Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0C4F50921411F08DDFCC8FDAE4EC9C.roa
File: CA0C4F50921411F08DDFCC8FDAE4EC9C.roa (raw, json)
Hash identifier: aVSF0WxxY7pw8K1Fq/iTz802h4fWFi/Cs5lx27rANMw=
Subject key identifier: 2D:34:9C:D3:6B:E0:E9:92:A0:AE:7E:F9:5F:01:F8:60:A6:2B:35:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0C4F50921411F08DDFCC8FDAE4EC9C.roa
Signing time: Mon 15 Sep 2025 09:17:24 +0000
ROA not before: Mon 15 Sep 2025 09:17:18 +0000
ROA not after: Sat 25 Oct 2025 09:17:18 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106424 (0x19fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 09:17:18 2025 GMT
Not After : Oct 25 09:17:18 2025 GMT
Subject: CN=68c7d9a4-bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:4e:3e:8d:3d:20:aa:cf:c8:41:07:f8:35:
d5:4a:26:cb:1a:7f:8e:07:0d:ac:cf:1f:32:4b:f2:
59:05:93:28:7a:0b:a7:81:31:f7:35:dc:62:5a:cc:
72:b7:29:9b:8b:b6:dd:09:30:8f:e4:a9:8f:30:ca:
7b:ce:5a:bb:2a:c3:9f:65:5b:9c:fd:2f:8c:55:14:
b7:ff:b7:e6:42:bb:bf:63:1a:0e:2a:bf:c3:25:e4:
5f:e4:4b:ca:d0:d5:db:dd:10:9d:11:88:79:50:f5:
8c:10:d6:36:ba:7b:0b:1f:57:4e:79:db:97:fa:c4:
f0:e9:6f:61:68:8d:65:12:be:50:c3:d8:52:eb:e5:
d8:1c:b8:71:6a:13:80:47:6f:10:ee:c1:13:8f:12:
96:a8:46:ff:be:2b:f8:bf:6c:c6:23:69:a3:7f:73:
eb:9c:b8:cd:8f:27:c6:b3:85:b7:5e:f8:b3:c5:9a:
27:f2:0a:43:18:c5:33:10:fa:53:fe:d0:06:94:f8:
a8:94:1d:0a:97:ef:ac:ec:97:81:eb:9a:34:e6:4c:
78:bd:55:44:5d:2a:74:53:31:61:29:95:c1:01:2b:
4e:2f:38:78:3c:99:8f:d9:80:86:b6:3f:63:89:7b:
9b:a7:81:f0:ce:2d:08:c4:46:a5:94:71:fa:88:fc:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:9C:D3:6B:E0:E9:92:A0:AE:7E:F9:5F:01:F8:60:A6:2B:35:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0C4F50921411F08DDFCC8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
Signature Algorithm: sha256WithRSAEncryption
08:44:37:3e:c0:55:44:78:81:9f:d7:0f:de:50:10:bc:0f:32:
b1:20:60:e2:66:8f:06:21:50:d4:e8:d5:7c:ba:40:53:df:ae:
15:ad:10:e0:56:0e:05:5d:f7:fb:e3:52:1e:35:d8:7c:38:13:
63:ec:9e:78:54:80:2d:d5:8b:9b:fe:44:0a:f4:91:27:ef:aa:
4e:85:af:c5:2a:bc:ab:20:99:04:b2:56:ec:01:3b:dc:27:71:
b3:fe:52:c5:ea:c9:6b:c9:fe:39:15:c6:6c:4b:40:f4:25:4d:
aa:21:3a:b3:9e:9e:f4:40:7c:23:fd:d4:4f:7b:49:20:a9:dd:
3d:5d:b6:02:24:11:47:be:72:75:da:98:4b:68:fc:80:f9:43:
61:56:7f:6e:ef:0c:56:cc:de:20:b9:32:3f:95:7c:af:1b:e3:
38:ab:5a:f7:a6:71:93:e0:44:53:91:f3:29:99:1d:3f:98:f8:
57:6e:d0:5f:c2:36:c7:da:ae:b4:b6:bb:6e:7a:ce:6f:53:d5:
9c:87:a7:14:02:f8:c3:0b:dc:4b:04:7f:03:0c:28:1e:25:1e:
77:b8:c5:2c:cd:38:98:0b:fc:6b:d4:db:30:bc:67:c1:0f:6d:
71:28:81:80:eb:ef:7f:9a:cd:26:15:6f:87:33:1e:6d:7e:83:
b2:b5:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client