Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC0BF3E99F611F0960ABE95DAE4EC9C.roa
File: CDC0BF3E99F611F0960ABE95DAE4EC9C.roa (raw, json)
Hash identifier: jCvStKWnWiT4vA229zXqanVr2QGO9jCOx3f1CPqtSaY=
Subject key identifier: 0C:16:C5:00:DE:E4:CC:E0:F7:DB:11:4E:A9:56:5A:6C:BB:09:50:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC0BF3E99F611F0960ABE95DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 10:02:54 +0000
ROA not before: Thu 25 Sep 2025 10:02:48 +0000
ROA not after: Thu 04 Dec 2025 10:02:48 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106741 (0x1a0f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 10:02:48 2025 GMT
Not After : Dec 4 10:02:48 2025 GMT
Subject: CN=68d5134e-0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:1c:18:64:7a:fc:ca:81:e3:1d:45:a6:7f:
7e:1f:82:31:58:39:29:fa:ca:2f:11:ee:59:86:c2:
8d:10:99:63:d7:7b:4c:ed:ef:2f:94:ca:70:8b:60:
cc:5f:59:0c:10:80:a1:d2:e5:ad:82:6a:a5:0d:29:
6b:33:be:27:89:0f:d5:35:62:9a:d2:33:5e:26:78:
dd:bc:67:36:ac:66:d4:9d:7a:1b:30:bf:6a:0a:ca:
3f:69:c2:1c:8e:e2:b4:a5:4a:92:10:c3:ec:b8:0c:
6d:54:80:28:6b:6d:e0:d1:1d:3f:a2:b8:fc:0f:84:
8b:ef:f3:a8:c3:ba:db:76:c4:b5:5b:45:0e:01:7f:
64:c4:7e:6a:34:82:60:c1:4d:1f:3c:a6:af:66:87:
96:cb:06:cf:37:cf:af:55:4e:9d:32:66:6c:96:16:
1b:b5:96:a3:4e:fb:31:97:1e:8b:32:8c:e2:d7:34:
22:09:fb:4f:d6:4e:3c:d6:03:39:17:e4:a2:25:89:
fe:2a:1b:cb:7b:c1:4d:3f:c5:a6:81:54:c8:19:9c:
09:28:18:4a:5e:16:7e:a3:3d:49:db:53:ff:16:44:
d8:e7:c9:94:44:63:59:ba:f7:f2:85:7b:c7:5c:5c:
a9:0c:31:de:46:b7:de:44:77:3e:10:53:62:fd:49:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:C5:00:DE:E4:CC:E0:F7:DB:11:4E:A9:56:5A:6C:BB:09:50:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDC0BF3E99F611F0960ABE95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.86.0/23
154.94.116.0/24
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f3:b2:86:60:d7:5a:7c:b7:bc:2f:ee:d5:db:e5:aa:70:cc:
b2:af:10:f2:d5:ee:6a:1f:6a:ff:86:97:82:64:10:46:a6:a2:
4e:9e:4a:04:5f:c6:2f:01:47:62:d3:44:55:eb:3b:1b:1a:c0:
4d:14:8e:db:b3:d6:79:b3:6c:4a:e9:be:27:ba:ca:7f:90:d7:
56:e7:18:40:27:01:a4:c5:ff:96:b5:7c:98:52:24:26:c6:e8:
c9:7f:4e:c1:83:01:1f:e5:a2:fd:a9:a8:e0:a9:14:16:6e:0b:
6b:9a:f9:24:7f:1e:17:b9:5a:da:35:9e:58:43:f1:05:39:7a:
ca:2c:ff:4d:df:9d:07:40:c1:b8:73:6f:65:35:83:de:77:ca:
89:62:9c:80:50:ed:97:cd:e5:4f:97:6c:c4:f9:b5:71:47:b6:
7a:d2:55:8f:36:0b:1d:27:50:fe:69:b9:3e:62:d3:99:cf:37:
c4:48:ca:11:2c:5d:3e:d4:5f:88:b2:8e:45:a4:49:00:7b:40:
a6:9c:66:06:bf:0f:80:96:d5:f9:6f:ce:b4:45:26:33:e8:42:
63:c5:a6:85:88:63:47:02:b6:88:6d:b7:5d:72:61:4a:67:9e:
c6:2b:46:7b:9a:34:4c:ea:b5:c8:d1:5f:91:b8:e1:94:5c:e8:
bc:80:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client