Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF6950CE8B4311F09FB14DA9DAE4EC9C.roa
File: CF6950CE8B4311F09FB14DA9DAE4EC9C.roa (raw, json)
Hash identifier: JWUknOd4CKFDUSMGPBdUodIBzhVty9otEgI35F+bRp8=
Subject key identifier: C9:6C:B5:E7:F9:DA:45:5E:CD:12:9E:1B:7D:5E:8C:69:18:82:C7:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF6950CE8B4311F09FB14DA9DAE4EC9C.roa
Signing time: Sat 06 Sep 2025 17:06:21 +0000
ROA not before: Sat 06 Sep 2025 17:06:14 +0000
ROA not after: Fri 05 Dec 2025 17:06:14 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
154.211.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106082 (0x19e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 17:06:14 2025 GMT
Not After : Dec 5 17:06:14 2025 GMT
Subject: CN=68bc6a0d-3433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7f:6f:b7:13:a2:28:cd:7d:5c:03:81:79:5f:
aa:ab:2c:79:33:63:b6:0f:7a:f2:28:af:76:24:83:
68:73:0d:ad:23:ad:6f:5b:5a:05:5b:da:2d:75:06:
9f:f9:89:fe:19:98:10:bb:0c:9d:3c:af:6f:62:ea:
d9:80:df:72:01:8a:46:c4:4a:a8:bd:02:28:dc:75:
88:c7:f2:27:91:f1:f1:7e:3c:8e:76:88:92:08:88:
f5:a1:85:74:9f:ea:f0:a9:85:7f:99:a2:68:fc:c0:
0b:bb:de:46:15:e2:08:86:52:f4:63:04:77:ec:50:
4c:c4:44:ae:1d:e5:35:b0:da:d5:bd:56:f7:6b:d9:
b5:84:61:71:d7:dc:08:99:e8:97:e1:54:7c:27:e9:
10:0a:d3:d3:b4:b8:d4:71:e7:53:0e:98:60:e0:f6:
2e:cf:d9:32:90:c8:f2:2f:37:9a:8e:f9:08:f0:88:
b5:d9:42:3b:1e:44:09:a9:79:bb:b0:c0:a9:f5:d0:
52:0c:79:71:74:50:78:9d:28:2c:5e:8e:a6:1d:d2:
8b:c4:14:20:5d:e1:b3:55:2a:f4:b5:9d:45:a3:b1:
6b:5d:99:5e:f1:8d:0e:03:24:9a:33:7b:9a:fd:aa:
18:e4:2f:44:6d:83:ba:03:12:46:35:e1:77:62:01:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:B5:E7:F9:DA:45:5E:CD:12:9E:1B:7D:5E:8C:69:18:82:C7:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF6950CE8B4311F09FB14DA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
154.211.15.0/24
Signature Algorithm: sha256WithRSAEncryption
15:73:2d:67:75:99:f6:aa:2a:f8:44:a6:ad:1d:34:60:33:5d:
c8:6f:d3:eb:b4:46:06:c2:b2:d2:04:87:f7:d4:19:2e:4a:56:
4f:ef:30:59:2d:2f:c3:7a:f4:95:cc:f6:ee:ed:d9:03:1e:f7:
a6:22:43:2f:7c:01:fe:c7:43:97:0a:8d:31:e9:92:04:b7:0c:
00:fe:34:1b:13:0c:6d:ea:f6:89:9b:d0:9e:cd:5f:e4:6a:80:
0a:b4:2e:63:98:58:48:cb:d0:26:a4:ed:da:75:5d:4f:3f:bd:
bc:d2:bd:90:5e:e0:2d:bd:67:81:7c:3c:3a:e2:cb:4a:98:b1:
30:2c:89:b0:0a:a6:c3:80:75:19:46:1b:46:c2:4d:7b:a2:45:
b2:40:58:0c:26:34:89:be:f0:17:5e:ff:b7:36:92:68:00:cc:
31:ef:ff:19:30:8b:c2:e6:04:a4:c5:cf:70:d6:b3:fe:20:0e:
2f:a8:4d:9b:f2:77:05:42:ed:79:18:59:55:b5:83:ce:3d:57:
8f:fa:91:4b:69:34:05:5c:d8:52:d2:15:4b:b7:4f:7d:98:91:
c9:d7:d2:e0:fc:14:55:fa:be:fa:6d:85:44:6a:4e:45:41:dd:
57:15:68:5c:6f:ec:4a:b1:75:f9:ab:9c:03:3b:31:a4:04:18:
8f:94:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:58 2025 by rpki-client