Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782D2BAAB41011F0AF4E4F9CDAE4EC9C.roa
File: 782D2BAAB41011F0AF4E4F9CDAE4EC9C.roa (raw, json)
Hash identifier: qYFQvvIsry8BmvTqi/8sBbqVWYWpegFIExIHn+zlcYg=
Subject key identifier: D7:40:8E:7A:43:95:F6:07:95:54:07:89:9A:D1:BD:5D:E1:9A:B0:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A611
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782D2BAAB41011F0AF4E4F9CDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 15:12:08 +0000
ROA not before: Tue 28 Oct 2025 15:12:02 +0000
ROA not after: Mon 15 Dec 2025 15:12:02 +0000
asID: 63139
IP address blocks: 154.203.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108049 (0x1a611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 15:12:02 2025 GMT
Not After : Dec 15 15:12:02 2025 GMT
Subject: CN=6900dd48-e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:ed:11:9f:f3:c6:c1:20:6b:cc:eb:01:56:
53:3f:85:46:65:ac:c7:90:2b:da:a7:3b:c8:81:1c:
bb:6e:88:cd:f1:20:5b:98:96:ad:21:b8:ea:90:48:
fc:79:eb:11:bb:1f:74:a5:df:22:06:40:7a:46:b2:
88:58:7a:8a:7b:69:f7:b9:d1:b2:7b:79:ef:9c:df:
0d:35:0e:44:2d:fa:0c:0a:3a:ef:33:f2:59:76:92:
64:76:16:5d:2d:2f:3c:11:11:59:87:77:f6:c9:99:
f4:18:dc:83:22:7c:08:c2:a8:d8:c4:f6:5b:f6:c5:
26:41:98:2a:ce:1c:06:8b:41:bc:5b:85:db:1f:7c:
72:aa:0a:bc:73:d9:f0:93:17:b2:c6:39:95:e8:8b:
06:2e:44:f8:c7:68:5b:ac:35:2e:89:1b:6a:8a:76:
6d:3c:b2:2d:c8:ea:21:f0:46:a6:51:2e:c8:22:08:
07:38:ab:5c:e9:4c:5c:3c:c8:4c:5f:c0:d5:ab:d7:
2f:3a:73:76:c2:2e:50:8f:30:0e:1c:de:17:43:4c:
c0:6e:4d:57:50:98:d3:25:49:92:92:75:19:68:c9:
ac:18:0e:b3:4e:03:d7:15:62:93:9d:be:89:e7:1b:
fa:ce:fe:38:ac:5c:92:cf:53:48:59:8d:e1:77:12:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:40:8E:7A:43:95:F6:07:95:54:07:89:9A:D1:BD:5D:E1:9A:B0:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782D2BAAB41011F0AF4E4F9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.179.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:cb:7d:ac:82:b4:11:19:02:bc:0a:e3:41:4d:a5:ef:8f:82:
3d:c6:65:fa:3b:39:46:2f:9b:4c:fc:9e:3e:22:70:c2:ae:a6:
08:20:3e:49:0f:3d:7b:12:e5:5d:f3:4e:4d:cc:26:13:3d:9a:
b7:07:22:12:9b:a1:d7:b4:7d:22:f9:d6:70:bd:63:fb:00:26:
ee:a9:8d:8b:1f:3d:4b:3d:4a:d7:a4:5c:7c:3b:8b:b1:18:c2:
7a:fd:81:82:a5:31:65:fa:7d:42:25:89:58:11:de:35:0e:c7:
98:c0:88:51:8b:12:3d:6d:1f:53:34:df:3a:dc:cd:3d:0f:ee:
3d:42:8f:8d:aa:32:84:b3:d1:5c:38:63:e9:74:2f:62:46:ef:
4c:ca:cc:66:29:53:d0:84:f7:3f:03:79:d0:37:e5:e7:97:12:
7a:ee:c3:cd:fd:63:07:75:e8:34:9c:a9:d7:3f:cc:a5:c4:7e:
6b:bc:2e:ff:2c:e6:63:e6:f4:33:0f:34:6b:90:96:fa:fd:3a:
f7:26:f3:72:1e:41:a9:ab:d5:06:56:97:14:a5:4e:ea:c6:fb:
42:f0:4d:4b:a9:03:e5:bb:09:e4:f4:8b:9e:7f:87:01:00:d1:
68:07:be:47:c8:75:16:33:3a:2b:43:b9:a8:54:74:2f:08:9e:
46:60:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:13:50 2025 by rpki-client