Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EAA1810B72511F0BCC23879DAE4EC9C.roa
File: 5EAA1810B72511F0BCC23879DAE4EC9C.roa (raw, json)
Hash identifier: xrmqxs12gNXfl/1fbql+F51gNGaffQgpNmnXH9D4Kg4=
Subject key identifier: 91:E6:18:BB:78:9D:C3:C4:AA:87:B3:0F:E7:38:4D:BB:26:54:D6:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EAA1810B72511F0BCC23879DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 13:19:18 +0000
ROA not before: Sat 01 Nov 2025 13:19:13 +0000
ROA not after: Tue 11 Nov 2025 13:19:13 +0000
asID: 13335
IP address blocks: 154.194.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108240 (0x1a6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 13:19:13 2025 GMT
Not After : Nov 11 13:19:13 2025 GMT
Subject: CN=690608d6-9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:87:e7:c6:b1:a9:b6:4d:3e:41:3d:77:53:
ac:c5:7b:ca:28:85:e3:af:12:0d:89:e3:cf:54:33:
a3:ca:6f:a3:38:60:10:d8:0b:7f:e3:8f:bc:56:11:
eb:3f:e1:83:70:a3:e9:de:37:5a:ee:f0:d1:49:9f:
f2:3e:eb:45:36:4c:f5:59:3b:36:b3:fa:6c:e6:05:
e4:41:3c:29:cf:b2:7d:e7:60:0e:10:3f:f5:0a:26:
b7:09:9e:3e:e9:e2:03:80:75:e7:4f:ea:05:8d:47:
c5:58:e8:9f:96:4a:4e:e5:50:37:2f:3e:6e:4d:ff:
04:8a:5b:91:55:1d:cf:77:32:7a:a8:49:12:ce:34:
3d:c7:81:ee:bc:03:d9:7b:2c:36:89:e1:01:37:67:
46:2b:ff:3c:c1:52:d7:39:c5:cc:87:b1:94:d4:4c:
63:75:29:94:c5:54:93:35:35:ac:19:17:14:c9:28:
c0:b8:5b:08:df:8a:cd:12:e9:2c:e8:71:49:97:19:
c7:2e:eb:6b:db:93:ac:55:12:66:8c:fe:07:d5:35:
93:be:d0:3a:a8:34:21:75:43:49:69:f6:14:81:03:
d8:2d:a0:af:ad:1a:29:b4:17:98:79:6a:dc:f0:ed:
e2:56:66:9a:d9:14:60:e2:5c:3e:9f:b6:0e:31:ac:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E6:18:BB:78:9D:C3:C4:AA:87:B3:0F:E7:38:4D:BB:26:54:D6:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EAA1810B72511F0BCC23879DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a0:54:9b:59:e6:f3:b1:f7:1c:79:e4:47:2d:6f:62:8c:90:
c5:cd:a3:12:08:1e:1a:4f:39:33:64:e8:3f:09:0b:3e:f0:9f:
7e:98:fb:a6:90:9e:6f:a9:dc:84:55:78:4a:87:e6:3f:0c:d2:
d6:28:33:d0:99:59:22:a1:6e:36:7c:cf:90:7d:93:45:8a:7d:
bf:3d:89:70:18:a5:c4:cf:cd:1a:66:0a:92:60:cd:35:0f:e5:
f5:d7:5e:3b:fd:e8:04:ad:bd:4b:17:29:e6:e9:a8:73:d8:7b:
71:2b:b5:31:48:84:02:52:0b:28:ae:9f:2e:4a:7c:2c:1e:20:
3e:a0:43:aa:ba:82:ce:37:e0:fd:1a:ea:41:68:1d:49:38:b3:
26:b8:b3:67:af:35:01:a7:22:39:76:f7:e6:2a:16:06:9b:94:
87:7f:04:30:4e:40:69:ec:cc:4a:a6:8f:ad:4a:b7:d5:ca:cd:
fb:f0:d9:f5:69:0b:8d:b4:1d:bd:f1:14:9b:d3:d8:ba:14:4d:
f1:1e:e7:25:ac:28:93:e5:5f:9c:06:2c:5c:4d:4f:87:45:36:
07:41:eb:b2:c4:82:f8:2d:5a:c6:f1:a9:6a:18:c4:46:f4:9b:
5d:a1:aa:93:f3:eb:77:4b:53:7c:81:f9:2a:a2:90:6f:a1:12:
4e:39:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:27:51 2025 by rpki-client