Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEBF75D8A9C611F0892E897DDAE4EC9C.roa
File: EEBF75D8A9C611F0892E897DDAE4EC9C.roa (raw, json)
Hash identifier: L+mtQeYlpQdgFwFSgsBqV6lxhjXyF01Myll2T59Ybp8=
Subject key identifier: E7:86:83:2C:95:0B:A7:22:77:E1:49:09:3F:60:82:CA:93:36:50:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEBF75D8A9C611F0892E897DDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 13:00:33 +0000
ROA not before: Wed 15 Oct 2025 13:00:28 +0000
ROA not after: Tue 25 Nov 2025 13:00:28 +0000
asID: 61112
IP address blocks: 154.85.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107427 (0x1a3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 13:00:28 2025 GMT
Not After : Nov 25 13:00:28 2025 GMT
Subject: CN=68ef9af0-1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:6a:60:21:2d:8f:d3:e0:de:4e:8b:19:4c:
07:72:59:5e:1e:cf:75:9f:c1:a2:ef:ec:64:3b:3d:
d4:17:6e:8e:a4:4b:96:62:f7:d0:a1:b5:e3:eb:28:
d7:91:5e:92:6e:26:33:64:e8:92:c9:00:bf:2c:48:
80:b7:d6:4e:7e:c0:bd:fb:19:d0:34:b1:cf:b3:ca:
00:27:65:ab:23:d7:8f:16:03:aa:a8:12:e1:5c:77:
7f:30:dd:c6:16:7c:3a:4c:73:9d:dd:2e:ef:5d:93:
14:61:42:96:4a:84:f7:22:80:9c:c1:53:72:de:3e:
e2:61:93:60:12:89:24:20:f1:df:15:70:40:bb:76:
95:46:55:ec:96:95:6f:e9:ed:d3:96:2c:53:e5:3b:
04:50:e3:5e:20:8e:2d:61:ba:f4:5e:b8:26:8a:90:
8a:7c:4d:fa:85:dd:11:a9:8c:63:47:2c:38:23:53:
aa:22:72:26:fc:70:84:59:62:98:03:2c:25:32:0b:
a6:6b:14:39:82:ff:b4:d5:c3:e0:df:c4:a0:c7:d9:
92:f8:44:1d:b8:ce:2a:37:91:9e:88:06:86:56:e0:
eb:75:40:9c:91:bf:e0:76:48:bb:09:e3:54:63:32:
a1:1b:c6:3f:3d:2b:9d:ef:bb:b2:71:ac:fb:72:fe:
78:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:83:2C:95:0B:A7:22:77:E1:49:09:3F:60:82:CA:93:36:50:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEBF75D8A9C611F0892E897DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:c1:18:ab:94:86:a9:0e:91:8e:76:90:18:1a:89:2c:ed:de:
84:01:5c:85:b3:95:f8:e3:3e:fd:95:e0:89:1c:8c:27:ce:b3:
4b:e9:6e:c6:43:33:e7:0b:82:06:04:88:1c:8d:83:23:b9:9c:
0d:84:c9:31:0f:f9:91:5e:66:64:b1:06:25:a1:7e:26:9e:d9:
fd:5a:d3:0b:c3:f3:9a:b3:81:1d:84:ff:35:87:0e:93:1f:a2:
42:b6:a0:a7:3c:78:40:36:bf:6b:50:94:6e:bf:fd:7a:f3:b0:
9c:9c:e6:e5:12:0b:89:1a:f8:17:4c:a5:01:bc:cf:75:82:a6:
df:fe:af:dd:49:c1:30:ca:16:57:16:e4:c8:7a:6b:22:88:3d:
54:1e:89:21:97:00:01:f2:20:26:eb:b6:65:20:42:2e:03:cd:
a7:b8:dd:13:78:aa:3d:5c:93:b1:2a:5a:53:9b:c1:70:a1:10:
df:53:39:19:b5:ed:45:e0:c3:a9:fd:2a:43:aa:29:1f:3e:41:
c1:ec:97:ad:e8:8d:88:8a:ff:8e:cd:ed:4a:f3:87:5e:79:af:
46:40:46:87:f5:7a:9b:46:b7:20:ed:10:5a:9d:32:56:0d:7e:
27:60:65:e1:74:95:9f:8a:40:12:ba:d4:fa:94:30:6d:48:95:
33:05:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client