Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E98CF41EA9AD11F0876465DEDAE4EC9C.roa
File: E98CF41EA9AD11F0876465DEDAE4EC9C.roa (raw, json)
Hash identifier: 5NnwPyFRQG0R+BU6X+8bnen0qTRJ2Uz12B51e3j3WTE=
Subject key identifier: 9B:B7:22:2C:B5:F7:25:A3:11:D4:4C:46:D0:1A:9C:0C:50:B6:8D:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A38F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E98CF41EA9AD11F0876465DEDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 10:01:26 +0000
ROA not before: Wed 15 Oct 2025 10:01:21 +0000
ROA not after: Thu 20 Nov 2025 10:01:21 +0000
asID: 20326
IP address blocks: 154.199.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107407 (0x1a38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 10:01:21 2025 GMT
Not After : Nov 20 10:01:21 2025 GMT
Subject: CN=68ef70f6-7703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:87:79:84:ea:1f:7b:fc:c7:81:c7:e9:77:
5c:c9:00:c8:06:73:8d:6f:34:d4:89:64:91:76:c2:
e8:02:59:39:4f:70:d6:c3:7e:ca:bf:a9:59:e2:b6:
07:2b:f6:d3:8a:7e:e9:8b:25:10:40:32:e2:76:9b:
0f:06:29:75:9d:6b:c5:85:5a:06:84:7f:f1:c0:a0:
10:af:95:89:f0:31:8f:09:bb:33:4a:ff:0c:fb:15:
eb:70:67:fa:07:6d:c2:58:66:83:bc:c2:a7:2e:75:
68:a8:1f:8a:69:5b:74:b7:06:c5:9e:23:97:f9:10:
55:3b:27:57:ef:26:4f:5e:18:1d:14:f2:da:da:da:
b0:28:10:11:71:80:5a:12:6d:75:66:dd:b4:7e:fd:
d1:b1:e6:12:68:93:68:af:ce:d2:7a:92:78:81:8d:
f5:b0:b7:d4:6c:79:9a:d4:1d:1e:72:a4:16:9b:f1:
f3:3b:fc:30:d7:21:3a:a2:4d:61:7c:73:e8:1a:12:
b6:ba:a5:7b:f9:dc:4d:dd:d6:12:42:15:3d:f5:65:
bf:c3:63:a0:89:e2:11:2f:b0:7e:0c:6a:4f:10:4c:
90:5b:5a:87:94:a8:39:c7:cf:67:8c:a5:4c:40:2f:
b0:25:b6:2e:c8:e4:e4:8c:25:a3:50:86:bc:6f:77:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:22:2C:B5:F7:25:A3:11:D4:4C:46:D0:1A:9C:0C:50:B6:8D:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E98CF41EA9AD11F0876465DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.160.0/19
Signature Algorithm: sha256WithRSAEncryption
36:76:ba:7b:74:0d:97:c1:83:da:6f:b0:bf:f9:5a:4e:c4:0b:
c2:4f:4d:c5:5b:82:e7:78:dc:47:bb:d5:84:6d:25:65:b4:dd:
7e:37:97:56:53:a2:e9:27:b4:d8:d2:a8:ff:6c:b2:d5:28:e0:
f3:53:bf:e0:29:53:36:38:96:9d:2c:c5:8f:d5:6d:99:ff:8a:
1a:1f:14:7b:e8:aa:e7:85:61:fc:84:d1:da:a4:bb:c1:44:a1:
a5:d3:39:56:36:55:ec:40:21:48:5d:a5:fb:ff:0b:d0:ef:71:
e6:5c:1d:31:81:9f:a7:23:ba:7d:4d:c6:ce:e6:96:6b:1d:4f:
84:7c:5b:5b:45:cd:e3:f4:49:9c:f9:d5:74:ed:f3:5c:1f:04:
73:1f:7e:3b:4c:1b:8d:1c:bb:20:91:d6:f8:84:1b:d3:99:96:
e8:95:1c:f8:e4:4a:3d:39:8f:15:e4:82:22:aa:61:5a:df:d2:
a6:ea:d1:03:c9:d1:e1:5c:6a:c8:65:3a:28:4d:2e:4a:b3:97:
6d:65:4a:40:0a:73:a5:6e:72:b9:f8:83:ee:63:3f:dd:79:80:
b4:50:8e:31:3e:92:c2:40:38:21:78:82:37:15:db:3f:93:14:
e3:89:28:17:9f:e4:4f:4d:d5:45:69:48:1a:8b:31:49:49:85:
8a:af:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client