Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AF7C46948111F0B41A34C2DAE4EC9C.roa
File: 94AF7C46948111F0B41A34C2DAE4EC9C.roa (raw, json)
Hash identifier: ngT8UBsWi9gFSKODG/6nau8jvN3vfnrMiZW4EM0TwAc=
Subject key identifier: 2D:EE:3A:8C:69:8A:0D:82:87:D7:D9:B7:6B:1F:C1:12:47:2C:51:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A00B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AF7C46948111F0B41A34C2DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 11:21:12 +0000
ROA not before: Thu 18 Sep 2025 11:21:06 +0000
ROA not after: Fri 24 Oct 2025 11:21:06 +0000
asID: 54600
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Oct 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106507 (0x1a00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 18 11:21:06 2025 GMT
Not After : Oct 24 11:21:06 2025 GMT
Subject: CN=68cbeb28-0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:5c:cb:8b:45:53:88:7f:fd:7d:81:5e:35:
d0:42:32:a2:3f:3c:da:fc:a9:17:1b:09:e1:82:2d:
72:97:b5:a3:73:ff:7c:cc:6d:54:6c:66:22:a1:98:
c2:28:a1:19:09:5b:6f:f6:d7:76:76:54:b2:db:c4:
24:96:b8:89:18:ba:ae:25:6d:28:7c:0b:87:13:18:
6e:f3:d9:3f:9e:21:d4:23:11:d4:f7:71:25:73:59:
50:9a:bc:f2:97:be:8f:9e:60:76:1e:2a:7c:40:84:
d9:dc:6e:6c:ed:3b:20:37:a5:c3:80:18:ad:8f:e3:
e1:c3:ed:a9:24:ad:96:06:27:63:f7:7a:41:0a:26:
0d:2d:73:1e:28:76:d8:7c:1e:19:fb:a1:16:61:37:
71:d0:6a:35:9d:cd:0f:a3:c3:89:61:e3:ff:e2:4e:
50:62:13:22:1b:55:91:12:38:83:35:85:7a:ac:a4:
3b:92:8c:7a:88:bb:4c:65:18:8a:a1:90:2f:58:d5:
16:d3:e5:8b:57:5b:54:dd:e1:24:4c:14:69:db:e1:
05:ec:50:4a:cc:ce:18:e0:43:d9:65:37:06:eb:50:
2c:dc:39:9f:20:de:97:74:a6:9b:9c:f4:93:7a:63:
1d:b3:e4:a7:7f:58:ff:dc:a1:27:c0:d2:b5:40:39:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:3A:8C:69:8A:0D:82:87:D7:D9:B7:6B:1F:C1:12:47:2C:51:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94AF7C46948111F0B41A34C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
c4:dc:c3:21:bd:f6:da:0e:15:f3:60:9a:46:6c:98:63:58:50:
c4:15:8c:d9:0f:8c:08:4b:1c:59:08:8f:d3:64:4f:0e:a5:7e:
f1:36:ef:eb:59:6b:81:c8:f6:35:de:84:51:20:8a:a9:b9:ca:
a4:bc:6c:fb:c7:5c:7e:bf:dc:50:49:cf:e4:02:be:72:46:ac:
67:c8:8a:8d:db:54:59:79:e1:79:69:a8:b1:e6:4c:55:c1:13:
e0:f0:ff:f5:5e:95:83:3d:9c:2d:1f:79:e7:c1:69:bb:2b:65:
94:f6:a1:42:d9:7b:3f:88:6b:4f:e9:37:ea:b6:2a:62:c7:03:
f9:1f:66:5c:40:8d:cc:28:03:84:39:70:0f:db:28:2c:fc:31:
1d:9b:19:ba:62:d0:1f:c3:69:10:2b:f9:36:f6:b8:64:0d:63:
ea:cd:2a:dc:d1:6a:26:06:de:03:07:d8:b5:c1:d9:09:2c:18:
01:d2:e5:28:3f:2d:f1:ae:45:d6:fd:d2:5f:d0:56:1b:32:0f:
48:92:c7:a3:3b:ff:f6:7f:12:fa:94:bc:ae:43:bd:67:d1:c7:
fe:56:9a:30:68:58:b0:8d:f3:e2:2a:ba:fa:87:d1:27:c7:cf:
b6:35:64:4d:14:e3:26:fa:d5:16:e5:31:58:74:27:16:f5:f4:
d7:be:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 20:40:24 2025 by rpki-client