Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D17075290FB11F0949B46E0DAE4EC9C.roa
File: 9D17075290FB11F0949B46E0DAE4EC9C.roa (raw, json)
Hash identifier: HNLqKD33/4cRzC/MYNzyyMluMBptBeandLTdr9tdduc=
Subject key identifier: D6:AA:61:CD:FF:82:2C:CE:2E:77:22:13:58:49:8A:03:90:E0:02:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D17075290FB11F0949B46E0DAE4EC9C.roa
Signing time: Sat 13 Sep 2025 23:44:40 +0000
ROA not before: Sun 14 Sep 2025 23:44:35 +0000
ROA not after: Sun 19 Oct 2025 23:44:35 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 23:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106379 (0x19f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 23:44:35 2025 GMT
Not After : Oct 19 23:44:35 2025 GMT
Subject: CN=68c601e8-9039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:ae:a8:36:61:da:75:c0:74:a7:52:0f:76:
db:f9:a8:b0:c2:99:aa:a9:15:14:62:ec:7e:76:63:
2c:cd:72:83:42:0b:2b:02:c2:dc:cf:a3:af:b7:da:
e1:5e:2a:c5:57:a6:92:05:05:fb:a9:f6:06:20:33:
62:20:74:51:d9:a9:9d:77:85:27:5c:d5:b1:a6:48:
74:18:a6:a0:d8:1b:e8:70:42:a8:0b:b2:fe:d5:84:
47:f5:cf:a1:54:a0:2d:5f:e7:49:43:0a:0d:94:90:
ed:a0:1d:6c:3d:fc:00:d7:50:59:bb:a1:ab:98:c8:
24:ae:c0:54:31:e0:51:62:4a:d0:12:54:71:59:39:
ec:fd:e5:cd:5d:67:c4:3a:53:58:89:b9:51:58:e4:
3c:88:7b:3e:98:e4:93:59:6c:70:eb:62:84:31:82:
2e:df:5a:b4:41:56:42:d8:01:12:1c:b8:26:36:b1:
b1:90:1c:d2:4f:e1:2f:08:50:ac:01:78:b6:da:97:
5f:49:1d:e9:d4:74:71:e7:94:2d:90:4e:c7:63:6b:
a0:aa:a5:c5:f9:b8:be:71:8e:08:0f:f4:3e:52:8a:
81:0c:ab:0e:90:ac:7f:26:dc:80:a6:02:db:4c:cd:
ca:2b:c1:81:98:d1:3b:aa:f3:bb:21:10:69:f6:de:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:61:CD:FF:82:2C:CE:2E:77:22:13:58:49:8A:03:90:E0:02:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D17075290FB11F0949B46E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e7:1b:86:34:bc:82:c6:90:69:f9:ae:47:03:2c:00:7f:99:
38:b5:a2:99:44:ee:8e:77:ef:a9:5f:d4:ef:01:b3:f4:e1:00:
40:1b:5d:88:4d:2c:fb:e9:d0:9e:67:21:75:f9:e7:e9:0b:2a:
69:ef:70:c0:eb:10:75:a8:27:85:9d:9e:48:b0:6d:04:6a:c7:
ca:90:c7:11:f5:f3:d0:11:21:61:2e:44:04:40:de:f6:76:4c:
5b:cf:90:fc:a3:4e:f1:29:f5:84:c8:f8:49:ef:e0:de:ad:a6:
80:b2:c7:f3:2f:33:9b:0f:59:67:e4:0a:72:32:6b:25:2f:8b:
1f:5d:c3:d1:e2:b7:6b:7d:55:f8:06:70:42:79:b5:62:dc:a2:
67:72:72:56:f6:ae:06:e5:72:3c:71:e0:d9:c5:06:7d:a6:36:
56:b5:99:bc:fd:d6:08:aa:d8:a8:43:cd:00:54:7f:68:04:f2:
e3:94:e4:20:44:87:fb:f9:99:a6:ba:7f:1d:db:d3:d2:83:ec:
9d:4f:d2:58:94:47:85:2a:ad:18:0e:12:fa:9d:d1:97:30:4e:
b5:12:95:82:7e:28:c7:9d:34:80:b7:9c:15:b8:a0:b8:b3:88:
15:56:04:2c:be:67:66:68:33:25:5b:e5:12:c9:4b:20:c2:cb:
44:ad:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:59 2025 by rpki-client