Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0939A598B4D811F08D682C7EDAE4EC9C.roa
File: 0939A598B4D811F08D682C7EDAE4EC9C.roa (raw, json)
Hash identifier: qXTyvIirjUXWN1TXLUlloouXlxdd5rkIECkoUuYsWs0=
Subject key identifier: E7:3C:6F:06:57:57:96:72:12:D7:C9:7D:39:A5:CF:E8:5B:20:2F:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A658
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0939A598B4D811F08D682C7EDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 15:00:41 +0000
ROA not before: Wed 29 Oct 2025 15:00:36 +0000
ROA not after: Sat 06 Dec 2025 15:00:36 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108120 (0x1a658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 15:00:36 2025 GMT
Not After : Dec 6 15:00:36 2025 GMT
Subject: CN=69022c19-dda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:eb:e5:a4:04:dc:39:16:4d:23:47:9d:86:
7f:13:a5:df:c7:01:9d:0b:70:f6:cb:ee:5a:89:a7:
12:5e:4b:56:f9:ec:2c:a5:f6:9a:21:56:51:a1:a7:
71:72:84:8d:61:4b:af:60:3c:a2:e2:ea:de:2a:a4:
31:83:90:15:04:e7:22:a4:ef:e5:42:48:ed:a9:51:
4b:75:b3:c2:b8:67:2b:71:a5:ce:27:fe:01:04:41:
04:4d:9b:9c:31:9d:fb:6b:20:66:08:eb:d9:1b:02:
58:b7:43:6d:ab:36:41:41:aa:5c:55:af:51:03:68:
54:e8:96:36:32:f1:28:ad:b3:f9:0d:60:d0:e5:99:
29:e0:23:45:46:e7:ff:25:9f:45:93:00:1e:3a:22:
e5:7f:e3:91:35:dd:2e:ef:5a:98:c0:58:be:f4:7a:
e8:88:08:6b:8e:d3:8b:ea:28:71:46:9f:17:87:33:
3d:a8:dc:e8:d7:85:26:33:6c:75:4f:92:80:24:f2:
df:94:24:aa:ec:69:cc:97:16:f0:a1:14:4b:76:a7:
a8:3c:98:6f:fa:8e:b4:40:94:62:16:39:6c:4e:db:
3d:f7:cf:58:da:9a:29:bb:6e:7d:dc:82:76:49:5a:
29:a7:bf:a0:31:03:fd:37:33:33:17:a9:1b:81:d8:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:6F:06:57:57:96:72:12:D7:C9:7D:39:A5:CF:E8:5B:20:2F:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0939A598B4D811F08D682C7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.217.255
Signature Algorithm: sha256WithRSAEncryption
ad:d4:c3:4f:c6:46:c5:85:85:7a:61:77:0f:e1:d9:77:cc:63:
b7:c0:36:8b:81:6a:61:82:fb:9c:2a:76:b2:aa:fd:5a:24:fb:
29:4e:f4:a9:a4:52:a5:40:5a:3c:f6:b9:08:60:b1:0c:35:de:
49:17:8c:35:f6:49:7c:2f:03:4b:d9:69:d2:49:12:e1:d0:e7:
44:69:21:f7:e0:9a:2d:43:8f:25:5f:05:5f:dc:15:80:c7:18:
e3:89:16:4f:54:5c:fe:4a:df:cc:ac:d4:b7:8a:cc:d5:b4:fd:
35:a5:73:ce:7c:e9:f7:7b:7c:77:58:bb:e6:62:f7:4a:74:ba:
28:c7:54:3f:b5:4b:aa:b8:de:54:d7:32:58:23:25:f2:2e:5e:
b3:cf:17:68:15:e2:32:f1:53:fa:65:2f:41:19:3e:f3:82:5e:
e3:79:51:f2:d8:eb:55:6e:60:57:8f:4d:21:8d:0e:74:ff:cc:
25:1c:e3:22:c9:f9:51:82:72:0c:81:a6:ea:74:67:69:16:f0:
eb:fa:0f:98:78:8c:45:90:fc:1b:a0:a6:d3:b1:92:28:e5:09:
79:e9:8a:ba:72:46:de:74:bb:a9:2f:4e:ba:20:a6:3f:d8:50:
2a:12:6d:9b:53:f6:d3:bb:2f:a2:73:be:49:5d:bf:61:15:3e:
cf:61:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:32 2025 by rpki-client