Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D287093EA9C211F08D86B5E3DAE4EC9C.roa
File: D287093EA9C211F08D86B5E3DAE4EC9C.roa (raw, json)
Hash identifier: nnvwVOUy546t0xfw6obl8YFvyHB9pTO6paCut/jkAjA=
Subject key identifier: 72:6F:66:CE:38:B1:AD:66:65:9B:02:86:44:D3:B8:22:2F:9C:07:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A39D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D287093EA9C211F08D86B5E3DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 12:31:07 +0000
ROA not before: Wed 15 Oct 2025 12:31:02 +0000
ROA not after: Sun 23 Nov 2025 12:31:02 +0000
asID: 133180
IP address blocks: 154.83.4.0/24 maxlen: 24
154.94.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107421 (0x1a39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 12:31:02 2025 GMT
Not After : Nov 23 12:31:02 2025 GMT
Subject: CN=68ef940b-6051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:8f:b9:9b:92:0b:ee:ce:57:d2:0e:65:3d:
65:bf:d1:ed:de:ff:8c:bb:12:08:65:52:04:0d:96:
f5:8c:0f:b6:df:65:df:a4:ff:e6:e3:b7:02:9a:58:
b3:44:6c:31:0a:50:b2:4c:76:8f:74:b9:b7:66:b9:
fe:a8:bd:fa:28:61:37:66:11:dd:b3:c6:c7:24:fe:
9b:94:56:4e:c0:0e:a1:06:c6:92:ca:ff:90:a8:a8:
dc:09:87:ac:4e:7f:73:cd:1a:97:1c:73:76:de:4f:
5c:78:24:d3:e5:b8:a3:7b:72:42:0b:d9:a7:c7:34:
5e:1c:93:b0:75:56:01:36:1c:d0:37:f5:5a:96:72:
35:b4:bf:17:67:08:b0:7f:c8:8d:84:f0:8f:cd:6a:
f8:85:bf:72:01:e1:77:b6:14:58:79:38:23:86:c8:
8c:e8:13:d9:0f:f9:4c:ef:f3:a0:16:06:bc:f7:ed:
89:00:23:c8:1f:0e:3f:ce:4b:75:f1:21:1e:f1:99:
a0:b0:4d:96:e4:a3:2d:0e:ff:39:5a:bc:f3:d1:65:
6e:1f:79:cb:d0:3d:19:64:95:76:03:1f:90:7b:d1:
e4:9f:d0:76:89:b1:86:09:c1:b2:87:07:43:16:75:
db:66:4c:76:af:2d:e8:38:b6:bf:9e:15:3a:79:d3:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:66:CE:38:B1:AD:66:65:9B:02:86:44:D3:B8:22:2F:9C:07:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D287093EA9C211F08D86B5E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.4.0/24
154.94.16.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:55:90:3c:18:7e:f4:96:6b:a2:b7:44:61:47:0c:a9:96:17:
5c:80:ef:c0:d6:b5:32:38:ae:ae:8c:70:6b:a4:8d:a7:ee:74:
10:a6:4e:49:97:92:60:f6:ba:27:14:ca:ef:a5:92:b2:a1:e8:
a8:b7:e2:ef:d2:a8:88:f5:16:de:80:7c:00:ab:ea:b1:42:4e:
d8:ff:33:50:2a:f9:50:a6:9c:0b:72:4f:df:b0:b9:45:49:9e:
64:79:47:09:6c:f8:05:d8:6f:dc:09:c3:c4:80:81:00:f6:50:
29:ec:88:ba:aa:b3:bd:f8:fc:96:6b:77:96:24:8a:65:65:c5:
0e:66:85:b4:15:fd:85:74:02:e3:68:b1:30:91:f5:9f:5a:31:
a9:09:02:87:93:91:eb:cd:50:8d:31:8e:ab:8c:c2:1a:e5:ee:
37:f5:71:d1:c7:cc:d9:a3:27:5d:1f:40:72:12:14:4a:fd:7c:
a3:e3:5b:8a:1a:50:3f:0e:45:98:57:45:82:24:3b:e8:6b:92:
61:32:2d:b0:8b:ac:93:47:79:ba:67:3a:d6:2d:ed:ed:c4:e6:
2a:b1:8a:54:26:e2:02:63:10:02:0c:f2:5b:5d:41:39:d5:cb:
2d:56:95:84:88:5d:ca:4d:ae:0e:ce:10:fe:c2:50:8a:02:dc:
db:a5:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:06 2025 by rpki-client