Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E852BC06A43E11F08F13A3BBDAE4EC9C.roa
File: E852BC06A43E11F08F13A3BBDAE4EC9C.roa (raw, json)
Hash identifier: kIrOsArIOB3IeLDkdUbhE66bl92liL6xiawhgexHj8M=
Subject key identifier: 23:CA:D8:3C:AD:CA:2C:08:AA:8A:43:0F:0E:F3:32:27:DA:11:6C:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E852BC06A43E11F08F13A3BBDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 12:04:14 +0000
ROA not before: Wed 08 Oct 2025 12:04:09 +0000
ROA not after: Thu 20 Nov 2025 12:04:09 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107217 (0x1a2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 12:04:09 2025 GMT
Not After : Nov 20 12:04:09 2025 GMT
Subject: CN=68e6533e-8441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:63:3f:e3:b5:9f:1c:4a:86:40:91:d1:3e:
f8:e6:a9:c3:6d:6d:83:39:48:c4:92:4f:5d:1a:c1:
ac:94:76:e9:19:56:1e:de:cc:f1:4b:8d:3e:2c:e0:
69:6d:32:16:ab:f3:81:10:83:49:08:23:d0:08:c7:
0d:04:ec:25:4e:26:b4:1d:bb:3b:00:d7:2c:84:2d:
d8:1d:8e:4f:63:a6:9c:eb:ce:28:9b:ce:06:e9:4e:
19:c5:92:91:ec:0e:06:9f:7d:61:a7:ba:88:75:21:
f3:60:c5:f7:08:84:35:5d:37:8d:ac:69:d6:ca:b7:
2f:92:1c:7d:10:9f:ee:57:53:bc:31:a8:9f:4e:ed:
b5:7e:19:42:1a:c8:73:9c:97:7a:45:a9:2d:f8:51:
ea:8c:96:a9:c5:eb:d1:38:fe:b1:6f:96:cf:07:4f:
f9:b5:ee:da:47:9b:91:9d:52:44:2a:1d:2a:92:0a:
0e:d3:a4:87:f0:17:89:9d:85:dd:74:c4:aa:85:5b:
4f:5a:49:1d:6a:1e:74:8c:99:81:7b:95:1c:ef:01:
79:49:bd:fd:cf:77:e1:b3:b9:23:76:90:1b:20:75:
1f:50:43:bc:49:6d:12:e8:95:9b:e5:eb:b1:77:57:
96:e5:24:d7:40:18:1a:b6:8d:c1:db:99:8f:3a:c8:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:D8:3C:AD:CA:2C:08:AA:8A:43:0F:0E:F3:32:27:DA:11:6C:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E852BC06A43E11F08F13A3BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
44:97:99:e8:78:aa:40:3c:80:47:56:58:38:dd:47:79:73:78:
b9:29:3d:2b:1c:56:fe:0f:a1:da:21:67:f5:82:13:ed:39:0b:
8f:42:59:3e:72:07:e8:1a:cd:b7:0f:a2:80:b5:31:4d:30:81:
f6:33:fc:71:73:9c:5f:7b:55:1f:12:70:ab:90:8b:c6:e2:74:
c9:b9:97:91:2d:97:ec:4c:e2:ac:c7:31:cd:45:c5:6d:da:68:
03:6c:eb:62:83:14:0f:26:a8:40:ff:1b:a8:0d:a4:f7:61:60:
4b:ea:70:a0:bf:90:92:5f:7f:3d:da:ea:44:39:93:9c:d5:4a:
ba:c4:56:77:ac:ad:5e:be:86:b5:1a:b7:4a:d2:c0:af:47:dd:
a4:e8:1c:86:a8:c4:20:bf:40:2e:ba:8a:5e:fb:f9:95:33:0c:
fb:27:d9:00:aa:68:e5:5e:96:e0:f0:6a:90:94:7b:e8:71:e0:
46:db:15:2e:4d:69:a8:0a:d5:a6:ed:db:6c:3f:25:75:0c:f6:
2d:04:e8:76:7f:3a:cc:1d:21:93:f7:db:5d:2b:02:a0:9f:9a:
79:84:2b:e9:7c:77:17:be:19:67:e3:44:ea:8f:a7:37:d1:71:
b0:69:a6:f0:90:19:a2:9c:3b:ed:c7:4e:2d:1f:06:82:77:ca:
f9:34:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:04 2025 by rpki-client