Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95FD352AE8511F0B0623481DAE4EC9C.roa
File: A95FD352AE8511F0B0623481DAE4EC9C.roa (raw, json)
Hash identifier: mhKzM7v8Mu46zhDo7QK06eC6EyxqoK8G+5P8qUCnBk4=
Subject key identifier: 37:4F:CC:D2:DE:92:4A:56:58:4E:E0:24:49:47:74:94:1D:96:26:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A496
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95FD352AE8511F0B0623481DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 13:55:55 +0000
ROA not before: Tue 21 Oct 2025 13:55:43 +0000
ROA not after: Fri 28 Nov 2025 13:55:43 +0000
asID: 211687
IP address blocks: 154.193.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107670 (0x1a496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 13:55:43 2025 GMT
Not After : Nov 28 13:55:43 2025 GMT
Subject: CN=68f790eb-4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:49:59:cc:0a:ba:57:f3:bc:1c:69:a5:2c:
de:a1:db:87:02:ac:4e:ab:ad:0b:e6:36:aa:32:99:
5f:db:86:af:47:bf:99:e0:74:9e:d5:1c:9c:58:11:
bf:62:dc:6b:db:43:e3:03:b4:4e:a5:dd:e1:5f:3e:
b0:dc:a4:33:9a:ae:6b:b1:cd:7e:06:63:f0:cf:e9:
c0:0c:9c:45:81:d8:39:6b:42:eb:cc:a1:bd:d8:ec:
8f:0c:6b:e1:26:ff:b8:9a:09:f4:2c:39:86:e2:3d:
75:e4:d6:3e:da:4e:9a:4f:69:aa:81:85:f9:bb:37:
14:4a:4c:92:dc:6e:1f:81:79:3a:31:5f:ff:80:6c:
e4:1b:d4:0e:46:5b:5e:ab:42:14:0f:ed:cb:b5:6c:
99:56:2c:95:a0:bd:31:69:92:12:22:d3:4e:2d:b2:
6d:86:32:78:8b:b8:f3:24:70:a9:bc:1a:a4:42:75:
ae:b8:81:a4:18:b7:e7:3f:cc:a4:6a:1b:0c:71:2d:
9e:29:b1:24:14:69:92:72:ba:9b:f2:78:e4:1d:0c:
6f:02:15:7c:93:1d:b9:b0:87:16:de:9f:f1:51:5e:
e6:7c:93:aa:1b:5c:41:00:96:09:b7:13:f2:3b:2c:
99:4b:6c:73:31:0f:cf:6d:e2:b6:68:d4:0f:fb:db:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:CC:D2:DE:92:4A:56:58:4E:E0:24:49:47:74:94:1D:96:26:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95FD352AE8511F0B0623481DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ca:f7:ff:96:1c:bd:80:b4:81:7b:63:2c:0b:77:b9:01:93:
f9:a2:c5:ee:15:1e:e7:c0:7b:4f:79:d9:03:1b:4a:dc:2f:a4:
82:0a:62:7e:45:0e:e8:22:6a:43:1c:65:0d:4f:0b:60:07:9a:
08:01:33:8b:77:d3:00:c4:18:d1:af:fb:ab:ef:ac:a9:85:ad:
1c:90:55:cd:d7:08:5b:73:50:f7:16:e1:2c:9b:75:df:be:38:
1d:8c:7d:61:c6:03:90:27:6d:59:fb:7b:e3:6f:9c:cc:72:ad:
b9:ec:e4:8b:b6:66:c7:ad:46:a5:e3:3c:2c:0c:ae:c5:d9:45:
a5:e7:cc:8c:b1:b1:3f:39:00:cf:2b:bf:21:96:d7:b5:23:92:
e1:8d:8a:e2:fa:fb:02:83:46:0d:d5:d3:7d:25:7b:f9:fa:85:
76:ff:8f:ec:38:64:25:ba:d6:a1:73:b7:7a:ed:01:22:b9:75:
51:52:94:9c:ea:52:5d:64:02:d6:0d:3e:16:50:9d:69:80:17:
6b:e7:24:f9:e6:6b:50:8e:13:cf:19:9c:ac:5e:5b:a4:8f:8c:
92:74:cc:8e:e9:2a:54:62:d2:df:65:af:2b:58:8c:29:5a:6d:
ce:da:67:f0:bb:ed:b6:f6:4e:02:a1:da:4b:dd:18:4b:12:80:
f5:f4:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:57:45 2025 by rpki-client