Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F517461AAE5B11F0969E3E81DAE4EC9C.roa
File: F517461AAE5B11F0969E3E81DAE4EC9C.roa (raw, json)
Hash identifier: sxswy0127iEfEj17Y3wnbXuNFdm6ZoWEWXRsb/EbGWs=
Subject key identifier: C5:4B:E6:08:9C:3A:EC:6C:49:B1:F1:6E:ED:92:57:B4:9D:86:AC:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A476
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F517461AAE5B11F0969E3E81DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 08:57:23 +0000
ROA not before: Tue 21 Oct 2025 08:57:18 +0000
ROA not after: Fri 28 Nov 2025 08:57:18 +0000
asID: 57043
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Oct 2025 12:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107638 (0x1a476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 08:57:18 2025 GMT
Not After : Nov 28 08:57:18 2025 GMT
Subject: CN=68f74af3-9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:ed:1b:ce:d1:d8:35:ea:69:8d:55:81:b8:
1b:ea:00:a3:68:f9:9f:b7:3a:e5:1d:09:ce:2a:79:
de:27:26:7b:0f:32:c3:b6:35:ee:07:49:a3:8a:fd:
ea:c3:94:cb:ef:7b:4f:5c:1b:72:13:8d:73:44:61:
02:f4:6e:ef:2c:da:2e:fc:ea:6c:6c:b3:07:34:a5:
93:a7:6c:a5:5e:fa:40:e7:d4:35:90:9c:90:0a:ed:
07:d3:a2:7a:21:06:52:57:09:ac:ce:6e:b4:56:fe:
c4:2f:be:72:c6:d8:43:93:a6:9b:09:4a:64:41:2d:
46:07:2f:3d:22:27:f6:9e:5d:42:a1:23:91:aa:e8:
a3:a4:c9:58:e1:a2:e2:ba:f9:65:82:60:6c:48:3e:
3b:fc:88:c7:b3:90:6b:c7:c5:26:2b:c3:a4:13:49:
f3:55:97:0b:e0:1d:7d:d3:54:28:99:a6:46:c4:39:
cd:95:25:aa:5c:67:a5:ca:e0:3b:7f:bc:70:33:ec:
77:82:8b:d6:a0:ae:3a:5b:0f:17:5c:f0:e9:3a:5b:
5c:5a:7b:c2:a1:3b:83:ea:53:2a:a3:cf:20:cf:fa:
dd:24:c1:f7:8e:a2:a8:f3:cf:90:dc:b1:6f:f0:6a:
df:44:7e:4a:17:47:7c:61:5b:24:24:44:6c:65:dd:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:E6:08:9C:3A:EC:6C:49:B1:F1:6E:ED:92:57:B4:9D:86:AC:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F517461AAE5B11F0969E3E81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ab:cf:e7:bf:9e:90:86:19:0c:d7:ac:69:60:11:ab:ca:d3:
a1:e0:93:60:6d:16:1b:08:08:dc:b0:c0:0e:26:74:20:e8:12:
ee:1a:1a:dc:87:13:53:57:b8:02:3a:a7:48:b4:d7:9b:e6:85:
11:c9:9c:c0:94:c9:4c:10:7e:0c:42:b3:3d:96:08:01:cf:15:
48:9a:f1:4d:01:00:07:ad:87:9b:9f:02:bf:85:67:d8:48:af:
6e:e5:95:8b:95:38:f4:87:ec:cc:09:4f:30:03:a5:60:77:b7:
37:51:bc:5a:9e:95:49:46:f1:07:4a:cb:d4:99:b7:4a:ec:e7:
36:07:2c:27:32:b0:6f:6d:f9:42:de:85:e4:a7:13:bd:5d:48:
e5:a8:4e:8c:47:a8:38:d6:81:92:fd:c4:23:f0:92:62:09:ab:
81:dd:ee:74:2b:1c:fe:49:c8:65:45:69:9b:ac:8c:3f:c1:17:
6b:a8:21:89:00:db:e7:40:11:5e:19:aa:ca:87:11:c8:05:c9:
96:cc:23:03:7a:b1:20:ff:bf:c9:07:b3:74:dd:24:50:4a:bc:
f7:7c:5a:0e:5c:48:3e:d6:ca:2c:89:25:f7:67:d0:46:f3:14:
c5:44:1a:42:36:1e:35:00:c5:8c:36:ee:07:9a:69:a8:ee:56:
04:e8:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:57 2025 by rpki-client