Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC89157EA41211F0853688A2DAE4EC9C.roa
File: BC89157EA41211F0853688A2DAE4EC9C.roa (raw, json)
Hash identifier: yBVSUF5dPyJZk8f+p9Oi7usDVLnP+TD/50xFVLIYNmQ=
Subject key identifier: 96:70:32:00:6C:4D:F2:BF:39:7F:DC:A8:12:DA:19:03:B3:20:A6:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC89157EA41211F0853688A2DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 06:48:03 +0000
ROA not before: Wed 08 Oct 2025 06:47:58 +0000
ROA not after: Fri 17 Oct 2025 06:47:58 +0000
asID: 138456
IP address blocks: 154.197.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Oct 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107173 (0x1a2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 06:47:58 2025 GMT
Not After : Oct 17 06:47:58 2025 GMT
Subject: CN=68e60923-f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:c5:d5:46:f2:93:f8:59:a5:84:58:62:e4:
91:c8:1f:f0:bc:a7:21:db:ef:c8:64:97:4b:ce:19:
5b:54:24:60:49:4b:99:3d:46:d4:e6:51:ed:7e:2d:
56:79:a8:46:75:9c:9c:13:f9:93:a6:db:65:95:e2:
a5:02:ec:8b:e5:f4:26:ea:0b:81:ec:80:1a:55:f9:
b6:cb:46:83:fa:c8:75:bd:c7:ba:ea:df:93:ef:61:
b1:0a:71:6d:97:29:42:32:5a:65:66:cc:3c:1c:29:
07:90:37:e0:e3:5a:d0:3a:60:30:2d:06:a2:d3:eb:
cd:f5:89:29:df:40:48:62:35:d9:2a:9c:17:91:19:
82:7e:10:df:db:14:7d:b3:fc:9f:fb:3f:85:c4:7c:
ae:65:f1:95:c2:5f:26:f5:d0:1a:28:bc:63:bf:d5:
7b:ba:0f:ae:16:46:a3:df:c6:6d:6f:ad:cc:db:00:
39:61:0d:d9:9e:1b:0a:e6:95:96:8d:65:39:af:24:
27:23:12:c8:ff:5c:3e:1c:21:21:bf:a5:db:30:3a:
86:f3:17:56:57:3a:72:ce:b2:c2:38:56:f3:e8:3c:
c7:83:2d:49:c5:7d:ae:3a:60:14:77:97:76:61:a6:
58:0d:2f:a4:64:8a:71:98:0c:2d:69:91:6f:38:5c:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:32:00:6C:4D:F2:BF:39:7F:DC:A8:12:DA:19:03:B3:20:A6:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC89157EA41211F0853688A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:af:b3:14:74:6b:4c:be:ce:96:23:f7:15:ff:7b:e6:6b:37:
1b:78:42:0c:bb:9e:d0:a7:ab:17:30:c1:28:42:b6:e6:b0:66:
a9:fb:33:2b:1b:55:28:58:9c:fe:0e:65:6f:60:8e:f5:52:f6:
5c:f5:47:dc:f9:b6:95:bc:c3:c1:63:b8:58:b5:8a:54:50:95:
cc:7a:61:c6:c0:be:b5:f4:de:bc:ed:45:4d:83:14:52:73:60:
26:df:02:8d:b2:44:0d:6f:68:93:81:21:23:07:13:8a:40:52:
99:60:98:37:ae:cc:dc:05:17:14:2a:be:65:37:e4:47:d3:37:
ba:eb:83:66:1e:e6:81:09:22:ec:69:47:ee:44:6e:15:f0:04:
0b:59:36:a7:28:87:99:9f:fa:f1:0f:c5:cc:ba:b3:ec:cf:b6:
30:bd:07:9f:78:a8:91:67:5c:94:76:c8:a7:ab:ba:2e:63:11:
dd:b9:4f:bb:ad:68:15:6e:66:31:1b:c8:4b:dd:b6:8d:b1:c7:
58:25:22:30:1c:3d:78:6a:3b:61:76:02:59:2f:5d:cb:59:c9:
c6:48:39:f9:66:a3:a0:ca:e3:47:e1:4e:ef:28:77:99:3a:cb:
96:3f:9a:79:fa:d7:e0:0b:aa:f1:70:0f:6f:6e:7a:e0:fc:bb:
62:6d:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:41:46 2025 by rpki-client