Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3F2B2A8B4F11F08220F1F2DAE4EC9C.roa
File: 9E3F2B2A8B4F11F08220F1F2DAE4EC9C.roa (raw, json)
Hash identifier: 42smIvztqZmvyF1hq25k3bJgzJZGARumgrtb434ktyI=
Subject key identifier: 71:02:87:81:F5:8E:17:A3:95:4C:45:C2:1D:C5:9C:17:1A:B6:E0:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3F2B2A8B4F11F08220F1F2DAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:30:53 +0000
ROA not before: Sat 06 Sep 2025 18:30:47 +0000
ROA not after: Fri 05 Dec 2025 18:30:47 +0000
asID: 46071
IP address blocks: 154.209.6.0/24 maxlen: 24
154.209.7.0/24 maxlen: 24
154.210.203.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106094 (0x19e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 18:30:47 2025 GMT
Not After : Dec 5 18:30:47 2025 GMT
Subject: CN=68bc7ddc-c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:dd:ac:3b:85:c3:d3:4a:4b:8f:5c:42:de:
0f:c1:a5:25:e0:69:72:0c:fd:85:98:ec:05:a8:4b:
08:9f:e4:7d:2f:46:72:76:43:bd:2d:69:04:68:89:
0b:86:7c:a1:ce:ad:b3:58:72:3e:59:67:71:83:62:
16:f6:51:f1:2c:be:84:b1:d4:13:23:1f:0d:4f:60:
a4:0b:33:62:35:2a:06:26:ae:af:f1:8c:8f:80:dd:
ce:41:de:2c:2f:2b:95:17:5d:c2:1f:5f:d3:67:56:
78:1a:de:d4:7b:85:ae:9b:53:05:0f:6f:38:f5:ca:
26:70:c7:94:a7:3f:1b:61:37:af:50:4f:c9:9b:a4:
87:5d:10:83:9b:ed:07:7c:25:1a:1c:94:db:f2:52:
37:6c:6b:3b:01:23:d4:86:af:1e:2a:44:af:af:6e:
20:32:a7:5b:ba:50:ec:6e:6e:35:84:9c:29:58:e9:
f3:d9:e5:50:8b:74:73:4c:6b:67:b1:fe:fa:34:be:
bc:6c:b6:64:93:a9:e3:b7:ee:3f:44:f6:dc:3c:3f:
3b:2d:6d:a0:5d:bb:cb:d5:30:37:5c:88:9c:6e:af:
d4:01:7c:de:2d:79:0f:c9:0a:dc:9f:37:57:f7:6b:
89:69:04:d7:a6:09:c9:e1:2c:11:1a:85:36:e7:8f:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:02:87:81:F5:8E:17:A3:95:4C:45:C2:1D:C5:9C:17:1A:B6:E0:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3F2B2A8B4F11F08220F1F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.6.0/23
154.210.203.0-154.210.204.255
154.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
21:db:19:26:27:0f:8a:41:e5:89:fe:33:55:69:c0:1f:cf:7f:
07:79:8e:51:98:3a:2d:76:b9:0e:96:d7:c2:4c:c3:68:4d:fa:
44:71:02:18:51:59:69:ba:b5:79:58:f7:c5:6c:e7:fb:8d:18:
ad:79:00:00:21:6e:1f:44:30:84:17:1f:85:ba:62:6b:34:a0:
a0:be:45:fd:79:f0:c4:ff:06:10:09:45:d1:31:d5:e3:0d:cc:
67:ca:7b:82:8b:d8:40:ba:14:98:40:24:ad:94:49:68:df:4b:
ba:da:60:fe:e9:b8:e2:6d:3f:8b:8d:3e:00:42:f0:40:be:5c:
1f:ed:0c:ee:78:88:29:0a:d4:b7:d3:f2:05:ea:94:0f:0c:72:
84:fc:69:19:3c:37:fb:36:6b:61:52:a7:93:da:04:f5:10:ff:
41:1f:00:95:0f:4a:ca:e4:70:1b:3e:55:c3:f5:56:4d:4c:7a:
9b:31:92:2c:95:f3:36:e7:f5:45:7c:37:3b:e9:fa:82:9c:cc:
e6:e0:02:fd:df:66:3d:fa:7a:5d:f1:da:0e:bc:47:6c:fc:02:
4b:32:a7:b3:46:10:1e:07:c3:c9:e1:42:d7:94:63:00:a1:b2:
3a:2d:bf:93:8a:0e:32:b5:6a:35:d5:bd:6e:e3:0e:fc:a8:94:
2e:a3:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:25 2025 by rpki-client