Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F1CD762B56111F0B9A6A8E0DAE4EC9C.roa
File: 0F1CD762B56111F0B9A6A8E0DAE4EC9C.roa (raw, json)
Hash identifier: GBuLJTXUp/D1O7PDZ65E7Icfa/FJBctb2Tatp6u2SCI=
Subject key identifier: 06:2C:4E:64:0C:C6:FD:F7:CC:9E:03:B0:49:D2:CC:59:4F:E7:16:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F1CD762B56111F0B9A6A8E0DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 07:21:32 +0000
ROA not before: Thu 30 Oct 2025 07:21:23 +0000
ROA not after: Wed 10 Dec 2025 07:21:23 +0000
asID: 215691
IP address blocks: 154.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108193 (0x1a6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 07:21:23 2025 GMT
Not After : Dec 10 07:21:23 2025 GMT
Subject: CN=690311fc-44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:74:d7:26:e1:a3:34:9a:64:36:43:20:4d:
17:40:53:e3:80:53:f4:4d:e0:93:1e:3a:2a:b4:42:
f1:64:1f:ee:0f:01:66:48:65:46:51:30:ab:e5:9e:
4b:a0:23:ee:b3:dc:97:48:ae:f6:ba:2f:30:00:10:
2c:56:9d:a3:fa:04:d7:00:92:4a:77:8a:53:57:71:
0c:97:bf:3b:55:8a:97:3e:c9:cd:a7:b2:5c:81:01:
88:80:d5:f1:c7:f2:84:60:ab:47:6b:08:8f:75:7b:
64:f9:cf:24:63:ba:39:58:ae:10:84:1a:a7:5b:e5:
7d:7b:1c:b6:85:ab:a2:5a:4d:63:84:09:7e:08:cd:
d0:f0:74:63:a3:4d:7d:bf:c2:e6:ed:f5:26:a1:66:
6e:29:cd:73:e9:57:53:8f:9d:65:85:91:86:bd:c1:
6a:5d:de:43:03:3c:3e:b2:c4:f6:3f:c9:f4:40:1e:
2e:79:73:17:dd:f7:46:74:da:8f:51:1f:37:62:d8:
0a:22:b0:ba:4e:96:14:fb:19:dc:0b:92:32:38:7b:
10:60:fe:ef:ec:61:f1:cc:45:33:0e:8f:a2:43:83:
9e:ed:70:75:79:0d:3d:73:41:13:47:fa:9d:4e:94:
ba:93:d9:93:16:2f:8c:17:de:95:d4:f5:eb:1f:c7:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:4E:64:0C:C6:FD:F7:CC:9E:03:B0:49:D2:CC:59:4F:E7:16:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F1CD762B56111F0B9A6A8E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:93:f0:80:4d:53:5d:80:31:d1:29:cc:8d:b7:16:55:6e:05:
e6:5f:bf:88:e7:32:da:0b:3a:64:48:a2:67:0a:d5:3e:31:c4:
5e:c8:bf:b3:2c:2a:e2:1c:a4:5f:1b:e2:ac:96:43:b7:00:d3:
48:08:e5:fb:de:48:78:6e:84:55:ee:b7:fa:7c:05:0d:d8:e3:
c3:14:3c:52:a6:0e:94:7b:bd:a7:a9:22:cf:47:47:4c:56:b0:
3c:75:c7:fe:61:82:f2:e4:19:5b:13:54:f2:07:b9:46:2f:77:
47:cd:44:c1:7c:f2:d7:b2:3f:33:68:ab:be:0d:6c:50:3f:bd:
e9:c9:ab:dc:1e:34:ff:b3:62:79:24:21:97:83:48:ef:b7:84:
53:b9:a2:92:e0:84:55:eb:c1:9e:f6:59:5b:5c:49:dd:4c:8d:
7a:88:97:38:4e:74:7e:cc:eb:28:cd:aa:21:c4:64:e1:41:d5:
c8:e3:3a:4b:3b:d8:74:e3:43:88:57:4f:60:3d:27:c3:ec:ef:
f9:d8:36:c3:d7:b3:c3:40:87:f0:0c:14:ae:e9:ae:94:70:ff:
69:6f:37:aa:3f:45:7a:d3:56:c0:c3:43:e3:76:ca:47:56:3b:
45:2f:da:46:52:bd:bc:c6:36:ac:44:0f:57:dc:93:54:9d:31:
8f:6e:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:50:20 2025 by rpki-client