Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB6C8829F6011F08D08E0A9DAE4EC9C.roa
File: 9DB6C8829F6011F08D08E0A9DAE4EC9C.roa (raw, json)
Hash identifier: kcNMNhnS7qIQZPsEvBGqno372n8C8W2Gx9rh1xwgLs8=
Subject key identifier: BD:1A:FC:6C:34:15:21:6C:67:94:29:9E:F7:01:5D:7A:C7:8B:6F:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB6C8829F6011F08D08E0A9DAE4EC9C.roa
Signing time: Thu 02 Oct 2025 07:22:56 +0000
ROA not before: Thu 02 Oct 2025 07:22:47 +0000
ROA not after: Sun 02 Nov 2025 07:22:47 +0000
asID: 60171
IP address blocks: 154.197.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106992 (0x1a1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 2 07:22:47 2025 GMT
Not After : Nov 2 07:22:47 2025 GMT
Subject: CN=68de2850-c3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:df:9c:f8:cf:e5:11:5f:ba:36:07:fa:26:
ec:6c:b5:36:a8:ac:16:b0:d8:d0:72:94:90:e1:cc:
c1:e2:9a:1e:63:b1:1b:e4:9c:e9:28:0a:a8:6a:fc:
65:62:f6:27:24:29:90:d5:05:98:1e:ec:b9:70:c5:
9d:63:45:78:3c:1b:16:25:8b:a5:c0:b2:48:a3:65:
ad:df:0c:23:fd:e5:bb:7b:27:95:20:b3:6f:a0:20:
ec:13:c2:5f:89:79:e3:9f:37:2b:ee:17:87:22:d6:
d9:ee:70:83:5c:c7:cf:42:58:63:c6:fb:21:4b:d1:
22:96:3c:d7:20:a3:7b:d4:de:d2:a6:cb:d9:2e:29:
21:f3:ba:9e:2c:f6:bc:fc:7d:2b:12:a2:d5:79:7d:
dd:21:4c:e7:25:59:66:07:c0:04:fa:c3:40:d2:92:
7e:9d:8a:dc:ce:6a:a2:8a:9b:bd:db:ca:3b:c9:88:
97:13:0f:17:3e:26:af:1d:53:d3:f6:06:0f:cf:c0:
57:e2:cb:28:06:8c:a8:cf:f3:a2:20:c7:0b:2e:fe:
45:16:07:05:0f:87:ae:ce:a0:5c:bc:ea:e3:0f:7a:
38:0a:2a:75:21:56:f8:04:bb:d4:b1:43:e1:5f:8e:
ad:83:e7:54:54:bc:d1:37:1a:6c:0c:90:ab:0b:cd:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:FC:6C:34:15:21:6C:67:94:29:9E:F7:01:5D:7A:C7:8B:6F:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DB6C8829F6011F08D08E0A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.123.0/24
Signature Algorithm: sha256WithRSAEncryption
12:36:f7:a9:04:b0:69:a9:85:89:17:61:7e:64:66:65:a5:84:
52:26:d7:c8:92:34:c1:fa:c1:1b:17:08:f5:63:66:36:98:7f:
6d:28:80:49:40:0a:e7:ff:50:bf:60:7b:aa:52:94:81:1b:02:
2d:cf:fc:19:47:18:d8:1d:43:9a:87:15:93:7c:83:e0:c0:d6:
b4:ea:77:9d:9e:bb:59:8d:2d:a3:b3:f3:fb:3e:d2:34:13:42:
2e:01:77:27:af:c3:3f:d6:38:2d:a6:4b:6c:9b:a0:aa:de:5e:
a3:ec:ce:97:84:04:22:52:96:8f:32:2d:83:69:12:09:86:a4:
6a:d3:0d:3b:8c:19:b5:e6:12:66:0e:79:7c:dc:c0:96:4d:f0:
3c:3d:e1:81:a3:58:1f:05:ed:91:bc:4b:74:2f:a8:2a:64:6e:
9c:a1:0f:e7:af:35:4f:70:2b:7f:dc:2b:3d:87:e7:15:1d:ff:
4c:0a:af:f2:5c:e2:18:ce:af:66:a1:5d:19:2b:f3:56:02:2b:
4b:25:ea:31:9b:83:b0:f3:b6:f5:3a:d9:49:be:58:24:1f:53:
14:14:af:7b:20:66:cb:39:95:c6:74:ca:b3:d9:95:8c:b1:d6:
26:8f:e3:1b:1a:1a:4e:27:0c:e1:b0:c6:e6:d4:48:06:99:e2:
93:6f:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:48 2025 by rpki-client