Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C4FB2EAD9011F09C947CDFDAE4EC9C.roa
File: F9C4FB2EAD9011F09C947CDFDAE4EC9C.roa (raw, json)
Hash identifier: L1bPUDdRCtaxcGGba/d2xARIBUS/505sw22mRU3ha0c=
Subject key identifier: 1C:43:0B:76:28:F9:0F:60:86:CA:D3:39:EC:92:12:99:41:B2:DA:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A44D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C4FB2EAD9011F09C947CDFDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:44:23 +0000
ROA not before: Mon 20 Oct 2025 08:44:17 +0000
ROA not after: Wed 26 Nov 2025 08:44:17 +0000
asID: 57043
IP address blocks: 154.193.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Oct 2025 12:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107597 (0x1a44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 20 08:44:17 2025 GMT
Not After : Nov 26 08:44:17 2025 GMT
Subject: CN=68f5f667-f440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:e4:cf:c3:5e:af:ca:55:66:d0:55:fa:f9:
73:a9:63:38:05:a8:e8:a6:70:bc:46:31:7e:ac:f5:
2c:63:2f:16:93:48:de:f7:ac:4c:24:51:03:de:09:
8e:4c:19:d2:db:f0:be:af:d3:29:48:f4:95:01:2b:
6e:41:5a:a1:ca:da:dc:68:fd:a7:a1:96:fb:e8:38:
45:d8:81:ff:1e:92:50:70:78:f2:50:89:2a:d4:fb:
72:de:13:af:e6:e3:55:0d:7e:8b:1c:ca:24:dd:ea:
30:9f:74:7a:ec:3b:98:57:28:6a:a1:37:b1:b9:fa:
fa:42:82:14:25:af:e8:b7:b5:fd:89:ef:fd:a4:87:
6f:34:15:a8:11:d0:af:75:c6:52:12:af:ab:69:c3:
f6:e2:e3:6d:22:89:52:35:b6:7e:4e:71:f6:8c:59:
e1:c6:b8:c7:2e:0c:43:71:0b:9f:25:a8:91:88:30:
b1:4a:b9:5c:f6:56:4d:3d:6d:24:bd:ec:be:1d:ab:
b3:13:df:29:93:ef:8f:ab:52:7b:77:eb:d5:fb:a6:
ca:4b:a2:84:f9:38:29:a9:44:61:e8:8b:40:27:ee:
d5:02:21:a8:a0:7d:f9:cd:a5:6c:85:71:2f:21:1d:
39:1b:36:3a:c4:5f:ee:a4:7d:b4:ab:e1:30:b2:11:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:0B:76:28:F9:0F:60:86:CA:D3:39:EC:92:12:99:41:B2:DA:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C4FB2EAD9011F09C947CDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:64:67:b9:55:d7:87:ca:90:88:55:f8:c7:8f:d3:f1:fb:ec:
14:34:2d:1b:d7:ca:73:3d:38:fc:d5:3a:91:56:00:1c:74:ef:
24:a6:67:86:e1:3a:45:ac:f1:6b:43:a4:a1:29:88:e9:66:eb:
d7:85:d8:95:6a:3d:99:89:93:2e:2c:da:d3:97:61:7f:1f:ff:
7b:bc:f1:37:29:b5:22:a2:31:b4:05:34:fe:37:b1:1f:fc:81:
6f:19:18:5b:a6:30:eb:f7:85:c3:d1:c6:2f:0f:db:7d:98:bb:
48:4a:08:eb:b6:42:59:e1:b5:f2:02:fe:31:c2:d2:0f:6a:59:
0d:f2:df:a6:84:21:ca:ed:8f:66:16:de:f1:d3:95:66:f1:0c:
b3:50:5e:0e:c0:1e:08:72:49:2d:df:64:dc:72:04:ea:d5:47:
d8:e2:b5:2a:d9:3f:f5:eb:ed:40:28:49:42:b4:f4:63:62:76:
94:4a:d5:4f:e5:d6:3c:b8:34:21:a3:57:64:42:90:55:07:95:
0d:51:ab:de:c4:5c:45:f6:98:d3:7a:71:65:bf:9f:05:7e:87:
d3:45:92:a3:7a:e8:4f:3c:79:25:d3:85:e7:78:d5:6f:67:2a:
80:b7:32:0b:f7:56:79:34:f2:cc:ee:81:87:61:49:28:d1:fc:
56:48:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:55 2025 by rpki-client