Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA97DD94AB3E11F0906B6FD6DAE4EC9C.roa
File: BA97DD94AB3E11F0906B6FD6DAE4EC9C.roa (raw, json)
Hash identifier: IM6SvAVcEGR4EkwrcEEAFFZwBZ+clTzyOMO2Q42zVAA=
Subject key identifier: D1:06:A0:B1:88:24:C5:4B:B8:87:05:15:EF:D9:10:97:8F:2B:DF:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A422
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA97DD94AB3E11F0906B6FD6DAE4EC9C.roa
Signing time: Fri 17 Oct 2025 09:50:36 +0000
ROA not before: Fri 17 Oct 2025 09:50:25 +0000
ROA not after: Mon 24 Nov 2025 09:50:25 +0000
asID: 214413
IP address blocks: 154.82.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107554 (0x1a422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 09:50:25 2025 GMT
Not After : Nov 24 09:50:25 2025 GMT
Subject: CN=68f2116c-6310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:7e:c0:5c:bd:3c:e6:95:93:44:b1:1d:c4:
5c:b0:d0:fc:85:a2:19:7d:cf:22:f6:10:67:0c:d5:
2e:6f:40:5d:9e:6a:96:88:84:a3:34:95:79:d4:cb:
80:81:ce:29:13:d1:d3:94:5f:4c:66:ab:0d:5d:c7:
ab:55:02:82:b9:5d:ef:88:3f:0e:47:34:22:4f:ba:
bb:8f:82:d9:7c:60:e0:aa:e1:2a:7f:91:c5:2d:ca:
44:05:ef:99:14:90:d1:b4:f2:ec:d9:dd:73:3c:34:
8c:e4:31:fc:44:c4:ff:f4:86:a6:f9:65:45:da:a1:
5d:33:57:27:ae:f0:96:9c:b0:c0:10:e9:8c:4c:b4:
43:1d:6e:e5:bd:f0:61:79:62:6c:26:c9:74:46:d4:
c4:b1:83:99:e5:d4:3e:ff:50:47:bc:98:66:6a:db:
8d:26:4b:01:da:4b:6a:d9:f4:0d:9b:6d:e4:a8:58:
e7:a1:ba:6c:0a:03:ef:5c:6f:10:e1:4c:d0:2b:12:
ac:a5:a0:b2:e2:bc:70:f8:90:a1:c0:f4:c8:d4:57:
34:69:c9:7b:11:56:88:bc:f9:27:95:b0:68:ee:e7:
9a:b0:f8:eb:4b:6e:16:ab:b9:e5:ae:87:32:a5:75:
d1:6e:71:f5:db:97:17:be:22:15:1c:df:71:85:5d:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:06:A0:B1:88:24:C5:4B:B8:87:05:15:EF:D9:10:97:8F:2B:DF:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA97DD94AB3E11F0906B6FD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a6:2f:bd:69:40:8b:b3:ac:fe:ad:9c:7a:c9:06:42:fe:6d:
25:6a:78:a6:31:84:0e:2d:75:a7:ba:f9:41:60:d4:58:6a:fd:
fd:b9:6b:6b:c0:cb:44:0b:38:e1:ab:d1:fe:78:d9:04:b2:c8:
0e:1d:de:dc:0a:d4:ac:0c:14:31:2a:e2:5f:99:02:87:a9:90:
f7:5a:0b:13:f9:cd:94:a8:80:a4:08:94:b7:ce:85:32:f2:64:
97:66:34:28:41:52:e8:67:36:9b:50:de:0a:43:65:69:4c:7b:
3b:5d:35:25:fb:58:75:08:0a:c6:ae:99:be:bb:fb:f8:a6:3c:
e5:8e:7a:b4:5a:c0:29:12:71:39:8c:4c:2b:75:36:9c:7a:f7:
e7:ca:4c:be:45:7b:a7:54:7d:99:31:f5:14:9b:83:9e:36:a8:
ed:3b:26:df:6f:24:ca:8d:62:92:18:a3:be:0b:28:1b:7a:c0:
29:a7:b8:07:44:57:9e:c9:bc:27:df:48:1b:8f:28:50:1f:55:
48:90:4f:d9:14:72:e9:42:73:b0:73:ce:f0:a3:80:08:bc:3d:
21:2a:1d:68:5a:13:c7:db:70:29:62:c4:a0:7a:44:7c:f6:21:
72:d8:36:a7:25:2f:d7:49:b6:71:34:92:25:f9:56:db:03:54:
bc:64:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:06 2025 by rpki-client