Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507B737AB4C711F09F04C697DAE4EC9C.roa
File: 507B737AB4C711F09F04C697DAE4EC9C.roa (raw, json)
Hash identifier: s8vxhaIxPII7sCYFQuVSu0Tbo+HaRw0tvYU5qcJTAYA=
Subject key identifier: B4:41:35:EC:2D:2F:EE:B3:1F:7A:CA:01:1D:E3:07:65:93:86:40:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A630
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507B737AB4C711F09F04C697DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 13:00:59 +0000
ROA not before: Wed 29 Oct 2025 13:00:52 +0000
ROA not after: Fri 05 Dec 2025 13:00:52 +0000
asID: 394432
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108080 (0x1a630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 13:00:52 2025 GMT
Not After : Dec 5 13:00:52 2025 GMT
Subject: CN=6902100b-1905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:76:11:42:66:6f:8e:de:8b:15:3c:37:97:9a:
60:d1:1c:ee:5d:45:b1:f5:97:91:2f:a6:47:ca:f8:
e6:e6:90:46:f4:69:8a:1d:9c:31:36:b1:33:fb:11:
b9:a2:e2:f7:ee:1e:4d:c7:25:fb:e5:30:08:25:4e:
35:da:a2:ac:7b:32:91:8f:c7:35:5e:f2:4b:fe:cc:
ab:90:7d:68:30:ff:dd:0f:7c:d9:4a:d1:99:69:85:
80:e5:f8:26:b5:eb:dd:ff:20:10:e7:55:ef:dd:b7:
ec:a0:61:8d:c1:60:d3:af:21:d8:6a:ca:a1:85:90:
41:46:25:da:6e:78:ba:6d:e5:8f:73:6f:8e:54:e2:
b1:ab:97:2d:5f:a6:cd:ad:97:6e:55:d0:88:e6:ad:
49:c6:63:1d:9c:d3:f6:2b:22:b5:27:b4:0f:64:24:
b0:61:75:15:02:e5:da:12:09:1e:6a:fd:83:d2:0d:
7a:bb:ed:b3:04:38:3a:4e:f7:8f:94:ef:31:18:f0:
53:e2:97:a5:36:43:a1:9f:45:1e:e3:22:08:cc:b8:
41:eb:5b:d7:0b:dc:b8:23:61:92:3b:ed:f8:4e:ec:
c5:b4:81:03:df:23:ed:8a:2b:d6:00:5b:31:86:80:
a6:c8:5f:8f:cd:4c:c3:cb:b1:b7:dc:5e:57:d2:cd:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:35:EC:2D:2F:EE:B3:1F:7A:CA:01:1D:E3:07:65:93:86:40:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/507B737AB4C711F09F04C697DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
93:1a:fe:08:13:a4:73:7d:d0:15:88:bb:13:3b:c6:b1:3b:57:
3c:04:a5:b3:3c:59:40:ce:8e:d9:18:fc:d7:a6:a7:6a:85:be:
3c:60:09:18:a2:62:ad:f3:78:93:f0:ae:ed:42:70:e5:35:cc:
4e:de:34:c0:50:57:c7:c8:e7:16:20:2a:24:0a:00:6c:75:ce:
ba:39:ee:23:72:0d:fa:2c:b6:94:b6:46:cb:c1:d8:aa:10:88:
58:9e:c1:00:c9:a3:4b:27:d2:91:d4:03:f8:d5:c9:d4:3a:e8:
10:74:13:35:a5:fb:eb:ea:38:c2:25:4b:6b:f7:2e:c4:2d:f5:
41:9c:66:b1:1d:61:be:74:ff:34:69:c8:b8:3d:0d:88:1a:64:
09:59:52:da:0f:33:f1:0e:ac:c1:bd:ee:3d:d8:ac:d2:29:a3:
14:6b:d9:89:60:0c:c2:97:dd:da:af:2d:a3:5e:85:4d:47:a4:
c4:a7:d7:35:77:b1:2e:98:63:68:f9:5d:66:0b:2a:f2:31:c3:
8b:84:1a:6d:03:14:a5:ab:ba:c0:d1:4b:31:ac:51:3f:36:02:
f3:b3:1c:fe:9b:f7:c8:b5:85:c7:51:29:70:41:d5:80:92:47:
91:91:6f:9b:eb:a7:9f:35:d5:80:e4:f1:b7:91:59:d1:f9:ba:
04:41:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:56:46 2025 by rpki-client