Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C21DCD74996B11F0A82D2787DAE4EC9C.roa
File: C21DCD74996B11F0A82D2787DAE4EC9C.roa (raw, json)
Hash identifier: /KheYDKeAm5dyIhpjI9OTeOloSaXgYVFvbuY35L4k24=
Subject key identifier: F4:06:70:66:C0:89:14:3A:02:B7:E7:11:6D:89:34:B9:2A:F2:31:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C21DCD74996B11F0A82D2787DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 17:27:35 +0000
ROA not before: Wed 24 Sep 2025 17:27:30 +0000
ROA not after: Thu 30 Oct 2025 17:27:30 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106658 (0x1a0a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 17:27:30 2025 GMT
Not After : Oct 30 17:27:30 2025 GMT
Subject: CN=68d42a07-a41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:f9:7c:19:b6:eb:74:d0:92:1e:12:62:5e:
d9:e3:49:7d:90:08:f4:ad:30:7e:64:00:36:67:c4:
26:83:c5:58:21:7f:43:4e:61:5c:14:16:46:07:99:
98:d3:0a:ef:e6:59:e2:e0:56:8e:eb:15:11:08:68:
f9:18:05:5f:bf:79:da:89:44:d7:82:2f:48:32:88:
90:4a:0e:41:36:f5:c1:36:ff:d2:ec:39:4e:e5:ee:
68:d1:5e:e6:06:19:4e:1b:7a:51:d7:61:2f:65:80:
c7:71:5c:56:e8:03:1d:b7:c8:e1:05:86:58:78:ed:
73:ca:c8:71:55:f7:f4:5b:d4:36:06:d4:69:41:6d:
13:f9:bf:40:b1:ad:ba:b0:c8:29:50:88:42:93:59:
8d:2d:5c:fb:9c:45:c7:cf:02:ae:32:6b:95:19:d9:
60:33:0a:f3:35:e8:64:cf:62:ef:e8:73:32:49:99:
97:fe:c4:93:57:15:dc:7b:03:b0:1e:b1:be:3f:83:
9c:9e:64:1e:41:f9:16:12:2d:8a:75:b3:c9:ec:2f:
ff:08:f4:75:26:54:7f:00:9b:f6:d7:32:3c:d8:77:
bd:c8:97:89:5b:18:9b:83:03:35:8c:3c:e3:6f:b5:
7f:67:0f:7d:fe:af:11:f4:ed:39:0d:9b:33:ce:b0:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:70:66:C0:89:14:3A:02:B7:E7:11:6D:89:34:B9:2A:F2:31:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C21DCD74996B11F0A82D2787DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
af:ee:15:7d:21:34:9c:73:71:08:0c:26:75:52:af:da:18:a6:
84:ec:ba:2d:6d:5c:de:2b:ef:7f:c0:c7:ac:d7:dd:10:80:77:
82:74:a7:30:78:c0:f5:21:15:f4:c7:7e:10:d9:91:1f:b1:d6:
89:b3:8d:91:bc:27:4e:96:13:72:7b:0f:4c:a5:8f:3a:88:76:
de:b8:33:fd:cc:9f:89:2f:2c:1d:95:44:e7:08:53:ce:80:21:
c3:5c:25:70:4b:36:a8:0d:6b:b4:26:ff:80:07:80:e9:e1:64:
5f:57:0d:c1:c7:68:1e:65:1b:38:4f:cb:8c:e6:5a:fd:dc:9e:
c0:d1:82:dc:83:1b:38:f3:d4:68:31:3c:7e:66:21:b9:54:9b:
f7:ba:e8:9f:f8:ab:fc:46:c4:7e:91:f1:6f:b6:d6:0e:56:1e:
96:1b:72:b3:d9:05:a9:51:9a:ab:1b:f4:e5:ec:61:3b:6d:4d:
8f:14:2a:0e:cb:8a:94:63:8d:75:3a:6a:db:17:a1:01:3f:50:
f3:69:ec:b1:ab:de:97:4e:af:c6:e7:7f:05:e4:f3:32:a7:a9:
9f:0f:a0:4a:88:33:ef:6e:73:10:e6:ae:29:c0:17:27:87:e9:
9d:29:c4:22:d7:74:76:83:a5:80:84:7c:9a:a3:aa:c9:21:68:
90:fa:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:35 2025 by rpki-client