Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55C65AC947E11F097C126ACDAE4EC9C.roa
File: A55C65AC947E11F097C126ACDAE4EC9C.roa (raw, json)
Hash identifier: qs6xHA4Q4sqm4BhisB3ODxT9N7pGruwj3GeW0Kovy9E=
Subject key identifier: AF:9D:D9:92:CF:80:0D:E8:77:AB:A8:33:D7:A8:9E:0A:C9:BB:82:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A009
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55C65AC947E11F097C126ACDAE4EC9C.roa
Signing time: Thu 18 Sep 2025 11:00:11 +0000
ROA not before: Thu 18 Sep 2025 11:00:05 +0000
ROA not after: Fri 31 Oct 2025 11:00:05 +0000
asID: 57043
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106505 (0x1a009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 18 11:00:05 2025 GMT
Not After : Oct 31 11:00:05 2025 GMT
Subject: CN=68cbe63b-64a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:5c:ed:0b:08:94:64:49:eb:e8:5e:cd:3e:
c3:71:d3:b2:f6:a9:f6:d9:13:56:20:0d:55:95:1c:
ec:81:99:71:df:ea:ca:f0:38:86:94:ec:54:e9:b1:
7b:7e:6b:6b:ca:f8:28:37:e1:d5:4e:20:bb:af:66:
d2:b9:43:6f:cf:88:ab:61:38:10:80:ac:69:bb:42:
b9:95:ea:54:d5:6d:74:af:a8:fe:2d:07:b8:ec:fb:
9e:72:42:1d:19:41:92:ed:57:f2:70:9d:3b:d9:4a:
d0:0a:5c:13:f6:ee:ae:e9:aa:17:e1:f1:73:33:97:
32:cc:0a:42:0f:42:f2:5d:b8:8c:63:09:b3:b1:fd:
31:0f:0f:52:3e:6e:bf:5e:24:b4:ea:14:07:a5:e3:
c4:f4:ac:46:79:2e:8a:79:7c:12:2b:60:cb:31:90:
2c:13:26:42:ec:f1:1a:62:d8:17:e8:8f:b1:23:3c:
a8:b8:7d:95:36:74:f1:b3:7e:89:92:ca:42:65:86:
ea:85:8b:11:26:ca:7f:94:fc:2e:75:69:ab:4d:3e:
2a:dc:d4:2c:71:ca:3d:0a:72:fb:f6:0f:57:c8:cd:
6a:27:17:e9:12:31:c7:40:55:fc:3e:30:8b:73:1a:
9d:88:16:15:1b:45:13:e9:ef:79:95:28:78:c7:ef:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:D9:92:CF:80:0D:E8:77:AB:A8:33:D7:A8:9E:0A:C9:BB:82:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55C65AC947E11F097C126ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:a6:33:c7:99:a4:8c:66:64:30:a6:20:f9:d7:28:b3:cf:02:
cc:3d:5b:52:b8:5b:ae:2a:8d:69:aa:e5:b0:b5:83:3f:0d:14:
6b:2c:d5:28:03:2c:3b:c1:c3:68:bb:08:98:eb:25:ce:81:0a:
6a:45:d4:e9:ee:93:b5:8d:65:d8:9e:7f:ef:42:09:15:81:1e:
a1:81:b2:eb:4b:67:dc:47:31:ac:38:73:23:e4:e2:d4:28:e1:
e1:17:b4:ed:2b:23:de:a1:92:81:2e:ec:c4:95:24:6d:07:f7:
33:b1:ca:7d:a0:69:28:ec:69:f3:ba:ed:c8:6e:ad:49:0e:17:
c1:f2:b0:a1:c2:e1:84:1a:81:9c:bc:63:77:a2:8b:0f:fb:56:
fe:a7:cc:98:16:25:20:f9:03:93:f6:a5:30:3c:dc:99:1b:62:
0c:5d:47:b7:a8:99:ba:a5:59:42:62:7b:0c:7d:af:0f:27:0f:
63:99:53:ad:95:7a:ee:92:f2:ba:cb:32:7a:c2:66:b5:b7:e8:
e3:57:b0:e4:05:75:4d:d1:ab:d1:6f:51:2e:a1:99:82:3e:74:
d1:6f:d9:40:b8:03:e0:01:13:ed:d1:63:15:57:75:11:2e:fe:
f8:1b:56:1c:f5:c9:1b:58:38:a8:e5:ca:9a:f1:d9:4c:f1:88:
07:9d:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client