Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7BF9B84998D11F094EF84DCDAE4EC9C.roa
File: A7BF9B84998D11F094EF84DCDAE4EC9C.roa (raw, json)
Hash identifier: 3tscBWGB+SoRUvKhYxKV3jGBbg8RNhPQsCH8zhsl7b0=
Subject key identifier: E1:1C:EE:CD:C0:47:98:26:59:E2:CD:56:94:69:98:B6:A6:15:BD:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7BF9B84998D11F094EF84DCDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 21:30:13 +0000
ROA not before: Wed 24 Sep 2025 21:30:08 +0000
ROA not after: Tue 21 Oct 2025 21:30:08 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106704 (0x1a0d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 21:30:08 2025 GMT
Not After : Oct 21 21:30:08 2025 GMT
Subject: CN=68d462e5-3247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:9d:53:07:f6:f3:a8:e3:53:7d:29:09:f3:
20:c2:7c:8d:41:df:e4:15:5c:fc:cc:c6:52:33:09:
a4:da:a6:48:97:18:a3:ca:5d:ce:08:6d:ff:f9:1f:
91:78:35:88:4e:ce:90:56:d8:1c:ec:cc:d0:5f:15:
18:0a:48:b9:a5:5c:e9:3f:bb:12:98:c6:ad:36:b3:
de:2a:d5:9d:2c:3e:15:53:ad:5f:44:99:61:64:9c:
b1:8d:00:96:43:df:58:12:b0:46:c2:b1:31:9d:be:
6d:e3:c2:3d:39:9c:c7:1a:52:06:d0:bb:a3:0d:6a:
59:0d:fa:a3:fc:02:5d:6c:ca:38:00:49:fb:b1:2f:
82:8c:52:60:50:e7:bd:32:43:79:80:74:b3:9a:50:
f5:a6:b9:1b:d5:0a:a1:39:02:f0:45:4e:2d:03:f2:
6a:01:82:ca:9e:3f:28:b9:c7:31:34:6f:39:47:ab:
ac:5e:de:2d:4d:fe:d5:6c:e9:3a:a4:6b:3b:55:d4:
04:78:40:71:21:71:56:3f:4d:61:8a:45:c8:d8:c1:
4c:74:a0:bc:94:75:a1:56:73:60:25:8a:a5:99:38:
d6:f3:33:84:b6:c9:19:f0:bc:ce:35:b9:c3:87:d5:
8b:33:18:4a:7a:8b:1f:ae:5e:b4:93:11:21:5a:53:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:EE:CD:C0:47:98:26:59:E2:CD:56:94:69:98:B6:A6:15:BD:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7BF9B84998D11F094EF84DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:f3:11:ad:9f:db:22:e4:b6:d8:69:ae:a1:82:a9:ed:b3:17:
b9:d0:8f:49:ad:e1:62:b8:d3:32:62:1d:2d:6f:9a:6e:b2:2c:
9a:c9:33:5a:cf:05:98:01:09:f2:d6:95:ef:0b:ae:86:83:bc:
c0:b4:b2:f9:40:a8:5d:98:38:d7:30:69:dd:ee:cf:c6:e4:23:
07:a0:3b:ad:e4:c0:a5:cc:77:1a:75:15:4c:4e:c3:d1:2f:80:
79:e1:d0:04:4f:59:f3:dd:cc:7b:b9:49:41:38:0c:36:f6:42:
12:27:b2:99:ca:b0:ff:e8:be:ce:28:5f:34:43:ed:81:1e:a3:
a0:8b:99:77:15:43:62:bd:75:ec:0c:15:a3:19:e8:d3:39:89:
67:04:3c:23:a5:e1:1b:7c:d9:b7:11:2c:df:a5:c4:b5:22:c2:
05:b8:bd:0e:c3:f8:33:ce:c5:b0:b4:f1:5d:87:a4:9c:74:13:
c3:7d:3f:66:b5:00:ed:e6:4b:3f:2d:b2:d7:d9:19:14:cd:55:
8c:ca:4a:9b:79:5a:11:f3:ea:9b:e6:ef:ba:3d:4f:8c:91:48:
8f:35:bc:62:2c:82:7f:a3:cc:b4:0b:dd:bf:e7:1c:0c:f4:a0:
c8:bb:77:45:ff:60:08:61:90:89:67:2c:ba:f2:93:4e:1f:80:
21:9b:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:56 2025 by rpki-client