Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B34BA3ECAA8D11F087C157D7DAE4EC9C.roa
File: B34BA3ECAA8D11F087C157D7DAE4EC9C.roa (raw, json)
Hash identifier: Yn9yItfeggvCoHfmLISpssOqrOLij1Zw+TzR6FB5gEU=
Subject key identifier: 93:F7:99:0A:5E:5C:9E:4E:98:24:43:05:EA:44:67:26:80:C0:99:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A400
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B34BA3ECAA8D11F087C157D7DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 12:43:23 +0000
ROA not before: Thu 16 Oct 2025 12:43:18 +0000
ROA not after: Fri 21 Nov 2025 12:43:18 +0000
asID: 18779
IP address blocks: 154.205.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107520 (0x1a400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 12:43:18 2025 GMT
Not After : Nov 21 12:43:18 2025 GMT
Subject: CN=68f0e86b-3149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:bd:47:29:f7:2f:7e:27:75:b3:98:8b:70:
24:4c:47:b4:42:2c:34:90:f1:98:52:b7:a4:a5:c5:
2b:1b:9d:f4:29:8b:3f:1e:5d:67:e9:0d:53:65:fe:
c1:12:a6:8c:17:86:a1:2a:2e:0b:b1:89:e8:db:d0:
51:90:c1:1e:7f:59:e0:4e:66:36:a9:4c:bd:9f:2e:
e7:ba:86:d5:65:fc:1b:6c:70:8b:d7:84:2f:12:e0:
a1:05:73:20:6c:b5:a2:12:e9:04:c4:ac:07:6b:fd:
24:2e:66:6d:01:36:f1:47:75:c3:8f:1a:ee:7a:50:
94:80:7f:ff:84:e9:d6:3f:75:fb:66:d2:11:d6:57:
7c:01:50:c0:b7:bd:cb:61:a5:3e:5f:18:10:a4:69:
4c:2f:74:2b:31:53:e3:70:5b:8d:80:67:5e:a5:ae:
24:38:b2:00:3f:05:3f:eb:96:92:1b:3e:db:b2:79:
aa:2f:84:8f:80:e3:b5:81:28:6a:ae:d5:45:d3:99:
07:06:97:f4:6e:5d:d5:0b:31:db:01:b1:8c:fc:86:
4f:a8:c0:a9:ae:27:a6:a4:97:8b:b1:ad:fc:29:f0:
5e:a1:74:8a:0c:16:2a:b6:8b:4a:34:96:bb:1f:a6:
f5:e7:9a:d5:38:07:c5:98:1c:d2:8f:de:9e:51:67:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F7:99:0A:5E:5C:9E:4E:98:24:43:05:EA:44:67:26:80:C0:99:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B34BA3ECAA8D11F087C157D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:8b:08:e5:22:72:91:a6:be:4e:60:01:62:28:25:9b:53:6a:
c9:4c:53:ba:c5:ec:37:15:61:4b:60:b5:92:1c:a1:dc:b0:60:
d1:8d:ea:a0:f0:48:e5:bf:ff:94:f1:00:1e:d9:d4:01:a2:5b:
0b:fb:50:86:04:63:db:bd:33:4c:3a:24:80:06:2f:5b:f8:92:
4e:68:0b:b8:b0:7a:31:a1:8c:d1:b9:fe:4a:0e:33:6f:d3:e6:
44:3f:17:4d:3b:ad:db:fd:bb:05:60:d3:70:f2:8d:a2:2a:56:
ed:b5:34:49:f4:d0:95:8b:a9:8a:70:d2:6d:74:78:87:e7:db:
f3:93:76:c3:d7:a5:2f:68:cf:91:34:e4:c9:aa:ac:b0:ff:e8:
9c:d6:a4:33:11:13:69:c6:f3:c8:20:01:50:62:43:51:28:2a:
b5:58:92:6e:13:6a:3f:bd:b6:65:95:a4:05:41:9c:79:3b:10:
23:77:07:71:f1:c9:a6:16:d5:71:a7:47:ea:9d:10:d6:5e:11:
54:54:fa:e8:90:90:30:d2:88:c4:21:54:52:0f:97:f5:86:ed:
9a:5a:23:d4:9f:67:75:67:ae:0b:48:35:9e:4e:8c:30:26:ea:
6e:a2:33:9e:39:73:bd:3e:84:b6:50:99:a8:5a:29:8c:a7:0c:
93:6a:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:48 2025 by rpki-client