Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AADFBFDCA9AB11F0B90A5ECFDAE4EC9C.roa
File: AADFBFDCA9AB11F0B90A5ECFDAE4EC9C.roa (raw, json)
Hash identifier: zqw1fEaEQ8PN7Ie1mC3/jAHwlf+AUcvZwn/KVcLU82c=
Subject key identifier: DC:9E:FC:07:05:3F:52:CD:A5:57:ED:E5:13:34:CD:A6:6B:DB:C0:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A385
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AADFBFDCA9AB11F0B90A5ECFDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 09:45:22 +0000
ROA not before: Wed 15 Oct 2025 09:45:17 +0000
ROA not after: Thu 20 Nov 2025 09:45:17 +0000
asID: 19318
IP address blocks: 154.94.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107397 (0x1a385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 09:45:17 2025 GMT
Not After : Nov 20 09:45:17 2025 GMT
Subject: CN=68ef6d32-645b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:2a:8d:2b:e3:0e:1a:6b:0f:70:3d:ab:09:
1e:1e:f2:f2:3c:a2:ca:6d:54:46:49:fe:70:8a:7b:
06:36:03:66:c1:3e:6a:20:2e:4b:07:2e:4e:9a:fc:
7e:30:39:a0:cd:19:b0:27:99:df:2d:96:77:95:bf:
8c:c0:6d:b8:49:29:45:41:2e:ab:51:58:35:ee:21:
53:f6:b4:20:bd:86:f7:98:f4:e0:73:cf:73:5a:80:
6d:1f:82:a6:0c:25:8c:fc:2f:4d:70:a5:01:15:05:
e2:3e:dc:3d:f1:5e:e9:38:d9:60:64:7b:3e:9d:3d:
17:3a:7c:2a:ed:cd:5c:d9:fb:7f:9a:49:bb:c1:5b:
3e:c0:c8:1d:cb:95:3a:9e:23:39:97:4f:41:1d:ee:
c5:b2:36:29:f0:c3:aa:32:bf:8f:64:39:03:16:62:
a8:5a:23:98:5f:2d:89:4b:a5:6b:66:17:02:e8:f3:
9f:43:94:4e:0f:09:9d:cb:ca:31:37:15:e9:c9:8f:
74:b0:6a:25:b2:ce:98:88:d5:b5:1b:9b:8e:c9:da:
9d:91:c1:1d:e9:24:df:c2:92:d2:6b:4b:ef:cc:a8:
c0:73:c1:16:a6:71:74:43:26:9d:25:53:44:2b:de:
13:32:cd:48:f4:db:3c:5d:f8:7b:f5:81:6a:e3:95:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:FC:07:05:3F:52:CD:A5:57:ED:E5:13:34:CD:A6:6B:DB:C0:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AADFBFDCA9AB11F0B90A5ECFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.12.0/22
Signature Algorithm: sha256WithRSAEncryption
75:61:ca:c9:92:39:ff:bd:63:d8:18:a3:93:4e:26:06:b8:75:
be:a6:e5:cd:6c:b9:db:0a:2d:00:4f:4c:ce:df:e2:07:2d:62:
f9:73:15:e9:22:2d:bc:f0:fb:32:3b:89:8e:d4:80:bb:76:ee:
d1:32:12:84:51:5e:18:8b:79:da:f2:a1:e9:10:49:d8:78:55:
1a:d1:14:2c:a2:54:80:dc:d5:c6:17:83:3f:14:1b:7e:47:04:
71:9b:00:81:63:69:64:47:53:8d:f2:2d:3f:fb:4b:4c:2c:52:
1c:be:32:be:5a:94:23:8f:a5:43:1a:c7:38:9a:fe:12:76:b1:
99:04:fd:c1:82:18:de:bd:e8:75:4b:bd:cb:e2:e7:65:8f:7d:
3d:49:58:0e:16:ed:63:94:8e:cf:44:dc:fa:fb:d2:49:d7:c4:
56:3a:92:1b:53:46:df:a9:aa:98:43:85:81:56:c7:e6:ce:4a:
2a:a2:8a:26:80:06:d0:a6:ae:33:b5:39:42:86:db:8f:17:7c:
8f:8f:2c:d5:d5:ad:22:e0:14:d8:42:61:ff:3a:74:32:b2:ca:
a6:3a:45:7a:26:6e:46:19:8c:c4:fc:2d:8f:57:51:74:22:9d:
5a:b8:9e:d7:4b:b6:a1:87:ef:33:9b:4b:8f:c5:fc:ae:ae:4c:
b5:c9:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client