Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA64D886AA8511F09BE373A7DAE4EC9C.roa
File: BA64D886AA8511F09BE373A7DAE4EC9C.roa (raw, json)
Hash identifier: ej+miQfOrt7zRYhbbNh3cWMfMrbteiMsgBfhPnUuzRM=
Subject key identifier: 6B:70:F7:08:CA:FE:BE:C0:F3:C2:FC:53:F3:27:E3:20:10:4C:EB:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA64D886AA8511F09BE373A7DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 11:46:19 +0000
ROA not before: Thu 16 Oct 2025 11:46:13 +0000
ROA not after: Wed 19 Nov 2025 11:46:13 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107514 (0x1a3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 11:46:13 2025 GMT
Not After : Nov 19 11:46:13 2025 GMT
Subject: CN=68f0db0a-bdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:bf:2b:25:ac:17:89:c5:57:fb:1f:9f:c8:
0d:bc:c8:33:04:69:35:56:38:70:01:09:f4:01:96:
39:c7:fc:81:ba:af:ed:7b:d5:06:cf:e1:03:67:60:
a1:6c:1b:6c:d7:ca:3b:7f:f0:e4:6b:ac:22:99:8d:
14:c4:7d:a4:b9:8a:92:df:1f:e8:dc:00:ff:63:a9:
5d:38:32:bf:39:26:40:4a:5d:68:ec:de:1d:2f:bd:
68:c1:19:ae:9a:99:6f:bc:31:d9:17:eb:73:5f:2f:
20:ad:f5:8f:a8:be:bd:a1:ae:31:44:40:ad:ff:44:
27:f8:49:88:a4:3a:52:3e:13:0e:f6:f8:f8:f4:cb:
b6:75:1f:95:af:41:19:5f:62:7f:2a:0e:62:76:cf:
c2:5e:c5:0d:21:fe:99:8b:36:de:c1:18:87:7a:2f:
fd:e4:07:c6:3d:0c:d1:b5:7c:0f:a6:12:47:b8:12:
ea:fb:19:86:91:d7:49:99:5b:d8:d6:f0:60:6d:6c:
0e:11:96:2c:2f:aa:e6:c3:96:b4:e3:f4:08:b3:f9:
ec:29:0c:56:d9:ca:35:9f:57:d9:fb:da:55:a8:35:
40:d5:44:36:82:4e:1e:01:00:7c:a2:e5:e9:62:27:
7c:84:aa:49:6e:f2:03:e7:fa:45:52:e9:36:ec:df:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:F7:08:CA:FE:BE:C0:F3:C2:FC:53:F3:27:E3:20:10:4C:EB:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA64D886AA8511F09BE373A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
01:25:fb:ac:d7:4f:82:13:2d:e1:fc:09:e3:2c:2e:34:a3:9d:
5d:3a:ca:c2:f4:15:50:12:90:65:4b:5a:b6:fc:fd:74:9e:a6:
9d:5d:ff:99:f5:cd:05:65:2b:ad:4a:7b:0b:e6:6c:67:7d:d4:
2e:b3:20:b3:38:28:72:4d:05:b6:33:80:e3:cd:e8:12:1f:78:
bd:b4:32:6e:39:7d:35:5a:1b:0a:66:8d:76:09:34:e0:78:84:
4f:2a:33:ab:f7:e5:eb:89:1e:6b:7d:5a:0c:2c:51:08:42:46:
81:aa:15:67:d7:c3:41:66:11:8c:d2:ec:fd:68:ca:76:de:17:
c3:4f:3a:29:d7:1e:ab:34:f9:9d:4b:e1:ed:92:00:e2:be:99:
fc:5c:3f:f0:e9:e1:c1:f3:20:e5:e5:2f:f4:74:6a:49:5c:0b:
8d:4b:1b:00:d1:1a:35:8a:1c:1c:7c:89:1c:d1:a9:b0:d0:b7:
e0:fe:ef:50:2f:b9:c8:0c:be:1a:03:3c:f2:99:ea:00:44:a7:
4f:f2:62:86:40:85:05:dc:f8:43:3f:b6:de:43:0c:a8:2c:7c:
a8:45:6b:b9:b5:30:07:6f:aa:69:35:83:ae:ba:cc:4a:56:56:
2e:23:9b:d6:ff:e7:28:f0:39:93:e4:60:f9:b4:e0:31:d1:dd:
82:3b:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:10 2025 by rpki-client