Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C535EBEA993E11F08F715DE6DAE4EC9C.roa
File: C535EBEA993E11F08F715DE6DAE4EC9C.roa (raw, json)
Hash identifier: 48ZkEK+psydhCL9iY6bBw0DI1l0trWbFz4OgzDrOPQE=
Subject key identifier: C6:23:1C:A5:A1:2F:0A:56:1F:C3:D0:05:C7:6F:C3:B4:70:67:1A:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A064
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C535EBEA993E11F08F715DE6DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:05:33 +0000
ROA not before: Wed 24 Sep 2025 12:05:27 +0000
ROA not after: Mon 27 Oct 2025 12:05:27 +0000
asID: 54801
IP address blocks: 154.213.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106596 (0x1a064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 12:05:27 2025 GMT
Not After : Oct 27 12:05:27 2025 GMT
Subject: CN=68d3de8d-d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:c9:4c:f9:06:68:a8:66:c2:41:fa:f1:4d:
3a:a8:e3:8a:e0:30:a9:10:8f:85:93:23:58:6a:01:
96:df:97:ce:64:c9:7d:3f:71:1b:bd:25:b5:58:e8:
7d:4d:79:86:13:d0:22:32:3e:ee:da:8c:d6:f6:a3:
0b:5a:2b:ed:05:7b:f4:91:f9:4a:cf:56:6b:a5:90:
b2:64:53:e6:7d:bf:ed:37:0f:07:ca:4b:f7:26:aa:
56:14:fe:6d:14:a0:ac:eb:5f:0c:c0:bf:c3:a1:68:
a7:0e:f1:64:ab:e2:73:99:2c:fe:27:9c:2e:e0:42:
4b:4b:9f:5c:28:d0:91:f7:d5:70:69:75:14:7e:0f:
3e:e8:e3:cc:58:fe:0f:11:01:cf:88:78:4c:19:15:
30:7e:b0:82:2d:40:60:f0:0f:e4:d3:20:06:1b:e2:
2c:74:33:7f:ab:b8:60:4b:ff:86:a2:9d:27:98:be:
f9:22:96:07:16:05:4a:d9:ca:fd:85:66:c7:b9:0d:
61:c3:14:01:9f:aa:73:ed:6f:d7:91:11:cb:a9:eb:
b0:d9:d1:c9:39:cd:2d:39:1b:9e:2f:2e:9c:9c:1b:
d3:1e:91:2f:c9:39:e5:7f:ee:e7:4a:68:e3:aa:a5:
a6:a6:b2:24:ee:8d:e1:1c:a5:fa:a1:64:0b:f7:01:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:1C:A5:A1:2F:0A:56:1F:C3:D0:05:C7:6F:C3:B4:70:67:1A:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C535EBEA993E11F08F715DE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d0:49:11:4b:ca:e6:62:e2:40:2e:55:a9:da:c0:e9:88:71:3b:
9b:0a:f9:9f:98:c1:3f:37:8b:56:df:c8:e8:bb:63:ae:c9:68:
ae:33:91:b1:df:d3:0d:64:75:45:6d:17:a8:76:42:9c:04:d3:
3a:7a:fd:a8:77:2e:5d:bb:95:3e:42:72:de:e1:ef:e7:c6:db:
bf:e0:32:9e:66:1d:79:cc:da:a4:26:a9:68:54:32:3c:b5:88:
9a:a0:d1:9f:32:8a:43:e8:6e:69:29:40:26:41:e7:d9:b8:1e:
f9:7b:45:c3:da:3f:51:0d:3f:bb:92:39:e4:5a:f2:e5:77:e7:
ce:6d:75:a2:a6:c6:bb:c6:d8:dd:36:a1:6a:61:aa:2d:73:0e:
b8:89:8b:cb:87:05:3a:46:3d:36:75:69:c8:32:c3:f9:da:8d:
d4:28:b5:28:a2:7a:f9:88:f1:47:45:3f:40:d0:e1:74:60:df:
a0:3b:a7:76:ce:b7:1f:89:29:98:87:63:53:9b:53:99:d2:38:
ab:12:13:8f:81:17:64:25:fd:64:e3:61:43:ba:a7:2b:cc:9a:
c1:d4:f5:cf:36:e5:6a:49:49:50:3e:ff:22:58:24:a2:ed:0d:
11:c7:2a:02:50:78:19:fb:46:ff:1e:95:e4:06:7c:0f:bb:f4:
6c:88:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:21 2025 by rpki-client