Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB6637E8A5C211F0BBCC6B92DAE4EC9C.roa
File: FB6637E8A5C211F0BBCC6B92DAE4EC9C.roa (raw, json)
Hash identifier: 3loIdDtXHgVVJ16qzEDuayhvUBQYM8t3Vrs3v7BXitQ=
Subject key identifier: 22:68:D4:29:B2:90:B1:74:0E:5B:40:2A:60:5B:5D:06:46:71:23:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A345
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB6637E8A5C211F0BBCC6B92DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 10:22:11 +0000
ROA not before: Fri 10 Oct 2025 10:22:06 +0000
ROA not after: Mon 05 Oct 2026 10:22:06 +0000
asID: 211392
IP address blocks: 154.84.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107333 (0x1a345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 10:22:06 2025 GMT
Not After : Oct 5 10:22:06 2026 GMT
Subject: CN=68e8de53-b395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:ea:9b:49:21:22:11:42:8e:85:21:f4:c0:
38:3a:c9:75:c2:1a:5c:80:b5:ed:be:2e:cb:31:97:
3e:fe:e9:13:fb:a8:d6:16:04:77:a8:1d:d4:ff:d5:
64:c8:8b:81:7f:e0:f0:ae:e3:d4:0b:ae:4b:f1:3b:
9d:f4:ca:2d:18:e7:f2:6b:db:83:78:fa:4f:82:44:
41:25:c0:09:a0:8a:e0:e8:2a:e7:17:ee:e3:e7:4b:
cd:90:ec:44:72:f0:da:39:5d:74:36:1a:03:1f:c8:
e4:87:66:cf:e0:32:32:52:9e:5c:07:94:f4:da:c2:
b7:cb:8c:1f:bf:68:27:ba:37:83:26:ca:39:45:95:
34:98:1a:f5:d3:03:c9:10:b6:23:84:e7:0e:de:61:
13:b0:e4:44:4f:51:21:4e:cc:89:2e:f9:4e:a9:c2:
55:51:eb:a2:e0:48:c7:b3:11:ce:7c:b5:30:fc:be:
7a:bb:2b:f0:a2:ad:09:79:d1:c1:03:b4:b1:b1:66:
7f:2a:fa:31:cf:b1:65:7d:1c:91:fa:82:5a:99:ef:
99:87:c7:10:e2:a3:33:7f:ff:ab:65:f7:c5:c2:94:
f7:1d:82:29:18:09:49:1a:80:ee:65:e4:57:8b:74:
e1:aa:dc:b5:3f:5a:00:ae:cf:7b:bc:e1:ee:74:18:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:68:D4:29:B2:90:B1:74:0E:5B:40:2A:60:5B:5D:06:46:71:23:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB6637E8A5C211F0BBCC6B92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.26.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:10:ce:c8:01:a3:52:0c:eb:5a:63:6b:5d:7b:c0:ba:2f:10:
43:ec:64:f1:fd:c1:ee:05:9d:10:fa:1a:3e:2f:f7:22:61:78:
63:a2:0d:26:65:5e:82:67:80:52:59:b9:de:ed:58:8d:33:24:
c7:3e:3d:52:89:7b:f8:01:86:25:03:7b:10:e3:ee:bb:39:da:
d3:bf:54:23:e2:2e:bf:15:a7:8c:2e:fe:27:90:c6:32:bb:ca:
6a:53:71:22:82:f5:c2:28:4c:e3:e2:23:57:22:2f:76:96:f5:
3c:70:13:6c:8f:0b:a2:e6:d1:b7:55:87:fb:f3:ef:b0:ec:0e:
fd:b2:d6:cf:1e:13:21:30:ab:15:85:68:c7:48:c8:d0:0e:63:
20:8b:7f:67:90:ac:f2:05:98:b1:f3:ba:82:f2:2a:10:52:31:
a8:4f:b1:cd:51:db:43:4c:ae:79:6c:31:1f:92:30:0f:08:0a:
c9:48:d3:d1:93:6c:63:ac:5e:74:e3:ad:ed:e9:2b:12:ac:79:
3c:b0:74:64:ab:0a:a4:5c:f2:34:cf:50:e1:0c:13:d5:02:b2:
79:75:ea:3c:48:2d:27:a9:5c:4a:76:70:bf:82:78:61:77:33:
bf:be:f8:ad:ce:4f:68:10:1f:9d:c9:bc:27:6b:4b:6d:6e:90:
a9:82:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:13 2025 by rpki-client