Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96DBCAC89AC211F0A8C997BEDAE4EC9C.roa
File: 96DBCAC89AC211F0A8C997BEDAE4EC9C.roa (raw, json)
Hash identifier: 4D7BtZSHllghoh6pJShipseuWVR2aB2byYbb9jZt7/E=
Subject key identifier: B4:08:5B:89:72:87:9F:51:E9:7A:3B:EB:A1:83:F0:C6:44:5F:F0:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A12D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96DBCAC89AC211F0A8C997BEDAE4EC9C.roa
Signing time: Fri 26 Sep 2025 10:21:40 +0000
ROA not before: Fri 26 Sep 2025 10:21:34 +0000
ROA not after: Thu 04 Dec 2025 10:21:34 +0000
asID: 138915
IP address blocks: 154.93.84.0/23 maxlen: 24
154.93.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106797 (0x1a12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 10:21:34 2025 GMT
Not After : Dec 4 10:21:34 2025 GMT
Subject: CN=68d66934-6b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:e6:6b:fc:1a:a1:2e:0f:b1:70:8e:5d:60:
19:61:d9:f8:74:cb:43:8c:a0:41:4d:f8:73:6d:d5:
a6:6f:67:a0:a4:12:a3:9b:94:ca:27:e1:17:a7:3a:
c9:c6:b6:ad:78:84:ad:44:2c:77:ea:97:b8:28:57:
cc:da:36:99:a6:07:65:18:65:8d:85:b7:76:37:d4:
d1:8d:41:55:cd:69:3a:da:c7:82:8d:3c:05:3d:1e:
bd:e3:4a:72:7e:8b:e8:f9:08:2c:44:2f:59:62:74:
13:b8:bd:66:ea:99:c5:a1:62:9a:e6:fa:35:16:03:
43:02:45:1c:44:f8:1f:0f:7b:5c:32:f0:cb:74:fc:
8f:7b:39:8f:0e:da:27:39:0c:00:a9:32:33:80:41:
bc:c5:34:72:39:da:2a:7a:78:66:a6:ed:ed:13:20:
a5:17:f8:ff:37:09:45:dc:aa:86:50:4e:b9:e4:76:
7a:80:6c:2a:d0:f4:15:10:21:c5:70:2c:67:77:20:
6d:b5:7f:3a:dd:84:71:cf:bb:e6:e7:c6:94:e1:a2:
57:e0:7e:fe:b6:b1:41:6b:47:ef:43:de:ae:6c:57:
00:d9:43:3d:84:78:3f:fb:5d:b5:6a:8f:98:81:88:
f3:c8:e3:26:c9:9f:8b:64:f0:8d:24:3b:be:6a:44:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:5B:89:72:87:9F:51:E9:7A:3B:EB:A1:83:F0:C6:44:5F:F0:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96DBCAC89AC211F0A8C997BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.84.0/23
154.93.127.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8d:32:d9:b7:f7:2d:22:6a:77:d0:ca:01:ce:95:73:e6:0f:
36:28:7f:5b:25:00:28:12:4e:cb:eb:89:db:56:1b:55:6a:c8:
31:41:a5:fe:b0:40:f7:f4:8f:45:f0:8e:32:ea:f4:e0:7e:f1:
b8:92:e7:38:6c:88:e5:72:89:41:3e:b2:8f:c1:75:8e:35:e2:
15:d2:85:18:3e:e0:d2:72:81:ea:b4:be:3f:8c:f0:9d:28:07:
4f:62:1d:0b:5b:5b:31:97:18:42:de:13:31:2b:a9:19:a2:8e:
f2:a7:e0:f8:ef:ee:12:77:07:69:90:a0:dc:80:95:f8:41:4f:
c2:81:4d:17:3d:34:81:55:62:8f:d7:0f:99:c2:fc:45:e4:b6:
13:97:56:7d:bb:7f:6c:e3:c2:aa:c6:98:79:55:99:e1:2b:61:
1b:57:d9:70:17:6b:64:46:2e:c4:1a:44:f3:19:b1:fb:c8:04:
91:3c:ac:ab:dd:bd:5c:45:35:50:4f:ac:3c:52:f3:a0:0f:29:
79:4d:f8:98:a7:1a:e5:2d:0b:2d:10:29:0a:e5:eb:99:c3:9b:
83:da:be:af:6e:db:fe:80:8b:ee:55:03:5f:90:8d:99:86:8e:
4e:bd:15:7d:22:14:2b:4f:97:d6:ad:d8:97:2d:ca:7a:19:d1:
62:a6:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:04 2025 by rpki-client