Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE5229899F411F0B8168F88DAE4EC9C.roa
File: 9DE5229899F411F0B8168F88DAE4EC9C.roa (raw, json)
Hash identifier: r0XcEmzGm9T1up68gojM1LvOIBAxCxpzFwsD2yY2DXA=
Subject key identifier: 3D:5B:F8:D8:55:6E:49:6F:A8:33:5F:C1:CB:DD:22:CB:65:2C:02:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE5229899F411F0B8168F88DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 09:47:15 +0000
ROA not before: Thu 25 Sep 2025 09:47:10 +0000
ROA not after: Wed 26 Nov 2025 09:47:10 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106735 (0x1a0ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:47:10 2025 GMT
Not After : Nov 26 09:47:10 2025 GMT
Subject: CN=68d50fa3-a2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:5f:92:0d:6d:fc:e6:af:7b:b0:4c:26:77:
71:b9:7e:a0:83:79:4a:3e:ff:e6:32:58:87:dc:bf:
52:5e:1a:0c:d1:9d:40:cf:6f:3f:5e:ac:3c:57:2e:
a9:8b:f5:d5:6e:73:36:84:ee:ff:a7:87:4d:76:3d:
a5:ed:3c:a7:7f:86:6a:fa:bc:56:0e:18:8e:e1:46:
a2:f3:45:3d:c7:e2:90:0a:2a:16:a3:69:03:fb:0f:
ac:d7:50:e6:60:65:71:a7:ea:d2:94:22:45:8c:55:
84:a0:09:d1:96:ce:9a:32:d6:42:23:3c:a0:b3:1e:
dc:da:6a:bf:07:56:9b:c6:13:81:de:bd:d4:c7:60:
87:d2:33:c2:56:33:e6:c3:d3:4f:cf:b1:4c:6b:ba:
18:20:e4:3e:06:74:b7:9d:b8:37:d4:b6:cf:c2:7c:
5e:fa:5a:10:66:7b:62:67:3a:f8:34:7e:1e:47:b4:
5b:f1:c7:e5:34:b6:6b:4c:c9:83:79:5f:02:46:4f:
ac:38:53:d5:c8:63:5c:27:ed:29:50:b8:17:e3:65:
d7:d5:72:1b:bf:e3:31:d7:a1:74:ac:b3:2d:40:ed:
ab:5d:41:ee:04:91:cc:79:cf:d7:bc:4c:1a:58:03:
b2:a2:13:fd:b7:60:3b:71:73:06:25:f5:06:a1:c7:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5B:F8:D8:55:6E:49:6F:A8:33:5F:C1:CB:DD:22:CB:65:2C:02:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE5229899F411F0B8168F88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dd:60:07:82:6d:8d:8c:bb:32:bf:1b:d2:f8:76:d4:77:c8:
65:86:90:1f:ad:7b:24:f4:2f:e7:13:e2:17:b4:5e:64:cf:40:
2e:17:dd:82:1b:02:90:e5:3c:ee:f2:3e:fa:bd:39:23:ad:33:
a3:be:73:0f:4e:b6:ce:9a:ec:aa:2b:64:9a:e6:70:32:37:93:
38:e5:2e:89:26:66:3c:ce:86:f7:48:59:d3:77:c5:11:7d:5f:
13:79:e0:1a:b4:9d:55:7c:58:b8:8c:7d:c5:f7:b3:1f:40:52:
b7:fd:3d:60:c5:7c:c8:d8:cb:51:46:35:3b:2d:32:91:5e:cd:
e6:c8:75:0b:69:ac:e4:f5:0f:1d:5a:b1:e9:41:97:8d:3c:19:
9b:59:09:0a:ce:33:a3:8c:f7:ab:e0:ff:1a:84:f3:51:ef:a3:
57:9a:e4:8e:74:c3:d7:71:d9:fa:aa:42:9d:73:0d:3e:07:cb:
99:7b:cf:3b:99:a0:e2:14:9d:ef:0d:c5:a8:e4:c0:40:d4:80:
86:b1:50:fb:aa:74:09:0c:5c:02:d9:92:ee:f3:63:f6:e2:c7:
a9:4a:0e:d8:03:47:02:f4:35:be:42:15:f3:4b:10:3d:3f:63:
b2:97:67:b5:d2:8a:57:1a:a2:08:ec:df:97:7e:43:19:44:4e:
30:0b:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:07 2025 by rpki-client