Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EF58948A5711F0B37387B3DAE4EC9C.roa
File: 95EF58948A5711F0B37387B3DAE4EC9C.roa (raw, json)
Hash identifier: wtQeDHTWhSYtB+dmNi0cNW2wmvT5Oi6IbQ/wZ6W83RI=
Subject key identifier: FA:4E:49:67:9E:C8:A0:9A:60:08:CE:29:95:64:A4:D4:B9:22:8E:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EF58948A5711F0B37387B3DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:55:23 +0000
ROA not before: Fri 05 Sep 2025 12:55:16 +0000
ROA not after: Fri 12 Dec 2025 12:55:16 +0000
asID: 398993
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106040 (0x19e38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 12:55:16 2025 GMT
Not After : Dec 12 12:55:16 2025 GMT
Subject: CN=68baddbb-5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:db:21:2c:50:98:63:cf:14:8e:23:ec:0f:
8d:18:88:29:34:f2:9e:0c:d4:b4:3e:d9:1b:5c:be:
9b:92:ce:d0:e3:c4:c5:6b:73:47:93:11:49:28:2c:
4a:bb:26:a0:05:15:ba:ca:95:02:4b:93:ec:fd:a9:
e4:12:93:67:27:34:91:b2:66:7d:ef:17:d6:4b:82:
b4:41:5b:5d:13:eb:a2:56:4d:6c:e4:18:b5:2f:96:
8c:56:ee:e7:10:1a:98:ee:54:66:c9:f0:72:d3:b3:
6a:d3:d8:cc:6a:64:19:bb:22:73:0b:f0:27:db:ce:
a4:b8:c9:0c:09:7b:4b:07:a4:a1:9f:c4:ae:dd:34:
bb:27:68:63:0e:66:3f:0a:15:64:6a:30:06:e3:c4:
12:6c:be:bc:3b:15:90:2a:36:3b:62:fa:4a:68:0d:
50:35:20:01:17:34:d2:3f:16:c6:97:e4:e8:ec:21:
62:62:0e:a4:cd:b6:8e:6e:7a:08:50:e7:61:d5:a4:
d9:07:7d:92:06:80:9a:ef:9b:85:db:75:8c:be:75:
44:4b:df:dc:c9:be:9b:26:66:27:74:5a:33:67:f4:
5a:b5:dc:39:69:c0:b7:00:93:b2:2b:4f:bb:7f:68:
97:42:92:ef:ac:11:5e:96:54:33:f9:69:cb:ed:41:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:49:67:9E:C8:A0:9A:60:08:CE:29:95:64:A4:D4:B9:22:8E:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EF58948A5711F0B37387B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:58:7c:7d:bd:32:1f:7e:a1:8f:b7:4c:c5:32:ee:b9:75:6e:
5f:8c:58:5e:c6:31:3f:8c:a3:27:64:0b:6b:4f:81:6c:95:0b:
43:f8:20:9c:a8:58:53:f3:b5:26:d0:0b:a7:7e:9e:95:a0:2f:
ce:79:fc:2f:78:43:b2:9d:45:f7:b2:db:a7:ad:46:4a:f4:4f:
12:ed:ec:53:92:0c:9f:4c:67:16:da:06:72:9d:18:a3:c4:98:
a4:07:66:b6:71:7b:36:c8:9e:cd:64:08:0c:50:db:95:90:4e:
c2:0c:c8:52:ea:ea:60:cc:52:af:72:58:2c:ca:dc:75:89:fa:
06:c7:a9:e5:15:a7:05:14:05:62:cd:8f:fd:e2:29:4b:4c:ad:
87:85:40:98:c4:77:56:98:21:87:b0:4b:24:65:91:eb:ac:71:
bf:7d:a9:33:92:f6:3e:1a:2f:3b:72:b5:8b:bf:33:48:65:65:
9b:35:5e:c6:37:20:4e:fd:0a:bf:d3:81:28:90:fa:0e:a0:80:
80:fd:c1:ad:9c:6e:f9:dc:25:c3:2c:7a:9f:a6:fc:89:90:ff:
b2:29:2f:13:9b:f0:1b:2a:b3:30:f3:01:ae:db:06:9e:ec:3f:
30:26:8b:b8:00:60:44:97:39:2d:46:3c:39:20:30:e8:87:cf:
a2:fa:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:52 2025 by rpki-client