Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D097724871C11F093D1BEB1DAE4EC9C.roa
File: 9D097724871C11F093D1BEB1DAE4EC9C.roa (raw, json)
Hash identifier: PFBI4PnyR6MOBSP0zVEbN6CRG/Kftrsf8FFEwv4GFxU=
Subject key identifier: B1:FA:89:9A:F3:87:C0:A7:64:F8:06:79:24:37:2D:96:46:46:29:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D097724871C11F093D1BEB1DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 10:15:41 +0000
ROA not before: Mon 01 Sep 2025 10:15:37 +0000
ROA not after: Sun 08 Mar 2026 10:15:37 +0000
asID: 21859
IP address blocks: 154.85.0.0/24 maxlen: 24
154.85.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105309 (0x19b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 10:15:37 2025 GMT
Not After : Mar 8 10:15:37 2026 GMT
Subject: CN=68b5724d-25f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:4b:cf:f5:4f:62:92:95:df:91:89:bb:70:
e7:73:35:dd:15:ac:73:a4:5d:b2:79:cd:3d:d7:03:
61:2b:26:ce:35:e4:fb:71:24:e3:76:f8:57:ac:a0:
b9:36:09:4e:7f:6d:32:66:0e:ec:8c:1e:72:78:a8:
df:44:56:ce:c1:bc:be:d9:cd:c0:bb:fb:eb:4a:a7:
d9:79:de:24:bf:51:ad:03:9e:28:09:9e:1a:52:cb:
f5:fd:2c:54:ce:ae:12:69:14:f5:2d:a9:4a:10:4f:
00:15:dc:31:6d:df:52:27:b8:93:63:d8:a9:8f:50:
20:a2:b5:40:e9:06:b4:b9:97:c4:83:aa:3d:c3:91:
80:57:6f:64:fb:14:7d:48:34:46:9e:20:6c:a0:f0:
c5:d9:e4:79:da:eb:f7:f8:a3:64:e3:32:9a:62:58:
5c:9e:0e:db:aa:47:51:08:63:9f:0e:d6:90:dd:59:
6e:1f:c8:70:77:96:bb:7e:74:7f:b3:ea:25:63:4b:
a7:ba:d5:ff:06:69:48:09:46:6a:8d:2f:7e:61:c7:
92:8f:92:a5:d9:0f:41:9c:4f:b2:70:97:20:d2:81:
a7:39:77:bb:b9:96:7d:95:e1:c9:6c:39:ee:a8:22:
c3:fa:52:43:37:eb:ac:4d:63:71:d9:50:d9:5c:c1:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FA:89:9A:F3:87:C0:A7:64:F8:06:79:24:37:2D:96:46:46:29:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D097724871C11F093D1BEB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.0.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:73:af:2d:a5:6b:f1:1e:c8:26:95:65:f3:ab:44:7c:a7:61:
8c:5b:3d:90:ac:ad:8a:d4:c9:78:ca:ee:7b:15:6e:36:27:aa:
71:33:4e:a3:1e:76:aa:8e:6d:f4:c0:ca:d6:02:42:e7:49:51:
62:65:2f:6a:9a:8c:b8:10:cd:4c:7c:ba:fb:56:54:65:4f:a3:
a0:30:4a:fd:69:19:5a:5a:e0:c7:c8:40:eb:e2:7d:fe:6d:c1:
5e:ca:3c:f0:48:d3:8a:3f:b9:06:8a:9c:11:78:ab:25:ad:6e:
e1:93:8c:03:f1:64:13:e9:1c:0b:5d:fb:a6:cf:6a:ee:b1:61:
2f:0b:89:23:f7:dc:a9:5c:b2:c7:2c:55:11:d3:18:1b:37:05:
90:e1:b3:97:36:8a:ec:4b:bf:57:59:25:09:48:9a:27:0c:d3:
bd:85:a1:7b:44:73:03:e9:02:b4:d3:db:9d:6e:e4:5e:8a:d1:
0b:2b:a7:ca:ff:a5:53:8b:36:4b:5e:30:87:77:70:36:ab:2e:
66:81:18:c7:d1:5c:79:e1:43:1d:f5:8e:09:40:14:e3:53:1f:
10:c5:91:bd:4a:7e:3e:30:ee:30:73:78:1b:bf:e3:87:d8:93:
e9:e6:51:e2:80:f3:46:b7:e9:5a:68:4a:1d:91:ed:c6:3f:aa:
eb:26:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:32 2025 by rpki-client