Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E11DB02873A11F085E945F1DAE4EC9C.roa
File: 9E11DB02873A11F085E945F1DAE4EC9C.roa (raw, json)
Hash identifier: lPN1Apku4A+ar5XVg+I2aWctDuQF3c5ZXxw5EZzXED8=
Subject key identifier: A7:C6:CA:2D:E7:A7:DC:1A:2D:4D:73:B5:6C:71:CC:FB:27:F8:63:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E11DB02873A11F085E945F1DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 13:50:28 +0000
ROA not before: Mon 01 Sep 2025 13:50:23 +0000
ROA not after: Thu 13 Nov 2025 13:50:23 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105343 (0x19b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 13:50:23 2025 GMT
Not After : Nov 13 13:50:23 2025 GMT
Subject: CN=68b5a4a4-38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:8b:b1:84:0e:d4:43:50:1b:50:47:6d:b2:
e8:b0:1a:5f:89:37:73:05:18:c7:f5:30:b3:f8:39:
8c:40:08:ea:e7:1a:bb:67:16:eb:8a:87:28:81:d1:
07:d5:c3:67:d3:5f:48:91:93:ad:fa:52:6d:e9:23:
49:5e:fc:92:04:77:61:fb:31:56:53:9a:4a:11:d0:
6a:b7:7f:41:14:e9:21:34:77:83:39:ae:5b:f0:af:
f0:5c:a2:f6:7a:17:8b:7f:a9:9d:a0:6f:97:ae:56:
8c:89:c8:34:1d:59:06:ca:d4:3d:7b:1f:7c:1e:dc:
65:03:8b:4a:f7:c2:82:d2:0f:ca:93:2c:e0:e7:05:
75:17:da:98:99:ac:fd:6e:3b:6b:a0:47:80:db:5a:
a8:b3:09:33:64:9e:22:da:f8:08:c6:88:0c:5d:30:
99:56:51:87:b7:7a:fc:95:e8:35:94:a1:6a:c9:82:
0d:3a:ef:7b:36:ea:a7:7a:ee:40:94:ff:5a:c7:26:
ea:a2:4e:4f:2d:2c:7a:fc:6f:a6:9f:44:46:f4:e5:
9b:29:b3:10:23:d0:3e:96:5a:1a:c5:b7:88:48:51:
a5:d7:86:c9:96:38:f4:b2:92:46:f2:2d:c0:2b:69:
bd:18:af:46:79:40:8c:d1:fa:42:3f:8c:76:85:d2:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:CA:2D:E7:A7:DC:1A:2D:4D:73:B5:6C:71:CC:FB:27:F8:63:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E11DB02873A11F085E945F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0-154.91.223.255
Signature Algorithm: sha256WithRSAEncryption
59:6c:62:09:61:0c:e6:7e:cd:94:88:1d:8f:6d:8a:ca:63:80:
cc:33:b3:f8:63:f2:14:46:a9:19:02:95:1e:0c:b6:a3:38:02:
6d:a2:49:ae:9b:0f:1b:a0:fb:17:e3:64:6d:ca:47:f0:aa:7c:
83:7c:4b:cd:49:31:46:2f:fd:cb:48:ae:a8:67:74:41:db:b6:
c0:5e:53:be:3b:34:82:b4:02:1a:9d:4b:7e:02:dc:66:4b:13:
b5:82:0f:08:e5:f9:2c:72:a4:8d:df:92:f9:41:5d:af:80:67:
64:b7:62:89:55:e8:0b:b6:22:0d:39:99:d2:8d:61:30:e5:62:
68:9b:a4:f1:c4:fa:f1:19:42:85:d1:cc:a9:46:30:d0:70:04:
58:42:28:04:74:9d:9c:ca:27:39:c8:14:9e:04:41:51:10:41:
bd:05:0f:cf:ce:0a:c3:21:22:da:4f:b0:74:4e:43:8f:76:cf:
7f:f8:f1:cb:4e:f1:4a:de:78:3c:81:3c:ba:4c:6a:f4:81:bd:
25:4a:be:34:5c:ff:78:10:ea:e1:f2:9d:7a:c7:0a:c7:5c:0b:
2a:e9:1b:fc:e3:6c:66:a5:18:00:49:7d:b6:f0:89:9c:90:01:
47:01:d2:65:71:5a:b4:b5:e8:97:de:c7:07:fa:9a:f4:25:0a:
9d:4f:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:39 2025 by rpki-client