Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52DC972EAE4C11F08E812D9DDAE4EC9C.roa
File: 52DC972EAE4C11F08E812D9DDAE4EC9C.roa (raw, json)
Hash identifier: BB5L6+mZO5UAlCzA8sDkHLUjkxWoMhJRh+X7yXxQZkc=
Subject key identifier: B4:3A:FB:FF:1B:A0:EA:46:FC:C0:B1:EA:99:4A:77:E7:5D:A7:82:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A462
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52DC972EAE4C11F08E812D9DDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 07:05:28 +0000
ROA not before: Tue 21 Oct 2025 07:05:23 +0000
ROA not after: Sun 25 Oct 2026 07:05:23 +0000
asID: 135423
IP address blocks: 154.82.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107618 (0x1a462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 07:05:23 2025 GMT
Not After : Oct 25 07:05:23 2026 GMT
Subject: CN=68f730b8-f4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:a9:e0:ea:c7:64:01:67:34:22:1e:f4:3c:
f6:77:8b:b7:45:03:64:3d:4a:a9:7c:d9:96:df:b6:
63:90:be:83:bb:20:5a:fb:01:92:ff:8c:34:a2:61:
e9:b9:b3:73:38:3f:45:a3:0c:87:2b:76:75:4d:5b:
a8:08:a3:e5:88:31:7a:53:27:34:da:94:1f:1e:45:
ce:5c:5d:78:d4:b6:89:4d:d0:2b:29:88:a5:5e:23:
0d:81:ca:15:48:7a:aa:02:c4:e5:2e:98:47:89:2d:
e0:81:ed:9f:f6:56:4b:ea:1f:e3:41:ac:2f:25:32:
3c:16:8f:39:db:c2:70:f4:5f:89:d0:88:5d:64:a5:
fd:4e:c9:d0:ab:3c:fe:1e:14:d9:4a:7f:82:db:e0:
82:10:59:ff:50:ce:8e:06:5c:3e:7c:e2:7f:fb:3f:
ed:53:cc:70:19:86:5c:da:8d:e7:f1:32:36:88:41:
5a:57:19:82:bd:ca:f4:65:54:32:9c:e7:f0:98:79:
57:4a:e1:72:58:e8:83:d2:a2:c8:72:a7:97:1a:44:
5e:19:2a:c6:ac:11:ec:27:2a:c2:d8:e0:2e:f6:ff:
63:49:f0:9a:b1:1c:c8:3a:41:a3:14:aa:cf:44:b0:
f8:d6:35:1d:56:8d:66:d7:c0:f3:82:63:2f:24:ad:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3A:FB:FF:1B:A0:EA:46:FC:C0:B1:EA:99:4A:77:E7:5D:A7:82:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52DC972EAE4C11F08E812D9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:56:b5:f5:8e:6d:a8:9a:0c:41:51:9b:b5:d3:1c:7f:48:18:
6e:69:b4:8e:b2:a7:8b:80:e2:19:4a:3b:05:97:44:46:5d:c2:
98:e9:65:94:65:58:db:9c:69:31:ed:4f:a5:fb:83:06:66:1d:
7b:63:28:98:1e:4c:fd:16:26:50:78:09:19:16:46:69:ab:73:
da:0a:49:43:aa:73:56:2c:48:b8:b0:bd:49:5c:bf:fc:3e:6e:
bc:67:f1:ac:a6:88:20:92:87:f0:15:42:f6:c6:4d:2c:ea:e5:
5f:f4:15:22:6e:50:fe:88:5e:e6:87:aa:eb:39:c1:2c:13:dc:
63:83:23:f4:95:29:ed:79:27:31:ec:9b:83:7b:f3:7a:5c:e3:
90:fe:21:3f:47:6a:51:9a:a9:a0:05:24:0c:6e:b4:f9:20:5f:
ed:2e:df:32:cb:77:e8:b6:27:6a:c7:fa:a3:0d:f0:0d:83:12:
3f:96:09:d0:fd:e2:41:e0:93:46:f8:b8:bf:d7:fd:4c:4b:88:
c6:fa:c9:c7:b6:95:52:d9:79:44:84:8d:df:a5:b2:b5:37:f7:
65:f0:e2:9b:5c:d6:3b:5f:e6:8e:89:1a:c3:16:0c:84:5d:d6:
38:37:98:3a:35:5c:4d:79:7f:ad:bb:b9:c8:0a:dc:f5:52:68:
dc:5b:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:00:09 2025 by rpki-client