Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7FC5732985B11F0A98ED7AEDAE4EC9C.roa
File: F7FC5732985B11F0A98ED7AEDAE4EC9C.roa (raw, json)
Hash identifier: 4kCue3jiE2BOPHJSFZCsD0SJQlGgTOLdFuAeIu7IKRE=
Subject key identifier: 5E:67:D0:CC:5C:A3:04:5F:77:0F:10:0B:94:AC:C3:05:4F:23:3E:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A03B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7FC5732985B11F0A98ED7AEDAE4EC9C.roa
Signing time: Tue 23 Sep 2025 09:02:02 +0000
ROA not before: Tue 23 Sep 2025 09:01:56 +0000
ROA not after: Sun 26 Oct 2025 09:01:56 +0000
asID: 57043
IP address blocks: 154.193.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106555 (0x1a03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 23 09:01:56 2025 GMT
Not After : Oct 26 09:01:56 2025 GMT
Subject: CN=68d2620a-ae39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:8a:d2:1d:54:4e:3d:e0:cd:a4:0d:b9:5c:
50:85:e2:dc:7f:cc:f7:1c:1b:19:b2:b1:59:0d:75:
19:2c:81:0c:2e:55:8b:8d:e9:68:12:18:bf:3c:6e:
ed:cb:9c:65:b0:48:f5:92:23:c7:b7:55:f6:1d:de:
c9:a0:4d:a1:5b:73:f2:33:1a:48:0d:06:92:b2:06:
59:c9:01:3a:bd:d9:c4:f4:00:5f:e0:b4:d1:58:65:
33:fb:9a:42:c0:58:5b:30:d9:36:bc:ca:48:3d:03:
4e:53:3f:20:2b:40:0a:82:ea:cb:ce:d2:2a:c3:aa:
01:5c:fc:1f:d7:4d:b0:e9:8b:8c:f9:88:80:c5:e8:
dd:db:21:88:2b:e9:57:c0:0b:8d:da:74:2e:20:0e:
bf:85:1a:15:8b:5c:1b:69:c5:9d:40:41:d3:7f:ae:
5a:cb:58:f9:41:7e:b0:a0:94:66:be:c1:81:5f:ec:
83:0e:e6:19:fb:12:0b:66:23:72:e2:62:53:9b:93:
a8:81:37:cd:45:df:0a:d0:ad:6c:99:09:64:1e:0b:
d8:70:63:7c:e5:ef:40:9c:cb:a4:ec:4a:42:87:46:
0a:2f:01:a4:71:85:cc:72:73:a8:f4:29:24:ef:18:
65:1a:8c:69:e7:5a:c9:dd:e2:f9:4a:3f:6b:3d:49:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:67:D0:CC:5C:A3:04:5F:77:0F:10:0B:94:AC:C3:05:4F:23:3E:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7FC5732985B11F0A98ED7AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:0f:30:a6:09:ec:c0:10:15:4f:1d:db:08:a1:65:60:36:03:
90:2b:41:2e:d9:8a:09:d3:c5:c2:dd:b3:92:47:58:d0:83:42:
f2:02:8c:43:22:f5:22:38:53:c6:5e:e9:3a:48:fd:21:31:67:
29:6e:52:fe:ac:6d:8b:75:19:90:9c:a3:21:8d:5b:f9:3a:f9:
77:90:2a:fa:06:87:fe:5d:60:6a:ad:2d:7d:55:33:7d:d0:3c:
d3:32:64:f4:3f:c5:4c:65:a2:d2:a2:5c:19:76:00:e9:6c:96:
b1:15:97:23:4a:31:48:be:ed:82:17:b1:6b:54:da:68:1c:55:
f8:21:5d:ff:38:ff:9f:14:d8:fb:cd:dc:5f:9f:74:99:6f:c7:
e7:c0:24:12:ad:36:65:12:6d:8b:35:3c:4d:fb:6a:f6:55:14:
49:db:c7:11:09:67:6f:f0:6b:9e:d1:50:2c:6d:79:f8:26:30:
91:ef:ea:5a:43:1e:6a:f0:20:7a:6a:b0:f2:4b:50:1c:c5:77:
69:a6:ac:a2:9d:72:5f:1b:07:cb:54:2b:07:68:9f:4d:78:69:
ae:32:1b:54:21:34:8f:a4:d1:29:8d:a2:04:53:f8:3d:a8:a4:
10:4c:ba:26:cf:13:f4:5e:3e:fb:74:f9:58:fb:d6:d7:e9:44:
9c:db:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:24 2025 by rpki-client