Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/994D7F8CA5C011F0891A9681DAE4EC9C.roa
File: 994D7F8CA5C011F0891A9681DAE4EC9C.roa (raw, json)
Hash identifier: Gbnb4Vi/BrDWanI8BNN39vAoXZvtq+iA0BNoN9csr9k=
Subject key identifier: CD:9D:3C:8D:12:E3:9A:3C:50:EB:C6:39:1C:A8:C9:42:F6:51:EC:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A33F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/994D7F8CA5C011F0891A9681DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 10:05:08 +0000
ROA not before: Fri 10 Oct 2025 10:05:02 +0000
ROA not after: Mon 05 Oct 2026 10:05:02 +0000
asID: 209242
IP address blocks: 154.84.14.0/23 maxlen: 24
154.84.16.0/21 maxlen: 24
154.84.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107327 (0x1a33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 10:05:02 2025 GMT
Not After : Oct 5 10:05:02 2026 GMT
Subject: CN=68e8da53-3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:a4:6a:61:ae:6f:b5:a8:fb:9f:55:ba:3b:
99:1f:c8:64:18:53:f9:99:e1:b5:7a:ee:b5:08:eb:
91:be:ef:e8:3b:c3:5b:3b:bc:b3:4a:a1:af:06:d6:
02:b2:88:26:d8:a5:c3:b8:e1:74:71:14:b9:a2:fe:
fe:db:bf:45:d0:22:8f:08:ff:cb:84:4e:57:5a:78:
80:be:6d:0b:96:b6:ef:19:38:c0:fb:db:05:bd:3e:
fe:85:57:9a:cb:1f:3b:18:7f:70:88:0b:24:dc:0f:
79:27:79:54:99:d3:17:91:df:95:54:7c:7d:26:5e:
f0:09:73:ec:14:71:92:79:24:a5:83:72:99:ad:37:
50:98:8b:a7:20:89:dd:ab:73:48:54:0d:c5:53:4a:
de:3e:5c:af:a2:63:92:48:12:63:a2:5e:62:af:cd:
58:15:ff:04:ec:5f:fa:7b:5f:9f:92:56:64:6a:a5:
7b:3a:89:82:a3:47:fa:c9:c6:e6:6b:e8:2a:9d:3a:
01:2f:b4:b2:28:ec:0e:58:85:22:54:87:51:2d:9b:
90:8c:82:b5:4f:d4:02:db:ee:eb:5b:fe:13:0d:5f:
75:4b:96:b8:71:10:c6:9f:e1:58:ff:21:7e:e3:f5:
54:c6:1c:17:d2:71:3f:0e:d5:34:f5:96:12:f3:a7:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:3C:8D:12:E3:9A:3C:50:EB:C6:39:1C:A8:C9:42:F6:51:EC:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/994D7F8CA5C011F0891A9681DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0-154.84.27.255
Signature Algorithm: sha256WithRSAEncryption
b0:fd:04:b8:d3:b3:79:3d:be:92:1e:d1:c1:df:a7:86:69:fc:
c8:c0:f9:ef:b8:d4:5e:2e:c2:3b:36:75:26:16:e5:25:c4:2d:
a4:87:81:c4:0f:83:7c:ad:c5:93:5c:86:31:4a:7a:cf:e0:17:
2a:07:03:d7:fc:3d:64:59:4f:7e:be:a6:88:fb:25:fe:bd:c3:
94:5c:5b:92:35:06:b4:48:a7:69:82:55:b6:97:a6:50:53:0a:
ff:61:48:ae:d9:37:82:be:f3:3d:20:f5:bc:a5:b6:28:35:b3:
1a:64:e1:a7:13:75:cb:ad:29:80:8d:bb:8a:81:04:f6:a8:5a:
f8:f2:d6:d3:19:b4:31:58:7e:19:74:9c:33:de:37:ef:ef:bf:
8d:43:f1:13:3d:fb:76:3c:ac:94:8a:45:e6:29:a7:ca:ea:a4:
96:f7:26:8b:6c:b4:2f:55:29:9a:64:b8:bd:3e:69:fc:5c:6c:
bd:fd:46:51:a1:79:7b:7d:be:a4:71:b2:6b:67:b5:13:08:dd:
f7:9c:20:0b:ff:53:51:fb:30:d9:09:a3:ae:ac:51:4e:06:15:
0f:74:d1:96:55:34:0b:fa:0a:63:72:7a:46:0c:c7:be:d9:cc:
52:1c:a8:c1:db:20:7f:9a:37:5f:f4:bb:e3:ac:8d:89:6c:f4:
30:83:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:12 2025 by rpki-client