Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D79431089D7511F0B52CD4ADDAE4EC9C.roa
File: D79431089D7511F0B52CD4ADDAE4EC9C.roa (raw, json)
Hash identifier: EOblr2F4GLggoD89A5tgAfqqOeH4AgWbJGizYC+L+/E=
Subject key identifier: A3:4F:ED:25:CD:5C:83:C2:5D:14:22:7A:92:D0:76:C0:8C:4D:64:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A185
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D79431089D7511F0B52CD4ADDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:49:50 +0000
ROA not before: Mon 29 Sep 2025 20:49:45 +0000
ROA not after: Tue 04 Nov 2025 20:49:45 +0000
asID: 61112
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106885 (0x1a185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 20:49:45 2025 GMT
Not After : Nov 4 20:49:45 2025 GMT
Subject: CN=68daf0ee-46ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:e9:11:ce:b3:6d:39:7b:bf:80:5f:f2:90:
5d:04:57:b4:1c:52:67:51:d2:fe:e2:a9:5c:5f:09:
15:2e:50:16:1b:4c:02:85:6a:d9:59:9a:2d:15:35:
ec:22:7e:97:34:a5:39:cb:18:c5:db:7d:df:29:49:
09:a9:f1:a1:3d:1e:ce:72:fc:15:e8:aa:67:85:ed:
f5:84:4b:83:72:bf:e3:45:aa:9c:f7:5e:1b:fc:5b:
73:88:1a:8a:a9:a9:ee:60:23:63:a0:3a:0b:dd:a6:
fe:b9:d6:e9:03:5c:32:28:d7:ff:7a:05:dd:69:60:
26:b4:8a:d0:8a:7c:13:13:8b:cb:7f:22:1e:79:23:
af:af:e1:73:6d:1a:be:5a:25:68:44:6a:6e:67:89:
6e:5e:e6:74:44:ef:d8:d9:d1:98:84:a1:ad:79:83:
5b:fb:25:7d:13:a6:0b:96:30:d9:71:8c:44:d9:72:
de:b4:a7:23:51:14:48:84:fc:c9:40:10:61:b6:b1:
f5:77:1c:d6:b4:de:fd:b8:2b:2b:f0:ab:6c:d0:7d:
cb:cb:23:8e:cf:2b:15:61:6e:c1:aa:86:ec:60:aa:
4d:8b:1b:2e:78:fd:68:92:69:95:73:03:98:7e:4f:
0a:08:d5:c3:34:09:1b:92:d6:71:46:2b:39:cb:48:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:ED:25:CD:5C:83:C2:5D:14:22:7A:92:D0:76:C0:8C:4D:64:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D79431089D7511F0B52CD4ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:b4:20:f8:93:ca:b3:bc:8c:c6:c7:c3:9a:87:b2:14:46:49:
34:79:1c:53:67:b3:d3:62:39:58:62:27:61:2a:d7:d1:49:fe:
6d:b9:b6:eb:a2:e6:bd:f8:19:d2:d2:53:9f:49:1a:33:37:64:
22:58:76:8b:81:e6:cf:92:3a:dc:4c:a1:9d:a6:4e:6b:e4:8d:
63:28:d5:73:fe:25:0c:f4:b0:e1:b7:02:07:3c:98:40:1a:e0:
5d:7e:f3:a1:10:47:e3:65:9c:f2:f6:7d:8e:bb:d4:4d:16:c1:
87:c7:09:d9:ab:3b:9a:d6:40:75:77:cb:50:d9:71:12:09:f2:
09:5d:a0:94:ba:19:ec:45:f9:b4:56:35:ea:c9:19:28:6d:c5:
67:a4:cf:5a:b6:e1:f9:59:c0:e9:d1:b9:e8:5b:6a:7e:08:1e:
28:1f:3d:cb:55:23:e1:47:bb:fc:29:64:cb:10:b3:fd:ab:43:
9b:df:67:a7:9f:53:25:14:20:72:71:1d:c5:cf:58:5d:c1:80:
bb:e7:7c:e3:29:7d:fe:12:4d:ec:fc:b7:b1:12:97:5e:62:30:
a3:00:7e:90:6f:d4:cb:f3:48:58:ce:5b:d1:14:b9:81:81:c3:
27:83:ba:88:77:68:0f:27:1c:24:bd:8d:47:82:0e:cc:99:c7:
1a:22:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:45 2025 by rpki-client