Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B88FA392AA8F11F093A06EE5DAE4EC9C.roa
File: B88FA392AA8F11F093A06EE5DAE4EC9C.roa (raw, json)
Hash identifier: uUdCOaaqkVxQNdAWMZ3p2nEkEt4LwxeaHBePI+oWdi0=
Subject key identifier: F4:A9:BA:47:69:9A:0E:AB:4C:33:62:96:8D:2B:61:D7:1D:52:B9:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A404
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B88FA392AA8F11F093A06EE5DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 12:57:50 +0000
ROA not before: Thu 16 Oct 2025 12:57:45 +0000
ROA not after: Sat 24 Jan 2026 12:57:45 +0000
asID: 328608
IP address blocks: 154.198.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107524 (0x1a404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 12:57:45 2025 GMT
Not After : Jan 24 12:57:45 2026 GMT
Subject: CN=68f0ebce-f854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:99:5b:a7:b5:c9:a7:b1:27:4e:b6:7c:8f:
8f:31:f9:d1:fd:27:72:8c:1f:b1:98:79:fe:9f:8a:
3a:3d:d4:ec:bf:a7:76:cb:aa:dd:2c:00:00:df:f4:
50:65:82:4b:7b:20:e6:2e:3e:49:bc:3a:4b:f2:f4:
34:f0:ed:be:de:43:91:8d:44:af:15:ad:4c:2a:20:
4f:6c:68:50:54:aa:45:a5:1f:02:7a:e6:7e:23:09:
99:48:1f:a4:22:de:36:3b:4d:4e:3b:57:1a:a7:79:
f1:ea:ac:10:89:f8:2f:2b:f0:5e:17:97:4b:9c:88:
2b:86:30:d4:8a:f3:48:8b:48:ac:7a:20:34:41:ca:
46:03:e3:3d:9c:e2:41:83:a6:0d:0a:b2:f0:e3:be:
8b:75:f4:ff:fd:d7:8f:12:99:80:7f:11:ee:0e:6e:
a8:a5:5e:f7:d4:ba:97:a8:1e:1e:ad:58:bf:d2:0a:
3f:ad:46:fd:b0:93:73:87:d7:68:0d:9f:07:31:e5:
54:3d:c4:e2:fd:ce:a3:91:2e:74:ff:a1:05:b4:9d:
11:d3:3f:79:c1:c1:6f:91:7b:75:7a:d3:0c:ad:79:
7f:aa:b8:f2:1f:f5:1c:04:a4:0b:c8:d4:9c:1f:96:
07:14:71:d1:12:98:2e:3a:11:ba:9e:6a:e2:ae:e7:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:BA:47:69:9A:0E:AB:4C:33:62:96:8D:2B:61:D7:1D:52:B9:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B88FA392AA8F11F093A06EE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.168.0/22
Signature Algorithm: sha256WithRSAEncryption
20:99:f3:52:1b:e4:d6:ae:75:02:b8:02:63:e0:bd:a0:5d:15:
70:c6:a5:00:99:07:77:bc:15:f6:a0:b0:38:a5:98:36:cb:79:
10:6f:86:5f:8e:80:7d:c4:8e:95:4a:50:ed:27:2d:72:5f:3a:
ff:15:24:a8:12:33:4e:de:b0:c9:cc:60:f9:fb:c4:35:52:ce:
6e:7f:85:5b:ee:ea:12:1e:bb:6c:27:8e:de:70:14:a2:b3:8a:
fc:a4:2a:3d:c5:16:a8:92:56:90:d5:70:ef:e5:1d:17:fa:f6:
97:53:b8:48:b6:7f:17:87:35:96:5c:69:7b:7d:3e:1e:34:8c:
b4:72:e8:dd:a2:cd:b4:0c:0d:9f:7a:4a:86:5b:65:41:68:a3:
1b:b9:ee:a7:59:f0:f6:d9:0f:87:83:39:80:7a:fe:f6:df:06:
58:07:e8:d8:09:56:77:dd:07:58:9b:e9:d1:b6:c7:ad:aa:b9:
37:f9:d6:e1:a4:c7:15:83:6c:e0:3d:9e:50:42:95:9a:32:8c:
e3:2f:52:fb:98:71:5f:fc:6c:31:25:19:e6:53:0b:03:5b:ff:
7c:6a:f4:36:71:af:29:2f:f6:67:78:fe:4c:65:b9:2f:73:f7:
b5:d1:e4:48:0b:77:e4:67:5d:24:84:73:a0:86:99:87:a3:21:
30:f5:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:53 2025 by rpki-client