Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96C10FC996F11F0A99B47A1DAE4EC9C.roa
File: F96C10FC996F11F0A99B47A1DAE4EC9C.roa (raw, json)
Hash identifier: rZVzDQ17K2rs6I73aaViq+FC64QylbvUEJfmNTDJOEk=
Subject key identifier: 55:97:F2:63:20:84:F9:44:93:61:15:A1:FA:11:60:49:DC:8A:C3:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96C10FC996F11F0A99B47A1DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 17:57:46 +0000
ROA not before: Wed 24 Sep 2025 17:57:41 +0000
ROA not after: Thu 30 Oct 2025 17:57:41 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106660 (0x1a0a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 17:57:41 2025 GMT
Not After : Oct 30 17:57:41 2025 GMT
Subject: CN=68d4311a-0f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:ac:08:98:eb:ba:0c:25:67:12:f8:33:7a:
40:16:d1:36:34:b0:92:a7:27:f6:ea:4f:f8:dc:c6:
4b:49:ee:11:c9:32:9e:f6:2c:df:21:31:77:06:16:
52:14:a5:13:f7:31:6e:99:f2:ab:6a:93:53:04:67:
79:d9:db:ab:20:cf:62:2c:8c:00:d1:90:53:76:6e:
1f:2d:aa:52:7b:95:bb:99:c5:d9:b9:8e:5e:ce:98:
00:45:84:47:c2:01:b4:2e:c9:f0:4c:86:88:8e:0a:
b5:10:3c:7d:ea:90:71:df:65:99:8a:2a:50:a9:1d:
91:ce:76:86:38:cc:bb:dd:19:75:89:bf:56:53:c7:
91:df:87:d1:10:2d:ec:08:ad:90:2e:e0:bd:e1:74:
6e:1d:8c:ed:69:69:d7:b1:9c:8a:88:5f:cc:b3:f0:
d0:86:46:f1:65:bb:7b:fa:37:eb:98:e7:c6:20:98:
27:18:ed:dd:4f:ee:be:29:fc:63:63:1c:f0:d8:91:
3a:f6:61:df:89:47:a1:4f:8f:86:a5:73:81:f8:14:
ce:f2:bf:ed:d9:b5:ae:bf:bc:5c:46:19:d4:ed:af:
7a:80:b8:df:99:9f:9b:da:01:41:02:65:cf:e5:45:
3a:ca:9a:b6:94:4a:32:84:88:79:ef:fe:20:28:dd:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:F2:63:20:84:F9:44:93:61:15:A1:FA:11:60:49:DC:8A:C3:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F96C10FC996F11F0A99B47A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:63:e9:ae:23:d1:7d:76:30:45:d0:69:6e:aa:73:b3:50:f1:
a0:a4:28:b3:4d:d8:7e:86:bb:7f:28:a3:ec:4f:37:e3:05:9a:
48:4d:56:4d:06:05:a3:ab:18:6f:27:15:86:45:21:c2:72:7b:
55:28:5c:23:56:e6:32:8e:58:ec:d2:75:06:b9:dc:5e:86:cc:
e7:02:ac:13:e7:e2:f4:6f:4c:b3:39:94:92:59:0a:e4:79:dd:
52:c2:ef:ef:c5:1c:04:c6:f4:11:be:ca:78:23:ac:f2:97:2f:
07:33:43:8f:d8:32:2a:dd:e4:34:60:5e:db:33:67:10:36:bc:
1b:52:74:05:a8:d2:c0:57:c2:4f:5d:fd:45:e9:a3:d3:a5:65:
05:94:73:db:68:f6:b1:79:c1:7c:b6:df:f6:12:c1:d9:75:41:
83:23:f3:9c:8d:63:f4:f0:96:8c:97:ad:3e:f4:82:6a:3e:34:
ba:33:71:60:58:99:c4:5e:4d:ca:b3:6d:b6:70:8b:28:7d:f9:
c0:96:5a:71:eb:2f:58:8c:3d:35:b4:6b:c6:f0:0e:9d:c0:2d:
25:b0:6f:c5:ef:cf:af:2f:8e:ce:99:de:ab:4a:e4:ac:c7:7d:
92:c1:6b:a2:bb:11:96:83:d0:2e:20:6f:80:7d:92:f7:19:96:
e5:62:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:46 2025 by rpki-client