Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78C9F268EE411F09EF6E1EFDAE4EC9C.roa
File: F78C9F268EE411F09EF6E1EFDAE4EC9C.roa (raw, json)
Hash identifier: ART/w1xegNQGDrZkInF33DaHBwDsrtolS8VexgPJtMM=
Subject key identifier: 47:30:14:99:5E:00:E2:BB:73:35:CC:D0:30:E7:24:B9:C3:1B:98:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78C9F268EE411F09EF6E1EFDAE4EC9C.roa
Signing time: Thu 11 Sep 2025 07:57:31 +0000
ROA not before: Thu 11 Sep 2025 07:57:26 +0000
ROA not after: Fri 17 Oct 2025 07:57:26 +0000
asID: 22773
IP address blocks: 154.94.36.0/23 maxlen: 24
154.94.40.0/24 maxlen: 24
154.94.43.0/24 maxlen: 24
154.94.44.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
154.94.52.0/23 maxlen: 24
154.94.56.0/24 maxlen: 24
154.94.59.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106323 (0x19f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 11 07:57:26 2025 GMT
Not After : Oct 17 07:57:26 2025 GMT
Subject: CN=68c280eb-d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:da:51:13:2c:19:39:f6:0d:68:f7:db:16:
5a:5c:0b:db:c8:4f:a0:2e:08:43:36:23:3d:da:73:
df:73:6f:6d:95:3e:21:0c:3b:a4:47:f6:41:b2:83:
83:00:65:72:79:ec:ec:6d:d1:e7:66:fa:f3:40:02:
6d:57:16:1e:bc:39:95:62:29:eb:45:bd:62:46:5c:
96:a7:17:3e:4b:d1:77:2a:60:fe:06:fa:dd:a0:3c:
e9:fd:3e:73:48:9c:df:58:78:04:5a:85:05:ac:cb:
67:a5:a0:a9:c8:4a:03:8a:fc:80:83:86:80:14:37:
92:f3:32:84:10:86:41:65:87:eb:aa:dc:06:e3:f1:
ee:fa:61:7d:7f:7d:6c:af:25:bb:ab:4f:8c:a5:68:
87:80:0e:ae:3a:f2:2e:55:80:1f:15:91:df:e4:eb:
d7:f7:fe:1e:17:bc:10:ae:37:c2:6f:b2:4f:03:de:
60:db:f2:7b:29:1d:5c:5d:f5:76:b8:18:17:bb:70:
c2:a2:22:c9:54:5e:6f:c3:7c:64:12:3c:c1:9d:7d:
83:bd:08:1b:5a:93:1c:38:ec:63:c7:c4:7f:c2:8e:
ff:c7:a0:00:57:c2:af:2f:f2:bd:92:ee:bf:a1:f3:
db:20:e0:70:3c:59:79:4a:f2:26:72:6a:76:6d:53:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:14:99:5E:00:E2:BB:73:35:CC:D0:30:E7:24:B9:C3:1B:98:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78C9F268EE411F09EF6E1EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.36.0/23
154.94.40.0/24
154.94.43.0-154.94.44.255
154.94.47.0/24
154.94.51.0-154.94.53.255
154.94.56.0/24
154.94.59.0/24
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7d:09:85:a2:90:fa:01:03:08:54:0a:53:9a:b3:9a:5a:a8:
73:7f:5d:5b:82:11:68:22:8d:cf:0c:de:09:2a:ce:e3:fd:2c:
d7:4d:7e:a8:63:ec:bd:bc:7d:c8:91:ff:58:85:b1:91:e4:00:
de:6b:87:e8:f5:ed:a4:05:25:fb:95:d8:1a:4d:49:f1:6a:18:
ef:71:1d:00:d4:93:89:e0:95:3b:6e:65:3d:71:5c:a0:ae:a0:
62:a0:9b:f8:ff:9e:42:a8:e0:38:fd:13:66:ee:c9:45:f7:9e:
f8:94:cf:51:cd:48:c6:55:71:e8:26:fb:0c:df:18:c8:4d:a7:
66:65:10:b0:fa:9d:b4:99:10:56:e3:7a:68:ed:e4:49:81:dc:
3c:7f:19:05:da:ad:eb:69:95:32:f0:fa:31:b9:ba:aa:e8:75:
fb:69:46:c7:58:c7:93:73:df:cc:7c:76:e7:91:4a:02:5d:69:
2e:24:21:9f:71:33:9a:60:f1:d1:2c:5c:c6:12:61:cb:91:a8:
ee:53:6f:70:f1:54:89:99:0b:9a:1a:f1:d8:c2:77:fe:4c:98:
e5:3f:fc:62:4d:24:79:34:65:ed:90:0b:f5:65:12:a5:6d:38:
28:2e:0a:b3:d3:f9:14:4d:ef:a5:34:73:2e:58:05:ec:92:d8:
9a:83:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:09:26 2025 by rpki-client