Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68589CC8B93811F0AA40CF86DAE4EC9C.roa
File: 68589CC8B93811F0AA40CF86DAE4EC9C.roa (raw, json)
Hash identifier: wEQmlwa62Z2H+lAT65kJfibDQAF5ItCxAzwbgLpxByU=
Subject key identifier: D4:3D:9D:BE:9E:8E:6E:D5:40:61:85:59:A6:C0:C8:12:17:84:6D:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A753
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68589CC8B93811F0AA40CF86DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 04:40:37 +0000
ROA not before: Tue 04 Nov 2025 04:40:32 +0000
ROA not after: Tue 09 Dec 2025 04:40:32 +0000
asID: 200373
IP address blocks: 154.213.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108371 (0x1a753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 04:40:32 2025 GMT
Not After : Dec 9 04:40:32 2025 GMT
Subject: CN=690983c5-6960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:4d:93:5a:1b:8b:fc:58:29:ac:fe:2e:cf:
2a:93:02:1a:2a:67:58:93:33:ab:ad:fe:57:d4:11:
0b:18:38:30:05:d9:ce:31:e1:5b:e4:05:52:5c:bc:
19:cf:92:e9:39:b9:6d:25:b1:43:fc:34:84:df:c5:
2a:0a:02:41:30:67:cf:43:c2:2d:ef:18:61:da:98:
0b:31:2d:5a:2d:6f:4b:8d:d1:98:7f:10:56:fb:d4:
b0:7b:93:2d:b3:61:ec:56:9d:5f:5f:3a:cf:65:32:
d6:5f:0d:a5:0d:dc:4d:53:f2:0a:c9:a9:96:a4:9f:
fc:d3:93:93:0f:56:d6:2a:24:f6:f6:0c:c2:da:5c:
02:96:f0:39:64:76:5b:6c:5e:76:ff:9e:d5:a1:dc:
47:0f:69:51:fc:18:1d:7c:69:21:ce:55:48:1c:f8:
f3:09:e5:67:b7:9d:da:32:60:7a:ab:1f:fd:e0:d6:
f5:c8:af:14:f4:4b:2d:45:1f:2d:89:0a:5a:fb:cd:
21:96:22:58:f1:4e:67:b4:5f:c0:ab:d8:48:a9:f7:
6f:24:ec:bb:7e:0b:d1:b6:79:f9:17:09:9b:6f:09:
1f:22:d2:f6:55:0c:5c:58:d5:49:b8:66:cc:ea:f8:
47:b6:c1:09:a8:51:1a:f8:ee:44:0d:8b:98:00:b8:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3D:9D:BE:9E:8E:6E:D5:40:61:85:59:A6:C0:C8:12:17:84:6D:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68589CC8B93811F0AA40CF86DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.160.0/21
Signature Algorithm: sha256WithRSAEncryption
38:59:30:83:b8:84:e2:7a:f5:ca:6d:5f:33:0c:14:66:a2:24:
0f:fc:98:e9:63:9c:d7:92:7a:2f:53:c3:26:5e:a5:81:05:41:
1f:30:71:70:62:5e:70:b4:0a:26:16:31:e0:96:45:e2:c9:66:
04:9b:9f:af:7a:25:1a:55:7c:a9:b0:13:8a:ff:39:86:c2:7c:
89:d1:80:8e:cf:c3:46:4a:2d:52:2c:50:3d:5f:cc:de:27:50:
7b:6c:a7:78:c5:75:29:bd:73:58:67:9a:3f:2f:ea:54:d1:4d:
0e:7f:f9:0d:0d:ea:56:05:0c:ea:82:79:79:34:b7:ea:96:ee:
b6:33:1e:3e:8e:36:e6:a1:59:c7:a2:1c:e5:13:86:47:db:d5:
2b:40:7b:a9:64:d3:5b:89:61:0c:85:99:39:db:73:e1:52:aa:
62:43:a0:89:70:93:92:18:e3:ef:62:6e:98:2a:64:6f:8b:8c:
9b:3a:12:25:0d:58:c3:33:07:8e:52:3e:59:85:77:93:54:22:
bd:46:51:c5:1f:7e:b6:a7:3d:65:86:3a:53:ee:f8:50:6b:a8:
9b:ae:01:6f:bc:18:a3:0d:0c:d4:3b:51:62:4f:73:7c:71:bf:
3e:55:bd:a7:2c:e1:e6:bd:98:dc:c2:74:b8:2f:e9:99:39:c5:
db:de:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:12 2025 by rpki-client