Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BDBA4BA8B5111F08990357EDAE4EC9C.roa
File: 9BDBA4BA8B5111F08990357EDAE4EC9C.roa (raw, json)
Hash identifier: dF334e2CmXldL+43am6055oKeU6/fewy3Yyf2P2nTfk=
Subject key identifier: E2:28:DB:1F:05:A0:4B:0E:3A:1E:DA:14:E7:69:CF:BA:7C:C1:64:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BDBA4BA8B5111F08990357EDAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:45:08 +0000
ROA not before: Sat 06 Sep 2025 18:45:02 +0000
ROA not after: Fri 05 Dec 2025 18:45:02 +0000
asID: 6453
IP address blocks: 154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106100 (0x19e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 18:45:02 2025 GMT
Not After : Dec 5 18:45:02 2025 GMT
Subject: CN=68bc8133-833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:6f:2e:a6:69:16:28:e0:14:ec:7a:7d:c0:
bb:ab:22:ca:bb:48:8c:2e:3d:85:b7:27:f0:70:e0:
3e:63:df:53:9a:7c:8f:e0:f1:61:d8:55:74:b5:89:
0a:65:f4:a9:a6:a3:67:be:20:c0:e8:5c:1a:52:42:
87:a7:ab:4a:89:6e:9d:70:2a:c5:09:13:02:7f:f9:
5e:ce:28:52:d2:10:fd:97:85:9b:1e:14:22:a8:37:
30:88:2a:c5:9a:93:55:fd:86:ef:31:3d:b9:96:12:
f8:31:01:6a:26:4d:20:d8:b1:8b:68:fe:b2:0b:92:
cf:6c:f0:a7:ca:fb:ae:b2:84:89:b0:66:60:6b:4a:
f0:51:28:74:e9:44:45:63:64:e7:1a:98:2e:52:1a:
78:26:6f:4d:d5:15:28:2d:55:59:eb:c0:41:c3:3a:
3f:5d:23:5f:e5:35:c5:86:81:da:ba:03:1f:d2:66:
7a:81:49:8c:4d:dc:7e:a6:26:e8:e8:1f:ad:7e:d6:
08:ca:49:f3:72:91:4e:2c:c4:9d:63:03:0c:e4:56:
7f:94:7b:0c:f4:2f:63:b8:b7:3f:3a:24:c3:47:fa:
71:c7:21:66:f7:43:69:96:d3:96:1e:56:42:a6:29:
ec:3a:70:e4:df:04:fd:d1:01:ab:d9:00:1a:dc:f8:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:DB:1F:05:A0:4B:0E:3A:1E:DA:14:E7:69:CF:BA:7C:C1:64:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BDBA4BA8B5111F08990357EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:be:05:db:d9:4b:ab:23:f5:45:1d:3b:a5:9c:a6:a5:49:84:
9c:93:6f:56:d9:16:4c:df:b1:f1:19:f5:a7:27:36:90:76:57:
a2:71:8c:0c:57:3f:f4:34:1e:6b:45:41:28:57:c2:15:44:79:
44:37:03:12:0f:a9:35:5c:1c:fa:4a:67:2d:bd:19:d8:95:bf:
c7:e8:60:1f:22:fa:c3:c0:53:10:af:08:71:2a:18:78:b1:7b:
82:78:37:ef:fd:24:5d:fe:3c:d9:1f:c2:a1:fc:4c:a6:a3:76:
5b:6a:ce:12:90:ee:67:43:d0:3c:ee:a0:f0:0d:ce:1c:38:96:
4e:0b:4b:82:76:c5:04:a1:36:88:35:3b:fd:a6:cd:7f:ff:2b:
f3:e6:00:18:e8:f3:09:6f:f5:92:c7:45:58:41:bd:9b:4d:f1:
d4:35:20:ad:09:ab:37:93:28:35:a6:2f:6f:e9:e8:8d:ec:11:
fa:74:c1:b8:39:4d:d1:2c:25:26:15:ec:95:21:bf:56:59:b0:
20:86:d9:54:40:d7:ba:4b:e4:7a:0e:e3:ce:66:4c:c1:38:b1:
99:98:7d:37:f0:3b:6c:c1:33:b8:0d:02:60:06:6d:40:fa:59:
2f:cc:d3:d0:41:0d:8b:95:1f:ad:76:2f:07:2b:7a:6f:bd:72:
8f:03:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:47 2025 by rpki-client