Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6643E5C8A3911F089E5CFF4DAE4EC9C.roa
File: E6643E5C8A3911F089E5CFF4DAE4EC9C.roa (raw, json)
Hash identifier: OiKrRsr6p2NkwNI4yColDe1zYJ7iOQaZ/gkgpiK5Ly0=
Subject key identifier: B3:01:3E:10:F3:FE:1F:05:14:8A:96:D4:21:6E:09:18:32:AB:1B:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6643E5C8A3911F089E5CFF4DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 09:22:53 +0000
ROA not before: Fri 05 Sep 2025 09:22:48 +0000
ROA not after: Mon 14 Sep 2026 09:22:48 +0000
asID: 135600
IP address blocks: 154.205.12.0/22 maxlen: 24
154.205.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105988 (0x19e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:22:48 2025 GMT
Not After : Sep 14 09:22:48 2026 GMT
Subject: CN=68baabed-8acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:8e:ec:ae:b9:79:e5:d1:5b:3c:89:75:1e:
8a:fe:d5:ee:e8:cc:37:d3:03:b2:96:de:3e:e7:00:
9d:fc:3c:15:8d:6a:3e:c2:c2:27:a2:70:49:70:4c:
50:13:53:28:5a:40:49:c1:71:6a:88:50:83:db:fa:
1d:74:84:83:1f:16:53:ca:c8:0f:66:2a:92:c6:51:
2f:4c:e2:d4:d9:0f:34:f5:5e:4e:6d:26:39:79:13:
ba:f7:d5:4a:e9:ce:34:44:7a:2b:f7:d1:f0:3f:93:
63:04:b9:73:1a:4e:25:89:44:b6:46:c6:c9:9f:d3:
f2:be:84:ec:4e:41:40:e9:db:a9:af:93:ba:43:da:
18:36:cb:d2:ef:06:4b:0a:81:f2:6b:b9:0f:5c:35:
ec:4f:25:02:7a:d9:12:cd:33:79:d5:9f:cd:d5:f5:
d9:48:8f:6b:a5:79:36:2e:af:35:e5:b1:2c:31:5d:
ac:2d:e4:19:ef:ed:54:09:0a:42:db:61:d9:c2:46:
2c:02:6a:ab:d9:b2:6b:89:fe:4d:ff:77:5f:cf:d9:
ce:57:50:39:a1:9d:92:c2:6d:4d:00:73:22:41:3d:
e5:a3:44:32:4c:e0:32:58:32:2e:09:bf:a4:9c:8e:
a4:7c:5e:7b:34:f0:1b:b8:dd:84:d1:91:79:93:84:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:3E:10:F3:FE:1F:05:14:8A:96:D4:21:6E:09:18:32:AB:1B:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6643E5C8A3911F089E5CFF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.12.0-154.205.19.255
Signature Algorithm: sha256WithRSAEncryption
cd:49:45:a4:61:a2:06:2b:8f:f0:fb:fa:29:44:bd:79:39:1a:
d4:d2:a5:c8:c6:c2:5e:65:94:ee:f4:d2:13:c9:61:9f:db:2d:
5a:42:d3:8e:de:b6:73:b9:2a:a4:63:87:f0:2e:2f:01:56:b9:
67:6e:94:94:75:97:d5:3f:e6:82:1b:a7:99:83:ae:b9:6a:6d:
65:50:64:20:39:1a:07:db:df:c6:88:a7:cd:96:34:48:e0:5e:
79:5c:40:97:f6:87:48:f8:e9:b7:c8:c8:3a:c2:30:3a:2e:ba:
54:1c:8a:c5:be:6c:c9:51:a3:5c:ed:a1:84:ee:94:2f:fd:b5:
29:2b:1f:87:ec:92:44:51:8a:3a:32:18:fe:da:59:5c:a5:a8:
f3:65:df:7b:69:03:c0:af:6f:36:26:68:8c:24:bb:38:89:e4:
cc:98:c9:f2:65:2a:3c:c7:11:ee:19:de:71:b6:17:17:b9:98:
32:d0:02:c9:ba:8a:56:e3:f1:b4:e6:ca:9c:9b:14:50:f6:35:
bd:7e:76:75:db:17:c1:46:4f:8b:c3:e4:82:0c:a6:1f:94:0a:
f2:2d:3a:7d:25:c0:1a:a4:48:8a:ed:40:97:3c:df:42:ef:1a:
f6:94:40:25:15:e4:a4:14:a5:32:e3:cf:ea:70:67:c4:c4:75:
37:39:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client