Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CF343EA5B011F0BF569E9EDAE4EC9C.roa
File: F2CF343EA5B011F0BF569E9EDAE4EC9C.roa (raw, json)
Hash identifier: CzbUKriy0curfQYiOmh+S/pHC0AZUuUndzCI85XsPUQ=
Subject key identifier: E7:A2:9A:AD:41:7D:B3:21:13:10:86:82:C6:5B:16:F7:B6:D2:C8:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A32D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CF343EA5B011F0BF569E9EDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 08:13:06 +0000
ROA not before: Fri 10 Oct 2025 08:13:01 +0000
ROA not after: Sun 16 Nov 2025 08:13:01 +0000
asID: 401783
IP address blocks: 154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107309 (0x1a32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 08:13:01 2025 GMT
Not After : Nov 16 08:13:01 2025 GMT
Subject: CN=68e8c012-44f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:6d:a9:83:ab:41:ab:04:ce:28:16:d7:88:
e5:85:a3:d2:69:3b:c7:d6:ab:a1:02:e7:52:53:19:
b2:3c:ef:44:0b:4c:76:3e:35:a5:f6:f0:ef:9c:10:
44:3e:78:c3:ea:58:78:c1:9b:d8:30:97:c7:26:47:
47:a4:81:9d:45:b4:46:08:c6:30:68:a4:c8:35:8a:
b3:32:be:84:73:9f:c7:b0:9c:4d:cb:c7:8c:81:26:
ab:4e:17:6c:03:94:ef:19:5c:0f:31:d9:24:c0:05:
50:81:3a:9d:42:ee:83:7a:5d:56:bc:60:e6:42:41:
85:34:97:9f:67:fb:c3:7c:17:16:5b:91:75:fa:a6:
55:b8:7e:83:c1:04:d9:43:cb:af:59:c8:66:91:81:
84:d0:8c:e9:db:5b:9a:c1:ae:7b:c1:39:cb:70:30:
68:c2:20:53:f0:33:b6:58:09:87:d7:80:de:3f:17:
d3:f2:1b:40:21:cf:ca:86:55:86:e1:d8:8c:39:db:
28:05:20:7b:f8:a7:ac:7a:21:ab:b5:e9:c9:7a:b4:
e1:87:f3:f1:57:fe:46:51:bd:5d:39:26:4b:90:02:
ae:d6:5b:b6:a7:a1:a1:ad:00:ae:09:23:0c:f8:a6:
37:bb:18:6e:4f:7a:02:3e:cb:75:ec:db:22:7c:e5:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:9A:AD:41:7D:B3:21:13:10:86:82:C6:5B:16:F7:B6:D2:C8:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CF343EA5B011F0BF569E9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:10:45:52:50:c0:2c:41:8b:50:23:fe:0e:7a:bd:8d:8b:7e:
0a:d1:d6:93:83:19:e4:3e:cb:1a:67:aa:87:5d:c1:55:cf:1b:
9c:9f:bf:0f:92:5e:3e:6e:16:0c:07:40:f0:d3:fe:5e:a6:ba:
c3:0a:d2:1f:83:72:cf:46:46:58:57:9d:4f:9c:e4:24:19:1d:
5b:45:cb:23:8e:b0:05:95:88:e7:9f:ab:c8:e8:ae:de:dd:a2:
5b:0a:27:da:1b:36:67:06:a4:c4:46:e5:e5:0a:cb:03:03:12:
77:cc:85:6d:16:81:6b:01:35:18:da:bf:05:6b:9f:e7:3a:37:
5c:00:20:58:4e:1d:74:0e:5f:83:16:99:84:7c:74:1a:22:62:
a6:f0:fc:eb:a3:5e:a1:28:b1:b4:15:31:1c:bb:3b:d1:46:10:
b0:c1:ab:c6:52:9e:23:90:fb:6c:04:d9:b2:5a:0e:c7:f6:ad:
56:0f:61:fe:d5:73:76:45:ca:c4:11:6d:6c:41:3f:5a:3a:c7:
3e:f0:4d:f7:25:9a:75:8a:1a:d5:2a:a9:63:0d:aa:b9:71:6a:
36:10:6d:37:50:e3:c3:d1:dd:e9:20:77:ab:a9:53:a6:37:25:
4e:34:e4:ac:83:06:87:90:40:62:4a:09:0b:64:65:e6:a8:00:
ab:57:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:10 2025 by rpki-client