Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8123C830B40211F0A616AEC5DAE4EC9C.roa
File: 8123C830B40211F0A616AEC5DAE4EC9C.roa (raw, json)
Hash identifier: p8Ua1fTE20+X54TIuajig+gCpAJkegKZFGicjoqZ08s=
Subject key identifier: 83:17:16:86:9E:FA:F7:1F:3D:DE:B6:6D:27:BB:52:FE:1E:93:97:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8123C830B40211F0A616AEC5DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 13:32:10 +0000
ROA not before: Tue 28 Oct 2025 13:32:05 +0000
ROA not after: Sat 29 Nov 2025 13:32:05 +0000
asID: 401776
IP address blocks: 154.197.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108014 (0x1a5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:32:05 2025 GMT
Not After : Nov 29 13:32:05 2025 GMT
Subject: CN=6900c5da-dac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fb:2c:7a:94:8d:c4:b7:80:2e:5f:55:d4:d6:
55:32:30:23:8f:d6:f0:15:ce:32:5c:da:aa:bd:68:
8a:90:c6:f3:e7:04:e4:d3:32:ba:df:a0:18:9c:57:
70:dd:8b:2d:a9:5e:b5:81:8f:47:96:f0:47:4d:32:
dc:78:34:9d:0d:3c:db:ed:83:a2:1b:4f:f7:54:be:
64:9f:b6:42:a2:bf:5e:0f:dc:37:5b:1f:89:4d:6c:
a4:e7:88:f7:25:0f:67:39:b7:e4:fc:4d:e6:f1:57:
5b:5d:ef:e9:c7:b7:39:37:e6:51:ad:d2:70:a8:2b:
13:72:2b:e6:d6:d3:cc:6b:ce:44:16:72:61:b0:29:
de:bf:6b:5c:cf:0f:8e:83:a6:3f:cf:52:00:9f:10:
0e:b4:8a:0a:f2:2f:62:59:52:ee:c6:20:4a:85:05:
d9:02:11:93:c3:a0:64:38:fd:4f:10:51:b8:32:f8:
e9:9d:7e:8c:c7:98:1a:dd:c8:b0:88:6c:3c:4c:11:
dc:b2:61:03:32:38:85:cd:bb:07:8c:5f:39:7c:2f:
b3:6b:3c:04:14:9c:28:49:ad:5a:4c:d4:ac:45:cd:
01:cc:0a:bc:85:96:a9:6b:1f:29:f4:70:0a:2b:1f:
c2:1a:a3:44:02:24:43:25:2d:d6:dd:d2:11:45:08:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:16:86:9E:FA:F7:1F:3D:DE:B6:6D:27:BB:52:FE:1E:93:97:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8123C830B40211F0A616AEC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:47:ba:2d:98:ee:12:63:9d:07:d2:e6:0c:75:d3:f8:7c:f6:
8a:a2:76:1d:47:fb:f2:c9:7c:65:48:ad:6f:9e:13:bb:d0:29:
16:7b:4a:91:f7:c0:3d:96:e2:db:c9:90:51:a8:cd:b9:54:dc:
87:b3:f5:1d:e9:49:c6:62:25:6a:73:12:5f:64:4c:14:e3:ca:
a1:92:02:a9:d1:76:3d:63:e2:fc:72:26:3b:71:a9:32:42:cf:
89:55:c8:5b:9b:35:ce:db:2b:9f:00:b6:8a:33:ca:34:2b:76:
b8:91:38:53:d7:4c:e8:66:d6:41:8d:ef:da:e0:b4:ea:36:9c:
c9:70:c9:a0:d2:68:4c:28:dc:ec:ef:26:87:d8:4b:28:2c:9c:
cf:92:c6:fc:fe:81:66:d2:c2:6d:c9:93:b6:74:10:1d:9a:0d:
6e:71:0d:9b:e9:1e:57:34:7c:62:39:25:ed:ac:e5:4d:29:e3:
0e:01:33:9b:98:af:6a:66:e4:5f:42:bb:d4:78:df:9b:ba:69:
ad:86:b0:2f:27:64:5d:97:72:3c:69:1a:99:a0:23:92:b6:8d:
2d:33:f8:aa:7e:71:58:39:45:b1:5e:b2:14:ce:68:48:50:62:
a7:e3:32:ba:05:c3:e5:6f:97:23:e7:29:91:7d:2f:81:d8:c4:
33:ee:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:49 2025 by rpki-client