f:30:57:17:06:35:5f:a2:83:10:2c:1a:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:7A:20:18:0A:ED:F5:D7:9F:44:DC:D0:62:51:F4:91:C9:9D:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E773209DD511F09C7519A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.85.0/24
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:43:91:4a:be:4f:f0:2c:ac:ce:24:47:e4:21:8c:74:00:f0:
1c:b2:c2:a3:da:45:3f:11:8f:71:23:d3:8a:fc:e5:33:79:e8:
4e:a7:77:eb:95:7d:eb:c9:be:f6:e4:e5:92:2c:82:4e:c4:a9:
ef:fb:6c:6f:2a:04:d5:0e:b9:98:22:28:7d:2f:f6:04:d1:c0:
c0:36:b7:4b:e6:1c:d8:71:2a:68:b9:95:1d:d5:74:cd:55:7b:
24:e2:79:da:a4:27:c5:aa:73:16:a2:2f:92:b5:81:86:cb:dd:
58:4e:e5:cd:53:0c:23:5a:4f:7b:67:9b:c6:27:c8:32:19:e9:
fe:f4:f1:17:1f:51:3c:a4:f6:49:a0:cf:be:4e:76:e1:ec:7c:
4a:c7:79:bd:40:da:82:0c:ec:e8:d6:08:d8:81:46:48:30:96:
d3:ac:41:ce:e3:64:66:d3:83:e2:57:60:2c:a1:91:be:24:1d:
76:cd:1e:bf:78:12:8a:b0:b2:d3:7c:ad:31:bc:78:df:19:6a:
0f:7e:3d:a6:07:55:64:25:b6:e2:1a:30:4f:02:49:cd:63:69:
90:42:3a:07:af:8c:e6:a9:65:52:c6:70:2c:f8:46:87:d0:9f:
d2:d3:06:8e:44:20:21:d6:de:d4:c3:cd:fd:fb:79:cb:40:31:
df:5f:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:15 2025 by rpki-client