Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6546DF6EB8A111F0B2EED1D1DAE4EC9C.roa
File: 6546DF6EB8A111F0B2EED1D1DAE4EC9C.roa (raw, json)
Hash identifier: lP/ZDBU3bq1GagDtaxgkcz8gxud5gdegbH7n5wb8oFs=
Subject key identifier: 1E:B6:3E:DE:A2:D6:64:94:A4:7B:13:00:54:3E:0D:19:14:B5:7C:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A724
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6546DF6EB8A111F0B2EED1D1DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:39:38 +0000
ROA not before: Mon 03 Nov 2025 10:39:30 +0000
ROA not after: Wed 10 Dec 2025 10:39:30 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108324 (0x1a724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 10:39:30 2025 GMT
Not After : Dec 10 10:39:30 2025 GMT
Subject: CN=6908866a-d802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:6d:2e:43:68:cb:f8:ff:90:bf:50:c7:22:
b2:55:41:da:8d:f6:39:55:67:62:5e:6b:de:ff:6d:
80:84:a4:e4:1e:13:dd:3f:c8:16:eb:e9:54:16:0b:
74:3c:99:9c:8d:b1:a2:43:c9:be:df:27:53:94:ad:
4c:8e:dd:0f:08:46:19:aa:6b:f7:8f:4d:6f:31:a0:
33:45:0d:30:e9:3a:19:aa:b4:18:26:0f:de:7f:85:
06:3f:77:e5:66:c1:61:4d:fc:40:40:45:a6:3b:6e:
3f:89:9a:fb:48:fe:74:7d:1e:bf:82:72:36:e5:6b:
63:c1:75:17:ef:31:91:50:01:e1:ee:4d:32:4c:c6:
40:35:ec:65:65:ee:1a:9f:f7:27:43:f7:d5:c4:92:
0b:67:3d:a9:81:3f:06:66:d7:ff:b5:57:14:5b:9c:
b3:81:67:52:5e:b2:92:7a:36:15:9f:19:0e:42:6a:
d5:5c:9b:b3:ca:36:0c:9a:f7:8c:5c:f4:c1:5a:f9:
8c:05:49:d8:23:09:45:fa:5c:3c:48:26:c1:80:e1:
6e:40:34:d9:ed:91:8b:55:36:28:8e:6b:8a:0e:54:
e8:58:45:1e:75:cf:28:04:b8:dd:8e:13:ca:82:33:
7b:10:4a:80:5c:69:b2:c7:cf:be:80:a0:2d:2b:1b:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B6:3E:DE:A2:D6:64:94:A4:7B:13:00:54:3E:0D:19:14:B5:7C:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6546DF6EB8A111F0B2EED1D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:18:66:2c:6a:7a:21:85:75:6b:bc:52:cf:b1:dc:67:36:3f:
e5:aa:bc:f3:78:cb:4d:97:43:e7:c2:5b:8a:e3:4a:34:70:b0:
0f:89:07:21:67:40:3a:d8:d1:0f:42:b0:e3:65:25:2f:d5:e0:
b3:d0:5c:7e:1b:27:14:0e:de:58:f3:5e:ae:ec:af:bd:8c:ef:
bb:97:9e:76:e4:14:31:26:cb:65:ec:a3:24:91:7d:50:9d:12:
00:35:1d:6f:c8:ae:07:a2:2c:bb:2e:6c:a9:b2:25:4a:7c:cc:
2e:ad:7f:0d:d7:a8:b3:1b:66:5b:54:41:b9:1f:60:12:0c:df:
29:2e:0a:15:33:ac:9c:40:1b:65:b9:96:4c:95:71:18:2d:eb:
e9:f4:80:ac:18:b7:b4:d2:ec:60:2e:a4:cb:4d:b9:34:4d:d6:
f0:33:30:e1:1b:f2:45:7a:7d:bb:71:ba:ea:3e:e9:87:f2:90:
27:55:5f:96:16:58:cd:02:12:bb:a1:81:ac:df:78:7d:7b:c6:
dd:26:d8:31:6b:95:c4:de:f4:9b:fd:3b:3a:87:c6:4a:ce:1d:
7e:3b:98:16:de:8f:8c:4d:4d:b6:cc:67:bc:67:74:33:ca:70:
16:85:bf:82:56:92:22:14:95:cc:96:36:2a:ac:63:0f:3c:0c:
81:8b:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:15 2025 by rpki-client