Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3182D2AB3711F0AE5726ADDAE4EC9C.roa
File: DB3182D2AB3711F0AE5726ADDAE4EC9C.roa (raw, json)
Hash identifier: 0eNKK9mktnym7kAVSB6gezcmUC+y/Nw2BOZvBiUqs74=
Subject key identifier: E5:C9:2A:C0:CF:F8:40:2B:D0:50:3A:6E:EF:E5:AB:F9:3A:07:96:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A420
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3182D2AB3711F0AE5726ADDAE4EC9C.roa
Signing time: Fri 17 Oct 2025 09:01:24 +0000
ROA not before: Fri 17 Oct 2025 09:01:15 +0000
ROA not after: Mon 24 Nov 2025 09:01:15 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107552 (0x1a420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 09:01:15 2025 GMT
Not After : Nov 24 09:01:15 2025 GMT
Subject: CN=68f205e4-28a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:28:4b:44:3c:b3:17:ac:32:3a:a2:01:75:
9c:4c:14:d8:16:28:43:8d:c2:6e:03:7a:4b:51:01:
fc:35:25:c6:35:4a:12:75:07:8c:6a:b1:eb:fc:e0:
91:17:14:40:23:30:ce:20:16:cb:39:c1:3f:c5:4b:
43:bd:51:6a:34:eb:e1:4a:a2:0f:52:94:0c:10:09:
2a:7e:75:4e:91:3a:41:8d:ff:b6:27:c9:a9:d1:14:
10:00:4c:88:89:8e:d0:cf:6c:84:a2:0b:f0:35:4c:
f8:77:85:f3:92:0d:6a:e6:fc:88:b2:8e:4a:e6:6d:
61:82:ca:c0:62:52:35:d1:4e:c4:41:3c:40:e9:1b:
6b:ec:88:d2:29:b8:62:87:c9:5e:0c:cd:73:d4:be:
e0:67:7c:86:b8:65:73:45:02:25:dd:70:ff:3c:c7:
27:d5:6a:9f:63:e4:85:ad:ae:42:6f:15:02:bb:67:
a5:d3:db:a6:42:9d:4e:20:1b:ba:1f:ce:fd:36:82:
45:29:58:74:8e:da:ff:8f:8c:3f:ed:79:2f:5f:73:
87:5c:31:41:bd:6d:08:80:f0:26:9f:d3:0f:77:b5:
f5:a3:8c:d1:be:50:9f:72:2f:dc:45:c7:e6:fd:40:
3b:71:34:66:f5:fa:35:90:71:d2:c5:6f:2a:f8:de:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:2A:C0:CF:F8:40:2B:D0:50:3A:6E:EF:E5:AB:F9:3A:07:96:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3182D2AB3711F0AE5726ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
88:d0:b0:a9:9f:0e:79:af:66:49:8c:d8:48:b8:a0:50:06:dd:
0c:d4:a5:34:81:bf:39:e5:e6:bd:01:4e:5b:9d:cb:03:89:37:
13:45:f8:9e:54:24:a3:85:b0:d6:08:9a:fb:b9:3c:8d:44:22:
69:d3:eb:8a:b3:05:03:ca:52:bf:96:da:da:cd:90:b3:d1:14:
81:b7:66:47:3d:49:23:96:ba:cf:cd:9f:28:cc:03:b6:79:5d:
8e:63:5b:28:f9:5c:e8:c9:c4:19:67:e0:34:74:31:58:d4:76:
74:a3:52:9e:65:14:d6:b0:8b:09:c5:44:67:e8:a0:76:63:0c:
32:68:d3:eb:4b:4c:50:81:77:0a:e9:2c:df:cb:8f:bf:0a:5e:
17:ff:6b:6d:ba:3e:72:49:a3:ed:84:03:d4:0f:de:bf:21:50:
8f:7b:4d:0b:68:0a:ba:f9:29:b9:5b:b7:eb:55:dc:22:14:66:
8c:ec:69:09:6b:fd:3d:ae:49:c8:08:03:e6:9f:5b:14:9a:1c:
18:4e:06:68:40:55:bb:3e:cf:5d:84:dc:8b:30:ca:a7:36:7d:
b8:ca:80:82:5e:f5:5f:22:3d:12:2a:d0:f0:db:8a:41:aa:0b:
ca:36:c0:c4:84:72:58:ab:1d:30:4d:b6:a6:99:6d:37:1c:d3:
93:e7:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:58 2025 by rpki-client