Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A295A3CCAA7E11F090885A79DAE4EC9C.roa
File: A295A3CCAA7E11F090885A79DAE4EC9C.roa (raw, json)
Hash identifier: PFXguvGx3ciyJotPtdYzVqKH6gEpprwcMOSVWf/vjcs=
Subject key identifier: 60:D3:18:89:2D:D9:1A:FA:1F:75:AE:DA:D0:37:5D:0F:82:C2:85:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A295A3CCAA7E11F090885A79DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 10:55:32 +0000
ROA not before: Thu 16 Oct 2025 10:55:26 +0000
ROA not after: Thu 22 Oct 2026 10:55:26 +0000
asID: 58944
IP address blocks: 154.91.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107495 (0x1a3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 10:55:26 2025 GMT
Not After : Oct 22 10:55:26 2026 GMT
Subject: CN=68f0cf24-ef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:ea:76:e7:17:f8:8e:d8:a8:9b:59:67:bb:
e3:0e:b0:93:60:ae:32:0b:f9:51:44:30:0b:23:cc:
a7:89:f1:24:e2:8d:e0:08:4a:da:f2:dc:7c:e1:27:
73:6e:65:0a:7b:53:53:67:e1:2c:b2:8f:27:59:8d:
e2:c5:87:8b:4e:eb:12:0e:9f:6c:56:cd:90:a8:ae:
eb:99:3c:ce:96:ca:34:7b:dd:5b:98:a8:42:87:85:
cc:23:62:6a:45:1f:e8:1e:1c:6a:fd:39:d9:5f:f4:
96:aa:08:38:5a:15:67:0e:8b:31:ac:d4:6d:16:fe:
a6:6b:ee:2f:37:80:e7:2a:9c:7b:4e:6f:a0:21:38:
fb:cf:16:e4:fa:17:e6:bd:10:5a:2b:83:00:d0:c3:
8b:34:99:93:df:d6:a3:11:e9:89:98:05:49:7d:2c:
bb:f0:00:c3:97:fd:cb:28:2a:99:c1:2f:9a:84:80:
2d:88:64:72:9e:43:b6:45:44:76:93:37:9d:e2:b3:
8c:a6:0c:80:9c:0a:ea:9c:91:b8:cf:27:77:76:96:
0a:c6:80:5f:d9:a9:da:aa:c7:f5:d5:b8:16:42:f9:
58:38:d8:83:eb:1f:1d:55:38:3f:34:a4:b8:40:ce:
6f:88:f2:94:ea:66:c4:0f:3e:f6:4e:28:70:a2:45:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:18:89:2D:D9:1A:FA:1F:75:AE:DA:D0:37:5D:0F:82:C2:85:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A295A3CCAA7E11F090885A79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4a:3d:63:07:70:12:1a:9c:ff:10:97:6e:5a:f8:d4:85:66:
32:e4:67:24:ce:d0:1e:fe:ea:74:bb:a1:c6:6e:51:18:a4:85:
b6:62:ee:6b:56:c1:6d:95:e2:ea:f6:62:2b:01:30:4b:f7:55:
66:06:82:6f:ec:54:f9:f9:43:4f:7b:e7:1a:eb:61:46:1c:59:
26:6a:74:94:39:7c:18:d4:5f:4c:38:88:88:ad:9e:5b:91:de:
33:dd:7e:70:60:55:cc:76:ab:21:63:58:4d:7e:d1:65:96:7c:
d0:7f:93:ce:27:76:b4:a8:1e:93:4f:b3:37:16:0d:c1:68:80:
66:d8:8a:bb:96:11:58:79:6c:cd:08:c8:03:b2:10:51:3c:11:
89:c4:85:3f:75:3d:9b:b5:73:41:ce:35:72:22:36:33:b3:2a:
91:48:cf:a5:09:22:56:bc:6b:bc:36:29:12:bc:6f:54:e6:4e:
2c:53:a6:37:b5:1b:56:79:ef:65:0e:41:15:9d:23:80:7e:6f:
a9:0f:73:1c:5c:9a:18:a7:fc:f6:ea:0a:a4:13:4d:2d:a4:f9:
cb:80:eb:d5:f1:fc:46:87:1f:c1:af:8f:91:ae:8b:05:7d:3c:
c9:c9:53:6a:ee:18:6f:a0:d7:47:a0:02:51:c1:0d:94:db:45:
0d:8e:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:40 2025 by rpki-client