Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92EBFAF0953111F09A6BC0B4DAE4EC9C.roa
File: 92EBFAF0953111F09A6BC0B4DAE4EC9C.roa (raw, json)
Hash identifier: JaQkaByebQKN8vHV1VORY7aoF+GRfq39qaEuY9SbY84=
Subject key identifier: A3:AC:64:77:A5:CC:50:D0:67:A4:D4:A0:20:41:86:76:EC:86:1C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A023
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92EBFAF0953111F09A6BC0B4DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 08:21:00 +0000
ROA not before: Fri 19 Sep 2025 08:20:55 +0000
ROA not after: Wed 29 Oct 2025 08:20:55 +0000
asID: 20326
IP address blocks: 154.193.134.0/23 maxlen: 24
154.222.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106531 (0x1a023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 08:20:55 2025 GMT
Not After : Oct 29 08:20:55 2025 GMT
Subject: CN=68cd126c-d809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:b2:00:c1:24:5b:1f:a9:7a:86:21:25:7c:
40:4b:ca:de:68:0a:75:4a:9b:be:5a:4b:c7:c2:e0:
71:cb:9e:17:35:07:64:dd:f3:12:af:2b:2f:10:f7:
ef:c0:30:fd:6d:ab:f9:11:95:75:e1:84:e4:a8:7d:
0d:3b:e8:5c:4f:fa:2c:33:20:85:0b:b3:a0:be:8b:
2d:d7:29:39:89:9c:11:dc:1a:88:2c:2c:17:90:dc:
3b:d7:2b:d0:83:99:eb:46:0e:90:b2:f7:7f:e4:ea:
9d:b9:db:f3:aa:4c:e1:ed:2d:42:ac:86:02:22:cc:
d1:90:29:52:84:4e:c2:07:a2:43:c0:1d:57:79:b9:
f2:65:6f:70:1e:61:9e:c8:c3:b4:5d:6e:88:f3:f7:
59:91:aa:b8:48:24:6e:db:10:66:5e:fa:ed:02:c1:
e2:6d:c3:82:35:c0:bb:57:f1:be:e3:08:85:63:5a:
14:23:dc:e2:ff:26:0e:75:f8:19:31:04:2f:56:a3:
38:f1:30:13:ed:9d:c8:1d:02:7a:11:79:98:53:df:
6a:48:b3:96:c0:5e:11:16:46:5f:06:44:ad:e9:12:
8f:bb:f8:24:d1:74:58:67:f2:95:1b:38:e9:ff:11:
24:34:9a:d3:31:3f:a6:fd:e9:34:0c:07:a7:3a:67:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:64:77:A5:CC:50:D0:67:A4:D4:A0:20:41:86:76:EC:86:1C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92EBFAF0953111F09A6BC0B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.134.0/23
154.222.118.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:d8:df:51:67:48:2a:fc:db:dd:8c:ad:99:3c:64:4b:ff:06:
68:f0:f1:4e:b3:2c:4e:f4:d6:02:04:a7:5c:cc:dd:73:2c:ae:
74:14:00:2b:a2:93:72:bc:43:14:a3:9f:2a:bf:18:22:4f:11:
1b:9e:d0:ae:15:d0:7f:f8:94:f4:78:38:a2:14:78:2c:1b:99:
a9:cb:30:17:86:0b:1c:9c:10:49:23:f1:cc:11:6f:55:e8:e6:
7d:1d:d4:81:37:35:82:79:97:f4:c6:2b:3d:bd:05:7c:30:97:
2d:73:4e:1c:b0:0b:c7:eb:42:f3:62:ed:fa:ab:c4:b0:b5:b3:
30:7d:98:85:40:d4:71:29:1e:a3:b4:48:e4:57:cb:1c:0e:99:
99:ad:7e:bb:b8:39:28:61:4b:23:e6:79:2b:52:f7:cf:bb:ad:
ef:f5:14:4f:00:11:99:d8:3f:d2:8c:60:a5:e8:b7:04:4f:70:
46:88:ab:b0:c3:e7:d2:f3:f2:24:ea:0e:cb:10:b2:d4:3f:01:
d9:52:07:2b:40:68:c2:25:8f:bc:e0:ef:7f:fa:1c:ef:91:e4:
e3:0b:86:2c:eb:da:12:0e:4b:45:87:23:cc:85:71:c7:ac:e2:
3c:7f:91:46:a9:f8:cd:da:d0:c0:0e:75:fa:da:76:8c:ee:c9:
ab:a8:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:30 2025 by rpki-client