Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8EE924099FA11F0976ADAADDAE4EC9C.roa
File: A8EE924099FA11F0976ADAADDAE4EC9C.roa (raw, json)
Hash identifier: e3RFeSakvAQulflWdjhlGj7BmYzlhXXfXFTF04BNym8=
Subject key identifier: 91:1B:B1:9C:F9:73:3C:8D:BF:86:F8:E0:85:38:48:62:39:E0:6A:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8EE924099FA11F0976ADAADDAE4EC9C.roa
Signing time: Thu 25 Sep 2025 10:30:31 +0000
ROA not before: Thu 25 Sep 2025 10:30:25 +0000
ROA not after: Thu 04 Dec 2025 10:30:25 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106749 (0x1a0fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 10:30:25 2025 GMT
Not After : Dec 4 10:30:25 2025 GMT
Subject: CN=68d519c7-4ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:38:52:c1:41:9f:95:a8:db:35:f8:e4:30:
00:e1:e7:dd:3b:54:51:8d:b1:c9:89:2f:14:ba:a0:
57:a5:60:c9:26:94:74:64:59:2e:9c:6a:c4:3e:24:
4a:6a:e8:9c:e9:10:82:c7:32:dc:fe:3b:20:a7:7d:
17:a0:54:3e:59:73:00:53:cf:92:c3:50:1d:77:b4:
19:b6:bc:5f:70:22:8b:3d:db:d9:e0:5b:43:0d:76:
a5:76:09:48:77:13:39:c6:81:bc:e1:92:87:62:41:
f6:80:cc:40:c5:7e:30:5a:b0:c4:cd:1a:9e:72:aa:
88:7e:40:a1:f9:51:7b:66:d3:f1:21:e5:e8:f4:01:
ac:24:3c:cd:29:25:76:3b:92:6a:99:75:c2:9b:e8:
60:1b:27:a5:75:d1:bc:81:73:46:de:76:34:40:d4:
af:41:70:8a:fe:5a:de:67:e9:70:94:10:90:9e:4e:
d5:26:c6:f3:79:c7:3a:8d:61:26:e0:f5:a2:c6:03:
8f:0a:ad:1f:16:3d:76:ff:a4:69:0d:4a:d1:3e:2b:
56:16:12:a9:31:a9:02:c4:f5:13:91:e4:f5:32:c5:
9f:4a:61:f7:c5:d0:98:c6:61:13:bb:ad:27:45:3d:
8c:0e:e0:66:99:17:7d:e4:9f:27:ef:54:9f:57:a0:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1B:B1:9C:F9:73:3C:8D:BF:86:F8:E0:85:38:48:62:39:E0:6A:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8EE924099FA11F0976ADAADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:00:da:25:3f:51:23:03:04:0a:4d:74:95:cc:3c:2a:db:0b:
26:74:03:2a:cd:3c:2f:f9:7c:5a:9d:d9:92:23:0d:78:19:7c:
0a:2a:c8:87:d9:99:0b:a0:76:9d:42:df:b2:46:ce:cd:17:80:
f9:b2:bc:f2:a9:20:1c:7c:61:86:81:b2:7c:91:4f:cb:fa:fb:
47:41:d1:71:b6:8f:41:08:b2:21:b9:10:95:d0:6c:5b:4a:25:
73:a0:d5:11:2d:a0:b3:b0:f1:c9:f5:0e:cf:5c:20:f9:64:e0:
80:08:6c:1b:c2:04:af:4f:db:2b:1f:a0:0f:7d:78:6a:af:68:
b3:e3:52:3c:63:b3:48:c5:d0:ee:c0:a1:3a:20:6a:60:2f:9c:
5c:59:80:86:cb:43:e9:62:c9:4c:b6:0a:68:69:41:f8:e5:46:
d5:82:10:68:72:08:22:eb:44:78:b9:a3:43:21:1b:d1:86:ca:
4d:93:4e:16:90:e6:30:15:37:d3:6a:72:f4:cd:21:ef:a3:a6:
92:95:29:5e:04:d2:8f:cd:a2:c4:a8:68:8b:49:c9:5c:9c:70:
cc:9b:4a:0c:df:b1:04:43:e9:85:17:03:a0:a5:07:2a:29:97:
c1:36:f6:14:24:a9:e5:b1:1a:c8:9f:64:aa:49:4c:0e:fb:2a:
cd:e3:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:04 2025 by rpki-client