Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9DDB872B0F111F09E4489F2DAE4EC9C.roa
File: E9DDB872B0F111F09E4489F2DAE4EC9C.roa (raw, json)
Hash identifier: h51V4YVZQ0X3Btu8KomB/ThbZ0XslTrthUxNEq62oBI=
Subject key identifier: 5A:13:6B:58:53:65:48:8D:A6:A5:7D:9F:86:2A:35:02:3E:E3:EB:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9DDB872B0F111F09E4489F2DAE4EC9C.roa
Signing time: Fri 24 Oct 2025 15:55:51 +0000
ROA not before: Fri 24 Oct 2025 15:55:46 +0000
ROA not after: Wed 15 Apr 2026 15:55:46 +0000
asID: 393437
IP address blocks: 154.91.32.0/24 maxlen: 24
154.91.33.0/24 maxlen: 24
154.91.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107735 (0x1a4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 15:55:46 2025 GMT
Not After : Apr 15 15:55:46 2026 GMT
Subject: CN=68fba187-0bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:0d:c9:42:cb:87:c3:86:94:8a:c9:d2:0d:
e9:4e:b1:2b:e0:59:22:61:7d:ba:e1:16:e4:01:b2:
7e:a1:04:ad:be:f2:28:7a:2f:30:ce:ab:f6:16:f0:
fa:1a:2e:8b:eb:ee:a0:90:85:9b:54:6e:d5:84:72:
1b:5e:09:47:b8:d4:9e:14:90:a5:d3:d2:b7:a1:c5:
d5:77:99:95:bf:cb:b6:c6:31:4f:d2:ce:9a:10:51:
ad:a3:46:6a:4a:0b:eb:77:54:8d:e9:39:35:4a:ef:
02:75:d4:a0:f9:73:a1:99:9f:20:b9:92:91:c0:d3:
92:b1:f2:38:92:32:de:65:61:b3:74:b2:4a:63:12:
b2:b9:ec:9a:65:11:b6:2c:1e:a2:0f:b0:15:38:47:
24:99:b3:84:3a:07:45:95:4a:06:75:40:21:a6:fb:
63:80:43:1e:bc:e6:24:f6:f3:d6:f1:bf:a1:5e:46:
6f:1f:bf:c3:01:08:e8:b0:33:18:d1:e5:71:77:c8:
99:23:f5:f6:07:5e:54:84:3f:1f:49:75:6e:0f:3c:
00:6b:ed:de:65:00:69:e8:71:9c:f3:f5:ea:b1:2e:
a8:63:3c:4b:10:4a:04:65:01:79:b6:98:82:ee:80:
c5:11:a9:10:42:8b:d0:48:0e:a7:80:aa:3c:d2:89:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:6B:58:53:65:48:8D:A6:A5:7D:9F:86:2A:35:02:3E:E3:EB:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9DDB872B0F111F09E4489F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0-154.91.34.255
Signature Algorithm: sha256WithRSAEncryption
77:80:cb:05:a7:06:1d:ba:31:14:f7:54:b6:21:6a:e9:a9:9c:
2e:5c:69:34:e6:43:1e:2a:01:78:0a:1d:69:21:60:75:6b:8f:
b5:1e:89:46:93:75:74:0a:c4:44:a3:0c:1c:df:82:11:00:16:
40:3e:01:07:4d:9a:b9:63:ff:20:b7:9e:c6:28:81:da:56:f7:
b3:12:5d:76:97:8d:6f:f7:68:2b:a4:8c:6c:32:53:66:43:1f:
7e:f9:4e:50:a1:58:21:9f:0f:b6:9b:83:a8:83:43:5f:6b:66:
24:b5:de:a4:ac:3d:44:29:c1:7e:98:51:5a:13:d8:22:8e:07:
c4:98:f3:16:b1:de:18:ed:49:1b:97:30:a2:9f:43:ad:08:7e:
a3:0b:06:c7:4b:14:e3:f7:7f:87:1c:f3:e5:d2:d5:db:81:e6:
0d:16:3d:a4:f6:f7:45:3c:eb:09:d8:7f:42:04:58:37:00:2c:
21:9e:35:91:b9:92:bf:2b:10:8f:64:0d:2b:a0:7a:b5:37:17:
4a:22:a0:c3:da:a3:ab:6a:95:5f:18:1c:da:bf:e8:fd:f0:f3:
e4:c1:23:9f:82:b8:dd:fd:21:11:12:81:03:fb:97:b7:19:d2:
31:e3:6c:e2:de:18:8f:fb:e6:38:e9:67:97:6e:20:74:08:53:
bc:57:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:11:05 2025 by rpki-client