Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5FED322953311F080F805C3DAE4EC9C.roa
File: F5FED322953311F080F805C3DAE4EC9C.roa (raw, json)
Hash identifier: faIKuGMpLteruHEjlaZj4/y426UzMoIKEkEaF5PW8Qw=
Subject key identifier: EF:91:45:90:9A:A5:E5:DD:FD:5C:8E:72:1E:8A:29:A4:64:DD:30:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A02B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5FED322953311F080F805C3DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 08:38:05 +0000
ROA not before: Fri 19 Sep 2025 08:38:00 +0000
ROA not after: Sat 25 Oct 2025 08:38:00 +0000
asID: 20326
IP address blocks: 154.193.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106539 (0x1a02b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 08:38:00 2025 GMT
Not After : Oct 25 08:38:00 2025 GMT
Subject: CN=68cd166d-22f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:93:bd:fb:c5:4f:9b:21:5e:b5:0b:5e:2a:
ce:d3:24:88:df:4e:32:27:96:15:1c:59:be:2f:73:
b5:b4:b3:8e:8d:49:99:e8:8f:b8:e5:b4:ce:87:29:
e1:f3:10:e7:b9:4f:ec:dc:9b:3a:0f:e4:97:d8:a5:
fc:4b:14:0b:11:84:f0:21:e8:1d:17:e7:b1:e7:ea:
3e:1f:8f:6d:71:5f:4f:79:50:6e:f1:50:e1:a6:f6:
65:4f:ac:3b:3e:ac:86:db:39:f0:62:6c:03:6f:b9:
66:6a:b1:ac:d5:5b:42:cf:22:fc:67:a5:a7:21:c5:
f0:44:88:39:3e:af:84:b0:12:fd:29:84:c0:7d:d7:
4b:e7:47:54:19:b6:83:07:98:3a:1b:bc:26:32:0f:
d1:5b:8d:22:ff:23:cb:41:f4:62:be:85:d8:06:1d:
ec:57:0c:88:ba:c5:dd:d7:fc:20:17:c9:8e:a3:4e:
a2:7c:2e:62:cd:2d:a0:09:a5:43:62:a9:21:67:37:
4c:f5:5f:4f:83:13:b3:24:fa:21:13:7a:59:c3:f9:
2c:8c:8b:b0:15:da:67:14:cb:18:ce:a9:cf:74:fe:
4c:29:a9:24:ca:e0:11:c7:f6:ca:3f:a2:b2:da:31:
d9:e7:6e:fc:03:4f:f3:20:2d:91:42:6c:38:d2:8f:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:91:45:90:9A:A5:E5:DD:FD:5C:8E:72:1E:8A:29:A4:64:DD:30:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5FED322953311F080F805C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:bf:09:1c:22:1d:fd:4e:b0:71:9a:5d:d1:9b:b0:a5:f1:01:
47:e4:91:9b:4c:17:5d:64:86:46:7f:1e:af:0a:9f:74:1f:b9:
ec:a6:a9:cb:7f:4a:b8:22:f8:9f:1a:b8:b1:ad:d1:0c:30:f3:
14:2c:52:bb:0e:a1:92:58:ec:22:12:72:74:9a:83:f4:f0:04:
f7:7f:19:b3:fe:db:13:f0:c3:3d:6d:1a:0c:23:5d:0f:e0:10:
6e:8c:6b:55:b8:95:4e:fc:2f:f0:5b:b0:fa:13:4b:24:1f:b3:
a5:54:3f:29:9b:ec:79:a9:41:92:10:61:60:25:c4:53:14:3e:
1b:c1:5a:ff:4f:e5:74:b6:5e:c9:f8:0b:e3:4b:6f:2e:31:37:
59:4a:92:31:43:92:09:f6:e8:e6:9b:68:40:6c:e4:39:4d:67:
f2:c3:c5:28:72:f2:b7:5a:70:4c:4f:e6:14:1b:13:2a:da:5b:
10:84:cc:85:f6:69:bb:aa:6c:59:23:1e:83:65:df:ab:b4:49:
6b:20:1a:66:16:02:69:62:b2:06:fe:5f:87:58:e1:a8:74:a3:
b0:39:6b:1c:b3:90:67:14:71:72:62:d9:54:24:af:9f:df:96:
0f:e6:49:51:72:5b:1f:22:82:a9:99:7b:57:10:76:78:34:8c:
6e:ee:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:20 2025 by rpki-client