Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D99B3C32953011F097B55DB0DAE4EC9C.roa
File: D99B3C32953011F097B55DB0DAE4EC9C.roa (raw, json)
Hash identifier: uUKO0HeQ0+m1C/F1sBliDh0L4ShCmbYvCEr3pPvK+P8=
Subject key identifier: 57:FC:B4:2E:2E:3C:44:74:DC:78:38:F4:A1:91:04:EA:49:D2:82:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A021
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D99B3C32953011F097B55DB0DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 08:15:49 +0000
ROA not before: Fri 19 Sep 2025 08:15:44 +0000
ROA not after: Sat 28 Mar 2026 08:15:44 +0000
asID: 26617
IP address blocks: 154.202.6.0/24 maxlen: 24
154.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106529 (0x1a021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 08:15:44 2025 GMT
Not After : Mar 28 08:15:44 2026 GMT
Subject: CN=68cd1135-6994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:93:b0:17:89:97:7c:00:81:51:99:a5:0b:
cd:b0:5a:76:da:20:36:89:39:22:76:92:52:25:a7:
d3:da:72:79:af:0b:4f:b3:8c:9b:20:ae:92:18:8b:
2b:69:b9:30:43:da:63:82:d0:40:64:ae:75:10:82:
47:84:c9:85:33:2f:99:ac:13:e2:1d:2b:ef:45:a2:
a8:de:42:9a:44:9e:70:65:8f:bc:63:f8:ab:c4:a6:
38:4c:bf:08:f1:10:d9:22:96:0f:7f:ef:e9:f7:23:
fe:2d:97:ed:ad:03:7a:9a:ed:28:f4:6e:04:b9:cb:
8b:b6:2c:de:07:63:e9:d3:01:b8:a4:41:e1:5c:4d:
f8:3e:3e:f7:32:53:41:ff:bd:ad:8e:2f:5a:f8:33:
87:be:a0:92:b3:13:99:c3:4b:81:22:ed:44:ef:5f:
64:c4:ba:84:21:2c:03:e2:f8:cf:ed:18:1d:c3:cb:
24:f8:7d:e9:e2:c3:00:eb:37:3c:43:b3:cc:b8:79:
e5:8e:1f:89:5e:af:b1:64:46:bd:c0:f4:34:94:95:
2a:ec:95:1e:6b:e5:ee:7a:c6:46:80:1b:43:ed:f0:
e2:5d:a7:f5:96:53:c7:af:c7:e0:a4:f5:52:32:f2:
2f:e3:fc:70:19:d4:39:8f:a6:51:a1:90:d5:48:25:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:B4:2E:2E:3C:44:74:DC:78:38:F4:A1:91:04:EA:49:D2:82:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D99B3C32953011F097B55DB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.6.0/23
Signature Algorithm: sha256WithRSAEncryption
68:73:30:5c:b2:1f:42:14:06:09:eb:06:f6:b8:0b:0d:ce:6a:
0b:96:e2:b4:01:0f:3e:3c:b9:54:b3:86:0c:5e:b2:0a:8f:0a:
30:fc:0f:1c:a5:a5:0a:01:65:0a:85:5b:db:8b:ee:c3:42:1b:
b5:6c:a7:3e:4d:c2:21:be:a1:20:ca:f5:9e:37:b8:6a:66:00:
7a:6a:ab:66:ec:b5:ca:dd:ad:29:81:ec:1c:3c:b7:3c:b3:ec:
0d:be:21:22:ce:b1:04:46:84:67:45:a2:26:7e:e1:5e:5e:59:
39:52:0c:4e:e3:04:13:83:f7:df:7f:97:b7:44:38:d9:51:70:
07:4d:26:6a:32:83:8a:bc:a2:17:5a:af:19:19:eb:1b:ef:57:
9c:1e:b7:b8:f3:c9:28:2a:24:72:51:f0:a8:ae:37:bd:85:9f:
41:31:19:a0:b7:a5:bf:20:69:39:d6:7b:08:5a:cb:cf:6b:86:
c4:57:77:d3:ab:ba:1b:24:54:2b:21:ae:c8:26:2e:78:37:b0:
91:cc:02:de:69:5f:76:2b:2e:49:2f:47:04:86:47:95:a9:02:
af:33:c8:7d:cd:fc:4c:cf:05:89:ec:6a:dd:0b:d3:46:88:70:
54:58:f4:7b:fb:ec:4f:d7:6f:74:2d:d9:d7:bd:3c:33:d0:de:
86:40:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client