Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FAD42CB2DB11F0BAF904DEDAE4EC9C.roa
File: C9FAD42CB2DB11F0BAF904DEDAE4EC9C.roa (raw, json)
Hash identifier: rdEhM2bGzy3CNYBs2+YHic0kuMphoTjSng6ffXzwPFQ=
Subject key identifier: 8C:E8:B8:B2:5B:D4:03:F9:1D:8F:DC:29:2C:54:ED:0E:2A:36:52:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FAD42CB2DB11F0BAF904DEDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 02:22:31 +0000
ROA not before: Mon 27 Oct 2025 02:22:25 +0000
ROA not after: Mon 01 Dec 2025 02:22:25 +0000
asID: 215674
IP address blocks: 154.90.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107756 (0x1a4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 02:22:25 2025 GMT
Not After : Dec 1 02:22:25 2025 GMT
Subject: CN=68fed767-d669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:60:df:6d:23:56:7c:fe:f1:47:b8:a9:19:
33:d7:bc:ff:98:e7:d3:ef:2b:a3:ea:77:b3:fd:bb:
82:c4:39:fa:65:84:f7:b6:d9:d1:25:51:b3:fb:05:
03:65:07:41:11:9d:24:1f:3e:62:f3:84:a8:7d:e5:
b1:38:9c:7c:e8:72:fc:6e:bd:25:e4:99:d5:4f:04:
15:be:d1:8c:44:12:10:57:83:77:11:f7:94:fd:5c:
96:0a:88:a5:74:c5:e3:e5:97:3c:bd:34:6b:bb:ee:
b7:e5:47:ad:4c:ee:31:63:b5:7a:37:10:2a:5c:90:
cd:d9:91:22:01:00:0b:34:16:f5:94:2c:d7:35:27:
d5:c1:bc:28:b5:13:4b:e7:46:2e:c2:e9:fe:15:1d:
42:7a:34:c1:7c:7c:8d:8b:11:ba:62:20:3c:88:ed:
4f:7c:1d:23:fd:65:89:6c:31:82:87:4c:0c:88:4a:
5e:64:b8:19:fd:4f:10:f7:40:6b:a6:33:58:b8:70:
27:16:8b:d9:d1:02:19:7e:83:fb:c3:1d:24:5b:89:
0c:5b:ca:6d:f5:d0:0b:b6:af:ff:90:01:97:fd:7e:
e6:b1:52:23:c9:b8:73:67:90:2a:d3:a2:4f:b8:13:
43:32:fc:aa:c5:d1:43:37:c6:5b:7f:09:fd:66:b2:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:B8:B2:5B:D4:03:F9:1D:8F:DC:29:2C:54:ED:0E:2A:36:52:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FAD42CB2DB11F0BAF904DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:50:15:a4:ff:83:c3:70:fb:f7:79:e0:46:bc:82:46:a7:a6:
d6:e1:6f:66:08:25:8a:d1:d9:ed:fd:f8:e5:9d:16:9a:87:70:
2f:76:db:11:b8:b1:0d:2a:9b:b6:c5:a6:79:31:3b:48:58:cf:
96:1c:92:17:51:86:2e:e3:2b:2b:a6:51:a9:e5:26:2d:60:95:
44:98:58:28:60:99:ad:7a:ab:b0:ba:4a:33:8f:3b:f4:45:6c:
12:2b:9e:eb:c1:9f:3f:fd:10:c2:b9:46:77:41:1d:40:40:75:
56:c7:d8:d5:b4:4c:19:78:c9:ab:44:c4:06:2f:5b:dc:27:bb:
71:06:bf:dd:f1:81:e3:6c:53:f5:82:f0:7c:21:66:cc:ae:b1:
fb:23:bd:96:f8:c2:fa:ff:21:e6:b4:7c:f4:7f:04:4a:89:87:
99:26:1f:bc:26:ef:37:89:0f:14:40:90:98:fe:12:a8:af:a0:
32:48:f4:c0:12:8f:9c:78:82:57:27:c9:45:fd:7b:f3:3d:97:
3f:b8:a7:ff:9b:fe:9a:b2:bf:79:de:03:95:aa:54:62:14:4e:
0c:9c:63:38:23:81:e9:7f:08:d3:6d:9d:a0:b2:7d:3b:91:01:
3c:d9:4e:0a:8e:82:68:59:32:7a:74:93:92:84:a1:cf:b6:bc:
e4:eb:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:06 2025 by rpki-client