Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8A4CF2A9C411F09244C7EEDAE4EC9C.roa
File: DA8A4CF2A9C411F09244C7EEDAE4EC9C.roa (raw, json)
Hash identifier: PiXy044IH8eWpm0pvLYhS6jZkittO8WLRxtn5EYPWDE=
Subject key identifier: 23:41:8D:76:FD:43:E4:CD:E9:DF:40:FF:2E:8E:C4:D5:32:CF:60:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8A4CF2A9C411F09244C7EEDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 12:45:40 +0000
ROA not before: Wed 15 Oct 2025 12:45:35 +0000
ROA not after: Tue 25 Nov 2025 12:45:35 +0000
asID: 21859
IP address blocks: 154.193.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107425 (0x1a3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 12:45:35 2025 GMT
Not After : Nov 25 12:45:35 2025 GMT
Subject: CN=68ef9774-fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:c8:36:b1:08:29:8a:bf:a8:c8:ad:d9:5d:
b9:25:89:1c:01:a5:13:cb:10:b5:51:1d:6d:fb:42:
ce:b1:a7:72:79:59:a4:33:e5:e4:7d:d3:55:ba:04:
7c:93:29:27:a4:d1:0a:6a:32:3f:c5:52:3e:d6:03:
8e:44:ff:56:f5:8a:94:48:02:2a:1c:82:51:51:d7:
4f:5e:eb:19:f7:72:4c:a8:4c:3b:13:b8:34:3f:38:
c4:a0:d6:2e:a3:e6:62:13:62:0c:83:37:96:56:e2:
e1:29:83:19:9d:6e:66:c3:33:f0:b8:c0:74:29:39:
2b:a8:b1:f8:f7:ff:ec:a5:4b:db:ec:49:5f:35:8c:
60:e9:36:76:5f:0b:ce:63:2d:b7:c6:a5:db:b8:a3:
15:e8:7a:bf:e7:f1:44:70:3d:b5:4a:f6:a1:c8:24:
05:0f:0b:ff:1a:86:11:d4:a4:f6:ca:b9:91:fa:2c:
7d:41:de:35:27:8f:d1:6f:91:23:4a:34:4b:ce:16:
90:ba:ae:d4:74:29:06:8d:82:bc:bf:f1:13:a9:76:
03:1b:6b:ce:b0:49:25:6d:d4:b6:6b:36:db:57:31:
86:28:53:69:af:d4:05:66:36:f5:46:0a:db:0e:0a:
ff:3e:2d:0a:bf:98:b1:64:4b:07:c9:23:99:59:53:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:8D:76:FD:43:E4:CD:E9:DF:40:FF:2E:8E:C4:D5:32:CF:60:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8A4CF2A9C411F09244C7EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.129.0/24
Signature Algorithm: sha256WithRSAEncryption
29:59:23:20:d4:c9:4d:f0:73:51:2a:ac:d8:e6:a2:7c:c3:9c:
48:4f:ea:1b:81:2c:ea:55:7b:a7:b3:c0:07:90:44:e1:7e:df:
9b:33:71:a3:44:2b:78:5f:81:29:06:e4:b0:f2:63:2a:f3:29:
94:a4:57:85:19:0b:b7:e0:83:d9:13:fe:00:46:c1:65:8a:cb:
46:24:aa:49:f5:46:b3:5b:91:06:56:d1:ae:ed:ab:a8:c1:4e:
a4:ca:08:b8:15:a3:75:af:1a:7e:f4:23:d5:f2:03:4a:e0:d6:
20:0c:45:0b:dc:06:e7:52:44:aa:7e:8a:16:e0:2e:6e:fb:06:
f7:12:3c:bb:9a:db:d8:71:2d:0a:95:5a:54:1f:10:4a:9a:2f:
c0:51:0c:9b:9e:0e:e8:57:7b:46:cb:8e:7b:fe:59:cf:5f:71:
8a:30:0f:5f:26:f3:d3:15:5e:6d:6b:f6:48:04:3a:92:81:52:
83:f2:bd:69:ed:0e:69:ea:e4:ab:48:3f:b0:16:fa:df:12:18:
7c:66:7d:87:f1:b3:ed:2c:f5:a6:4c:a5:c8:26:70:8e:2c:50:
a1:0a:95:52:be:fb:7a:8a:f2:e8:40:b0:99:b0:e0:af:96:e2:
5b:04:34:18:ff:e6:3c:de:7f:7b:74:cb:9c:57:6b:fd:86:59:
fd:82:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:14 2025 by rpki-client