Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D43D624B36A11F0AF06EB7EDAE4EC9C.roa
File: 9D43D624B36A11F0AF06EB7EDAE4EC9C.roa (raw, json)
Hash identifier: qu/hTxt6KXaCRAG2IcBtwSlYYXIa8VOdVhu8l7crbKA=
Subject key identifier: 84:BB:C2:24:1E:69:8A:51:C5:34:5B:7D:7E:CE:5A:22:DE:31:7D:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A57C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D43D624B36A11F0AF06EB7EDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 19:24:56 +0000
ROA not before: Mon 27 Oct 2025 19:24:45 +0000
ROA not after: Mon 01 Dec 2025 19:24:45 +0000
asID: 62240
IP address blocks: 154.90.173.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.39.0/24 maxlen: 24
154.94.42.0/24 maxlen: 24
154.94.45.0/24 maxlen: 24
154.94.57.0/24 maxlen: 24
154.94.58.0/24 maxlen: 24
154.94.61.0/24 maxlen: 24
154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107900 (0x1a57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 19:24:45 2025 GMT
Not After : Dec 1 19:24:45 2025 GMT
Subject: CN=68ffc708-505f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:dd:c0:23:38:5c:1d:86:94:f6:19:11:73:
f4:87:51:cf:bc:ed:d6:0c:58:70:a5:76:38:eb:9b:
50:4c:f5:c0:a9:ed:8b:82:78:38:61:53:c4:ec:dd:
0d:f2:a3:2f:60:d5:8f:69:ec:86:ef:bc:6f:c0:2f:
17:ad:cd:11:16:f5:15:10:10:c0:60:fc:76:4d:e3:
81:df:06:ef:5c:37:a0:18:5e:ce:72:ae:37:95:22:
b1:eb:c7:44:ab:d2:d7:eb:bc:71:a1:56:1c:bc:ea:
7c:32:b6:a4:b5:cb:1b:63:8e:3c:d7:c7:89:9b:4d:
d2:8a:3b:a2:7b:d2:51:e6:4e:84:05:a9:fb:36:a5:
f5:35:26:00:4a:78:72:fa:00:ab:24:41:a9:c7:de:
f3:d6:e6:57:ba:90:12:13:3f:fd:dd:d4:ef:6b:a0:
72:5d:e1:e0:2e:5f:42:05:79:d0:ee:ea:f2:c1:23:
c6:b3:09:16:8d:8d:6b:31:43:b6:52:8c:78:97:bd:
a9:55:64:93:ce:9f:cb:78:34:c3:0a:9d:32:0c:2d:
71:d9:32:8e:21:d5:2b:dc:38:6e:9a:ac:41:45:c0:
05:88:62:66:7a:61:aa:05:2e:15:0c:98:f2:f8:af:
a9:38:6b:00:24:20:1d:c0:8f:07:fb:f9:47:95:e8:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:C2:24:1E:69:8A:51:C5:34:5B:7D:7E:CE:5A:22:DE:31:7D:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D43D624B36A11F0AF06EB7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.173.0/24
154.94.34.0/24
154.94.39.0/24
154.94.42.0/24
154.94.45.0/24
154.94.57.0-154.94.58.255
154.94.61.0-154.94.62.255
Signature Algorithm: sha256WithRSAEncryption
d6:db:ad:97:2e:af:45:74:f9:80:c8:4e:9a:71:e8:ee:f7:67:
af:20:ee:43:85:84:e4:36:1b:05:0b:e7:ef:cb:f6:2b:25:5b:
70:bc:7b:2c:7b:1f:1e:be:48:6c:d8:b1:4d:c8:cd:13:13:e7:
f3:63:dc:4b:99:d4:cf:25:13:4b:08:38:9c:6d:5a:a2:a8:6a:
69:72:8e:51:ae:79:da:dc:ee:c5:1c:fd:d2:cd:73:be:6b:c6:
d5:5c:81:08:d0:e5:14:0e:a5:99:f2:43:f5:cf:c0:79:80:08:
74:b9:63:80:d3:33:4d:ba:52:40:89:08:08:2e:59:34:62:32:
db:56:ad:5a:cc:0f:a1:57:3a:0e:2d:64:41:fc:51:54:0d:10:
03:bc:e0:1d:14:61:0c:52:27:33:4b:90:83:eb:fc:3f:ac:52:
8b:bc:e5:78:2c:b5:6f:56:bc:fc:49:bf:d3:3d:a8:1c:16:03:
2c:57:d0:27:46:f3:4b:5b:95:63:5a:be:d5:b6:d7:fb:37:35:
0f:8f:b4:40:4e:7d:1d:59:05:15:59:aa:63:e4:f1:47:97:88:
70:61:eb:70:c6:04:a8:23:ad:2d:b9:b8:1a:40:37:d2:24:94:
a5:6b:12:a9:36:35:a5:80:3f:53:35:9a:30:7f:28:9e:27:5c:
f8:68:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:48 2025 by rpki-client