Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6375FA4AE5511F08028BED8DAE4EC9C.roa
File: F6375FA4AE5511F08028BED8DAE4EC9C.roa (raw, json)
Hash identifier: Xx/8hMsr5lBlms77GA1YBDz6JiTEceYbGVL1PJ/0THs=
Subject key identifier: 0D:DF:2A:ED:C7:37:ED:F6:85:CF:F5:3A:02:FC:0E:ED:DA:04:C4:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A472
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6375FA4AE5511F08028BED8DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 08:14:28 +0000
ROA not before: Tue 21 Oct 2025 08:14:23 +0000
ROA not after: Sun 25 Jan 2026 08:14:23 +0000
asID: 142267
IP address blocks: 154.91.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Nov 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107634 (0x1a472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 08:14:23 2025 GMT
Not After : Jan 25 08:14:23 2026 GMT
Subject: CN=68f740e4-7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:95:8c:47:99:b1:a1:46:46:f6:1f:d4:99:e2:
cd:cb:d2:a6:4c:da:98:2f:e7:95:39:55:88:4f:df:
d8:34:e4:94:fb:ff:54:2a:b0:78:f9:86:3f:69:71:
72:24:45:d5:64:ba:05:fc:69:04:10:b9:86:70:89:
81:74:e0:8b:fd:cf:b2:91:04:0a:e9:41:05:43:5e:
9d:3f:49:1a:ef:2d:f7:b1:f1:b0:5d:8d:2f:95:bd:
e2:15:dc:ff:20:17:42:99:07:1d:e1:c7:7d:93:cc:
cc:39:9e:15:6b:f4:02:5b:dc:61:c6:69:41:d6:8a:
a3:86:50:ec:bd:93:30:ca:ee:20:36:fe:38:f1:c9:
d5:84:08:02:75:b1:99:6e:34:3d:f9:75:65:c5:fd:
ab:eb:df:3f:e0:0a:a4:67:3c:fe:8e:6b:6e:db:07:
f3:f2:9c:56:dd:be:53:06:ac:3e:cc:3f:c3:64:de:
63:32:30:4f:0e:57:64:c5:4d:aa:ca:32:bd:38:2f:
a7:50:4f:58:59:a0:1f:c5:ad:22:34:ea:46:95:e8:
cc:22:86:35:8c:c8:c7:d3:91:13:25:70:74:d5:fa:
92:0a:8c:ac:03:f6:96:97:18:70:d9:8e:8b:87:6a:
1e:01:d1:91:15:ed:ef:13:dc:39:4b:9d:60:c5:79:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DF:2A:ED:C7:37:ED:F6:85:CF:F5:3A:02:FC:0E:ED:DA:04:C4:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6375FA4AE5511F08028BED8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ae:df:7d:bc:bf:4c:53:58:7a:68:e1:09:17:a2:da:0e:8e:
83:86:01:58:7c:25:d5:9f:77:25:3f:20:de:f2:dc:0e:aa:20:
05:4f:fa:a8:da:b3:46:82:75:87:23:3d:bf:b7:fd:63:ae:7d:
77:41:e2:d5:ae:72:4f:9e:ed:98:f4:fa:d0:ba:a7:43:aa:da:
a5:50:82:74:3d:2e:35:ab:8e:f0:7c:be:de:0e:35:65:63:6e:
f5:0d:45:5f:73:93:f8:a1:87:19:0e:47:0d:74:5d:92:b4:86:
b0:b2:62:5d:53:94:f0:23:f8:5d:cf:f6:61:79:f4:a4:b2:6c:
cb:2a:65:5c:59:3c:20:38:c8:7f:cd:54:b7:c0:fa:6e:ed:76:
22:c5:1b:85:c0:fe:97:0a:15:0f:3c:c0:61:b9:8d:d9:9d:1e:
ae:d4:26:5b:4c:4a:4b:a2:8b:4d:99:51:20:a4:bb:3f:d3:95:
2a:c3:6e:ab:73:9d:8e:9c:fd:46:f4:fd:22:9b:6d:0f:6e:36:
77:bb:00:cf:7e:c5:d9:99:a3:f3:59:87:fd:5a:a8:65:d2:09:
5c:2e:53:cc:27:55:c4:51:9a:42:d2:bd:12:db:1b:f3:3b:09:
2e:83:6c:b4:a3:43:a1:c9:f6:27:ec:0c:e4:9b:9e:cf:dd:7c:
2a:76:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 08:34:47 2025 by rpki-client