Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313FC770B91F11F09A21CCDBDAE4EC9C.roa
File: 313FC770B91F11F09A21CCDBDAE4EC9C.roa (raw, json)
Hash identifier: kqLYddt4qGLMPKks4G4/jBy4plKavuiMlU5zHJOGlHM=
Subject key identifier: F8:4A:8F:9A:8F:A7:D7:A9:B6:7F:D1:E5:39:21:A3:29:0E:E6:0C:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A749
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313FC770B91F11F09A21CCDBDAE4EC9C.roa
Signing time: Tue 04 Nov 2025 01:40:07 +0000
ROA not before: Tue 04 Nov 2025 01:39:59 +0000
ROA not after: Mon 10 Nov 2025 01:39:59 +0000
asID: 18004
IP address blocks: 154.92.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108361 (0x1a749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 01:39:59 2025 GMT
Not After : Nov 10 01:39:59 2025 GMT
Subject: CN=69095977-f9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:6b:0c:75:fa:37:1e:c7:e6:fb:b2:f0:16:
8f:7b:34:65:4e:d8:c4:b2:d2:95:7e:8f:1e:71:40:
f0:16:9a:47:b2:ce:b1:bf:32:14:1a:e0:ae:bb:9b:
7c:5f:e4:5e:28:84:4f:33:f1:42:11:29:90:72:8b:
b7:91:02:3d:da:bb:e7:07:e3:82:8b:b2:73:de:65:
59:96:ea:5b:fd:fb:f0:ad:94:65:18:a8:2e:8a:51:
a7:a0:30:ba:f9:ed:b7:86:ff:a6:b7:fa:6b:6b:3c:
c3:7d:81:21:fa:c2:06:93:8d:f3:3d:1b:65:44:7e:
1b:22:c7:1e:41:c2:ac:4f:01:37:2a:83:64:7e:b7:
1b:a9:8b:20:a1:ec:68:55:be:4b:92:58:b0:f5:e8:
d7:b2:d3:08:75:35:8e:12:29:16:a0:35:63:ca:a1:
11:76:b7:16:d4:09:38:09:72:f0:c0:05:7b:2b:98:
dd:5d:f7:e4:a3:1e:af:e1:e9:92:9e:f5:91:b4:fd:
33:95:bf:b4:77:90:61:72:c0:e7:07:32:b7:a8:c9:
27:5a:87:18:65:64:b1:84:bf:c2:c3:8d:d7:2f:c6:
2d:8f:b2:52:a9:3e:ed:03:48:5f:f1:86:bc:8a:8c:
d7:ff:0e:dd:f1:17:40:c2:31:03:74:23:32:f6:fa:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:8F:9A:8F:A7:D7:A9:B6:7F:D1:E5:39:21:A3:29:0E:E6:0C:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/313FC770B91F11F09A21CCDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.29.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f0:dc:e4:d6:7f:ca:0d:dc:fb:b5:6d:cb:0a:8c:7a:d9:72:
9c:01:41:a9:68:9f:83:ed:7f:33:51:ec:a6:5e:b4:93:c1:de:
94:f1:e0:71:b8:3c:c7:4d:b4:63:94:f9:26:13:ea:f7:17:38:
0b:21:a6:1f:75:cb:c3:6d:c9:2c:64:90:80:e5:70:43:9f:1b:
0b:9b:d9:34:ab:bf:2e:44:d6:b9:8f:fd:b8:a9:24:fb:ca:bd:
e5:8b:92:37:d6:6a:7b:55:76:f0:5c:63:8b:4b:4f:3e:48:70:
b9:b2:76:cd:4c:c6:a0:b3:b1:ad:3f:7b:a5:be:a7:c0:74:0d:
fc:6a:18:7e:10:94:cb:c8:ad:66:0b:8e:f3:77:1c:9f:c3:61:
ed:9c:ab:01:67:95:9b:21:7e:3b:0b:f8:42:09:66:55:04:f6:
e4:3f:1c:4b:55:5a:05:0e:90:84:00:fd:1d:ad:7a:8c:fb:2a:
26:0e:70:91:68:93:b1:67:ac:01:7c:6b:8a:3a:6d:19:45:ae:
8d:b4:ef:5b:a9:c4:83:1e:70:ee:da:36:bd:b2:e4:91:46:f6:
ea:7b:3e:86:6c:17:50:6b:16:99:95:86:b8:cc:28:01:1a:b4:
87:ae:72:7e:09:2b:b4:82:c0:41:27:3c:c2:b4:7d:02:73:63:
42:bb:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:24 2025 by rpki-client