Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE47AE8B8D011F08EFDBDF5DAE4EC9C.roa
File: 6EE47AE8B8D011F08EFDBDF5DAE4EC9C.roa (raw, json)
Hash identifier: iAw4hxeT3+quOIsro3h5EOoeVt/yX+55CZbZ1FRJCc4=
Subject key identifier: EE:D6:DA:5D:A8:D3:95:F8:D4:92:0B:51:18:25:DC:88:3D:70:A1:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A742
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE47AE8B8D011F08EFDBDF5DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 16:16:20 +0000
ROA not before: Mon 03 Nov 2025 16:16:11 +0000
ROA not after: Tue 03 Nov 2026 16:16:11 +0000
asID: 60171
IP address blocks: 154.197.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108354 (0x1a742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 16:16:11 2025 GMT
Not After : Nov 3 16:16:11 2026 GMT
Subject: CN=6908d554-05ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:a3:33:8d:f4:d3:37:63:82:1e:c1:11:91:
ad:42:12:09:eb:47:11:dc:e8:d1:9a:b7:eb:5e:07:
e4:bd:58:d2:0f:8c:9d:bc:70:ac:4c:95:b9:c5:35:
17:05:32:77:91:a9:21:38:74:82:6f:64:93:4c:7d:
2c:49:3d:bd:f1:63:79:5a:ac:f5:bc:31:cb:7c:a3:
8d:3f:57:5f:c9:84:fd:db:19:92:a9:7e:cb:1f:b6:
be:62:7c:7d:52:78:74:5b:22:51:bb:c7:2e:09:fe:
e2:6d:a8:55:f4:94:78:b2:9c:df:0d:b8:61:59:ed:
1f:52:15:d4:56:79:ac:48:d8:8a:c7:f3:c3:ee:8b:
e4:48:01:11:2e:c1:aa:42:38:69:ca:94:80:cf:9f:
52:71:30:8f:69:c4:23:4f:bd:8b:7a:1e:de:5a:f2:
a0:4a:5c:6e:69:bf:36:76:9a:dd:e2:a5:da:d0:70:
b3:6a:c6:7f:58:8d:6f:d3:ad:aa:b3:d0:47:d4:b2:
16:ce:58:02:c3:bf:09:d2:b7:9c:16:8f:42:9f:94:
82:09:24:3e:bf:e8:91:09:ea:33:d3:b4:7a:af:5a:
b5:bf:e5:38:1a:6c:93:1d:ea:18:7d:ff:42:53:a0:
cf:03:08:8d:bc:68:db:a6:45:76:8b:dc:b1:9b:b6:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:DA:5D:A8:D3:95:F8:D4:92:0B:51:18:25:DC:88:3D:70:A1:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EE47AE8B8D011F08EFDBDF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:02:a5:0e:0a:bb:bb:db:38:8a:26:62:ba:6d:81:3e:bf:57:
ca:b6:ed:af:5a:c0:8b:10:a2:1f:39:4a:30:e0:f6:10:88:c3:
e0:ae:cc:0e:55:50:2e:64:71:bd:4d:86:c8:25:d5:80:2e:9e:
12:8b:e4:20:76:39:f3:38:13:a8:a5:86:0f:79:e4:fc:17:97:
d3:d8:b0:6b:ed:47:58:4e:ce:0e:e9:eb:cb:f7:0a:98:e2:73:
1d:48:7c:5d:3b:f4:b9:1e:c2:c3:f4:77:f2:ef:52:21:a3:af:
a2:a1:63:4f:c1:42:f1:d6:48:6b:2a:49:00:99:f3:2f:84:f2:
b7:c8:8a:8c:90:07:1e:af:4f:0e:45:75:a9:42:91:2c:32:9d:
b0:d9:15:8d:10:33:9d:82:fe:db:e1:58:25:6c:7d:7e:15:49:
5a:fc:65:25:47:55:0b:42:e2:65:8c:0c:49:67:a3:b1:42:ec:
ae:ba:06:ab:fe:23:b3:76:aa:0a:24:6c:0d:66:c9:93:f2:fc:
2a:c2:c1:69:0d:85:c7:be:14:67:d1:0d:dc:4c:ed:0f:9c:45:
45:ff:31:31:70:22:5a:45:c7:a8:5d:ce:ac:fa:2e:82:58:c3:
c0:64:ad:67:7a:32:e4:87:8c:6e:42:24:8f:23:d0:de:1f:61:
78:84:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:43:49 2025 by rpki-client