Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB9021EA76D11F09AE205DCDAE4EC9C.roa
File: ABB9021EA76D11F09AE205DCDAE4EC9C.roa (raw, json)
Hash identifier: c67JlhH8K7JwpOne/Gou3Kgk5KvemzPbgudEIn6pTvA=
Subject key identifier: DC:74:EE:8D:F9:53:FD:4A:1B:91:67:E0:62:B9:13:12:16:BB:F8:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A353
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB9021EA76D11F09AE205DCDAE4EC9C.roa
Signing time: Sun 12 Oct 2025 13:16:33 +0000
ROA not before: Sun 12 Oct 2025 13:16:27 +0000
ROA not after: Tue 11 Nov 2025 13:16:27 +0000
asID: 19318
IP address blocks: 154.88.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107347 (0x1a353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 12 13:16:27 2025 GMT
Not After : Nov 11 13:16:27 2025 GMT
Subject: CN=68ebaa30-de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:16:6d:b9:b8:37:bf:28:d4:84:62:d6:a2:
bc:9a:93:6f:91:ec:7d:78:83:19:a7:ba:e2:b8:14:
3e:18:1b:70:ac:c3:26:e7:03:cf:c9:f1:27:74:2e:
d5:6d:06:4e:f7:52:b6:3d:19:c4:09:f8:ff:71:41:
92:c5:0b:39:5e:a9:1b:64:f4:1b:42:b1:87:e1:2c:
d3:82:2f:6d:92:79:88:12:22:28:10:b5:77:f4:69:
b5:61:0c:ff:e3:20:c5:65:75:24:0f:bc:67:03:7f:
5d:8d:29:39:3d:26:c2:13:99:fb:0b:a0:43:53:bb:
ad:ea:68:dd:c1:30:cc:b8:81:2e:1c:00:49:61:01:
4e:2e:5b:42:29:bb:78:ca:8d:a9:54:63:95:c9:98:
5c:f1:d1:ca:c0:51:b0:3c:d7:da:6d:75:b0:55:0d:
fa:9e:2b:b0:d5:01:40:81:d2:37:0e:e2:fc:19:89:
56:ac:cc:72:8e:5b:50:4f:34:7a:bb:11:05:9c:62:
d5:31:29:96:d8:23:44:93:e6:dd:b2:aa:5a:42:30:
7f:d6:2d:a4:49:7a:33:11:30:7b:69:bf:bf:0d:a2:
b7:49:83:b1:91:d7:d2:4a:9e:a6:b1:31:57:23:f3:
d2:7d:41:57:f4:dc:1c:81:5d:f2:2d:5a:2d:2f:ce:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:EE:8D:F9:53:FD:4A:1B:91:67:E0:62:B9:13:12:16:BB:F8:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABB9021EA76D11F09AE205DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
82:a9:d5:0f:e8:e2:56:f1:42:a4:0e:fb:01:b4:99:5c:90:d2:
12:f5:32:61:48:82:ec:53:78:c4:67:bc:71:7c:87:29:37:f0:
6d:34:3f:33:ca:2e:85:d7:98:04:94:63:a4:f3:87:80:3e:13:
ce:d6:e9:0a:b6:06:28:ec:00:1f:23:b1:a0:a2:d1:94:fe:c6:
80:3e:e3:bd:1f:79:cf:cb:73:60:b5:1c:bb:6a:7d:14:76:69:
39:b3:aa:e6:04:2a:1d:5c:82:fe:a3:7c:60:11:00:a4:95:2b:
e9:c9:7c:fb:75:b8:26:61:27:ed:3c:a3:8e:3c:da:c2:09:40:
b0:88:74:58:a0:81:34:aa:55:9e:5a:11:f5:ff:67:58:bd:49:
79:ad:46:14:e5:08:33:c7:c3:19:64:9b:35:8c:bc:b4:3c:4f:
d0:14:1b:16:1c:82:92:80:23:18:d6:20:66:ec:68:a6:1d:5d:
f7:fd:9b:07:64:5a:9d:56:0d:7b:1d:7c:31:c2:97:97:bc:21:
53:47:e8:35:58:49:95:0a:8b:93:ee:82:0f:ab:88:25:3c:30:
01:37:0f:18:23:35:9b:4c:20:25:5b:56:c6:dc:db:76:24:7e:
ef:a3:8a:3b:05:aa:60:23:64:d5:03:64:ee:dd:62:b0:b4:3d:
e7:d2:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:31 2025 by rpki-client