Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18419B66B4D011F08616B9CBDAE4EC9C.roa
File: 18419B66B4D011F08616B9CBDAE4EC9C.roa (raw, json)
Hash identifier: Dp3EQT1irj6fSS0pK02/Ihy9yr5G4+6z775XDRJ8vmk=
Subject key identifier: 19:B6:54:FE:50:EF:BC:64:C1:EC:59:26:C4:3A:9D:A4:89:99:CA:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A642
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18419B66B4D011F08616B9CBDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 14:03:50 +0000
ROA not before: Wed 29 Oct 2025 14:03:46 +0000
ROA not after: Sat 06 Dec 2025 14:03:46 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108098 (0x1a642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 14:03:46 2025 GMT
Not After : Dec 6 14:03:46 2025 GMT
Subject: CN=69021ec6-b555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:f1:2d:db:68:03:4b:e6:c8:f0:b8:c5:26:
9e:20:90:53:9d:5c:a7:50:1b:b8:d3:be:8c:fa:6a:
4c:0a:99:70:26:7a:c2:29:41:e6:f7:a0:c8:8d:3b:
d3:7c:ef:33:0e:ab:fa:b1:32:1a:1b:a4:d9:47:fd:
bb:10:6d:f6:66:cd:b1:2d:4a:ae:8b:b1:19:f6:75:
c1:78:32:07:8f:fa:5f:c5:1e:60:47:4e:60:49:2e:
58:10:bc:ab:b0:da:c6:83:b3:f4:ba:20:70:85:3d:
b8:a0:1c:0b:2e:a4:47:39:e5:11:ae:75:04:26:e9:
a8:da:de:08:3f:52:10:d8:63:f3:2c:d7:64:c4:0a:
92:96:a0:72:f5:b7:0c:83:43:3f:ae:7f:2b:0a:eb:
6c:09:f8:63:38:ca:2f:23:33:83:86:32:00:b5:9c:
d4:9a:ac:61:5d:74:01:50:b0:7a:f8:89:1a:34:20:
54:40:aa:d7:c1:d4:e8:29:90:fe:09:e3:74:f8:77:
69:be:e6:a0:5c:c4:b8:a2:ae:4a:c3:f7:b0:ed:dd:
e6:ca:cf:b7:40:f0:af:9f:30:5b:11:e3:b5:89:24:
4d:5b:c5:86:6a:3d:2d:6b:e8:31:40:69:67:f6:ee:
ab:37:fc:74:39:4d:7e:54:ad:52:f1:c0:d7:20:93:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:54:FE:50:EF:BC:64:C1:EC:59:26:C4:3A:9D:A4:89:99:CA:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18419B66B4D011F08616B9CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
11:de:18:72:b9:bf:02:7b:06:bf:86:bc:49:49:0d:b8:1a:b0:
ff:73:79:2c:28:09:c4:6a:75:9c:d9:69:1a:0c:6f:b9:d4:ef:
aa:87:ce:9a:de:95:45:f5:60:12:93:ce:91:09:54:4b:80:d0:
2e:07:28:a0:20:5d:3c:73:08:59:1e:ad:8f:11:6c:2d:fa:24:
11:fa:6a:5f:b6:53:35:e7:89:ef:7e:8e:e6:f5:6a:c4:fa:b3:
96:80:9e:28:a5:fc:a5:fb:7a:3e:75:1a:d1:e2:70:06:e5:be:
12:3f:d3:45:6f:54:97:ec:90:bc:6d:b7:07:aa:b5:55:e0:53:
0f:ab:23:7a:6a:7a:c3:34:d7:fe:6c:d1:e2:28:cf:2e:3c:eb:
f3:4a:4f:b9:5c:82:40:1d:c9:0e:f9:f9:57:99:a5:47:ee:9a:
67:f0:51:80:7a:f9:58:f3:24:b6:a4:fd:77:3c:bf:78:60:94:
ef:ff:6d:99:48:5c:fb:8b:42:f4:b4:19:9a:d5:77:56:1b:9f:
6e:c0:27:63:72:ea:b2:4b:e3:27:57:85:4b:0f:05:ca:b4:d1:
5f:d0:00:5e:03:29:be:2d:2b:a9:2a:d2:5b:71:9a:99:cd:b5:
48:03:f3:b5:74:2e:fe:09:f5:13:2a:4c:82:b3:ce:85:2a:3b:
f8:62:da:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:45 2025 by rpki-client