Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5978A5A8CAA11F0A77BE4C2DAE4EC9C.roa
File: A5978A5A8CAA11F0A77BE4C2DAE4EC9C.roa (raw, json)
Hash identifier: LWtcWo2ocfg/yC49R/X7KoVcOc1QjaUOcibIAsLi7Cg=
Subject key identifier: 8C:E0:1D:3A:FC:B0:9D:72:A0:21:9C:B6:85:76:FD:56:6B:05:5F:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019ECF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5978A5A8CAA11F0A77BE4C2DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:55:00 +0000
ROA not before: Mon 08 Sep 2025 11:54:55 +0000
ROA not after: Mon 27 Oct 2025 11:54:55 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106191 (0x19ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:54:55 2025 GMT
Not After : Oct 27 11:54:55 2025 GMT
Subject: CN=68bec414-7146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:9e:15:0c:fc:15:77:7d:d9:b1:77:3d:73:
6f:92:b1:0d:ea:8e:40:19:95:eb:96:b0:c1:4d:d4:
a8:9f:bc:41:78:01:df:f2:23:32:04:44:5e:77:22:
77:e4:a8:38:f4:e4:49:47:28:cc:a1:94:10:24:a9:
db:a6:69:9f:d7:bc:0e:48:48:b9:8f:da:ba:6f:e4:
0b:8f:0f:9c:7f:e9:fd:3f:78:fe:88:9c:79:20:92:
52:71:8a:b2:48:f8:99:92:c7:d5:23:f2:31:be:64:
b5:a7:e2:6e:d0:15:96:85:30:14:df:1b:2d:52:8a:
cc:82:97:c5:b7:c5:50:45:bc:47:0b:54:bd:0a:7a:
b0:cc:b7:ec:08:9c:10:89:87:7b:4c:4e:9a:16:71:
0c:3a:95:0e:96:2c:dc:ae:ac:a9:fb:d5:61:2a:51:
cc:2e:55:a9:5c:bf:7a:d0:62:63:53:57:8c:17:68:
54:2d:ee:28:cc:53:da:04:63:85:f1:90:6f:ed:19:
d0:c4:a2:ad:29:b8:9d:71:cf:ef:bb:e9:14:81:50:
4a:12:e7:c2:6b:bc:3f:70:7a:d0:1c:b2:bd:d5:eb:
d4:c7:b4:18:0f:24:7a:37:7c:da:06:64:a6:93:58:
0a:75:17:9c:e8:4c:72:a0:36:4f:cc:1d:98:c5:c7:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:1D:3A:FC:B0:9D:72:A0:21:9C:B6:85:76:FD:56:6B:05:5F:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5978A5A8CAA11F0A77BE4C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:a9:f9:15:11:e8:0b:9f:93:8d:eb:3f:4b:e6:4c:ca:93:24:
7f:b3:89:d7:c9:47:b8:a7:28:ee:77:8b:5d:44:71:0a:44:c4:
cd:54:ab:75:d5:f8:fb:4c:6b:ee:7d:ad:73:a3:92:40:ad:c3:
51:1e:09:3b:34:d9:6d:5a:43:d8:1b:c5:2b:89:b2:a7:ce:97:
7d:55:7e:52:0d:23:0d:d2:da:db:66:83:45:49:cd:f8:b6:29:
84:aa:54:60:4e:b8:e1:c7:6e:29:2c:60:1f:d3:6d:4a:9d:0a:
0c:d8:99:e1:7f:8d:76:16:61:ef:15:f2:3c:ea:06:91:ba:82:
27:a8:df:69:9c:1a:6e:a1:bf:05:91:c0:b2:42:a9:da:01:6c:
18:0b:57:39:6a:ef:07:78:ff:37:de:6a:7b:e7:cb:83:d3:60:
01:cc:23:4d:78:b6:ed:99:41:b2:3a:93:c6:54:63:a4:bf:7e:
2a:9f:b2:24:92:38:02:84:55:a9:f2:c9:45:14:f3:d4:1a:40:
85:06:0f:26:87:0c:4d:e2:46:37:50:c8:25:9e:9c:6a:49:d9:
8c:15:98:84:04:dc:06:e5:ac:c3:ef:f8:33:5a:a3:45:a0:54:
1a:97:db:6a:f7:fe:a9:9d:8e:8d:c4:da:29:35:0e:a5:7e:0e:
d8:c5:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:58 2025 by rpki-client