Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2A73E6A4E911F08A4F4F94DAE4EC9C.roa
File: DC2A73E6A4E911F08A4F4F94DAE4EC9C.roa (raw, json)
Hash identifier: LqPbNn+VKTlTvVBAzFUogDstEENHGS+m9X4nio8cGio=
Subject key identifier: 5E:45:2C:A5:5A:E5:A7:F8:13:06:D9:C1:58:9C:83:63:ED:BF:61:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2A73E6A4E911F08A4F4F94DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 08:27:58 +0000
ROA not before: Thu 09 Oct 2025 08:27:52 +0000
ROA not after: Tue 11 Nov 2025 08:27:52 +0000
asID: 401615
IP address blocks: 154.82.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107252 (0x1a2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 08:27:52 2025 GMT
Not After : Nov 11 08:27:52 2025 GMT
Subject: CN=68e7720e-9915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c8:7c:1c:60:98:14:18:1b:61:96:cd:74:89:
c4:85:7f:2b:27:07:f4:4a:e1:61:a0:30:8e:84:5e:
cb:bc:f9:c1:db:39:f3:18:8f:5c:27:60:e3:b0:69:
e0:36:c3:ab:45:91:25:17:ef:c8:9e:ec:94:a3:b7:
b4:28:8c:1c:8e:90:b4:2a:ce:ef:79:7d:d0:c1:4a:
d1:61:c9:68:1f:44:de:86:cf:84:27:59:06:ee:86:
5b:81:6e:ef:ce:e6:57:fe:ec:06:52:c0:f1:a7:66:
82:94:08:a1:5c:fd:44:06:f6:4f:65:1b:b4:4e:d2:
ee:e6:3f:60:27:e6:6c:7f:ba:bd:e2:13:80:cf:be:
70:0a:f3:80:32:42:32:35:01:81:df:9c:3d:30:30:
45:5f:4d:10:38:2a:a5:c6:b3:3f:e6:0f:f8:0c:b5:
10:8d:a8:59:18:6d:da:cb:6c:72:e9:f6:b2:bd:29:
bf:80:7f:96:fd:4f:5f:47:ba:ff:9b:71:0c:b5:da:
2c:15:90:ce:04:71:da:59:a8:d0:2d:53:21:68:d4:
bd:11:32:a9:60:8b:0a:49:6f:71:83:01:ec:47:0c:
94:e9:e1:9d:4c:56:78:bf:74:27:7c:2c:4d:19:90:
cc:c5:4f:ef:88:aa:03:c2:dd:0f:f8:93:09:d4:8b:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:2C:A5:5A:E5:A7:F8:13:06:D9:C1:58:9C:83:63:ED:BF:61:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2A73E6A4E911F08A4F4F94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:eb:5f:18:7d:63:35:e7:64:ee:b1:16:98:e0:da:eb:f3:95:
44:e4:eb:f5:2d:6b:43:85:5a:90:91:b7:56:4d:43:5d:88:b9:
8d:5d:e8:a2:88:6c:98:19:47:1d:6b:d7:27:02:e9:51:b7:51:
5c:ec:c4:07:72:bd:63:dc:ad:d7:e0:94:b8:2f:7f:e1:aa:21:
57:4c:1c:5d:15:82:a9:db:69:17:14:79:43:e8:50:b4:b5:e0:
0d:82:44:6a:91:91:71:1f:ea:12:ce:11:22:2a:13:bb:56:fd:
81:ea:2a:36:b6:31:5a:cf:90:59:14:92:2d:4d:c7:cd:8b:0a:
da:83:b4:6e:ef:4f:9b:4b:75:91:fa:bd:7b:a1:64:57:fb:cc:
03:e4:35:6f:24:e9:8e:d5:2d:95:f6:65:4e:d2:b6:93:35:ee:
94:ec:0a:f4:2b:8c:1b:5d:5e:47:5f:5d:fa:36:e4:8d:38:3b:
4c:d1:5d:0d:d9:53:f0:84:71:82:5a:8d:c6:ef:5e:63:80:74:
be:62:1d:13:21:eb:c9:b5:c9:c2:61:79:5f:df:2e:59:b1:08:
b2:ff:12:18:23:1b:82:e8:66:2f:12:7a:83:d2:23:08:c9:5f:
a0:bc:26:7e:67:0c:8c:9c:5a:c7:36:5b:b4:e8:2d:eb:ae:5a:
44:66:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:05 2025 by rpki-client