Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81C1EA12B73411F0AE8C16D7DAE4EC9C.roa
File: 81C1EA12B73411F0AE8C16D7DAE4EC9C.roa (raw, json)
Hash identifier: pst776dfl9es4zwM+x4tguAKJzI+t3nXp/JLA2CLWl8=
Subject key identifier: 0A:CE:E8:D3:50:C9:B4:29:82:BD:60:6B:AB:4F:94:10:83:32:2F:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81C1EA12B73411F0AE8C16D7DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 15:07:49 +0000
ROA not before: Sat 01 Nov 2025 15:07:35 +0000
ROA not after: Fri 07 Nov 2025 15:07:35 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108248 (0x1a6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:07:35 2025 GMT
Not After : Nov 7 15:07:35 2025 GMT
Subject: CN=69062244-babb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:81:3d:d2:4f:64:71:c6:a0:33:4b:1a:f8:
48:7f:4c:6c:45:c6:7b:0e:f9:8d:ea:2e:2a:c2:2a:
1f:63:cb:1b:6e:80:4b:4f:dd:ed:e6:0b:dc:85:9a:
2d:e3:80:c3:ee:be:35:74:51:fa:29:32:49:3e:95:
05:38:76:f7:7e:d4:5d:e2:e6:f0:71:54:93:14:1b:
a8:11:d8:f2:9d:89:6e:ab:9c:d1:11:75:44:15:d1:
d0:da:04:2f:9c:1c:85:a2:61:e9:b9:d1:2d:58:7a:
d5:2e:d4:88:ac:d9:36:c8:8d:ad:b4:21:b2:42:fb:
b1:5d:76:18:9d:72:4c:9c:9c:e7:9e:66:30:8d:0f:
e7:f9:70:c9:5e:3b:69:6e:a1:52:42:92:d2:4c:c7:
80:20:9b:66:2d:8f:7c:05:5b:25:01:7a:b0:2e:6a:
c6:8f:08:e0:cd:31:bf:f1:74:a6:1e:ef:d7:cd:60:
c6:0e:7c:3d:9f:2b:fc:19:0f:bb:2d:bb:bf:a3:62:
46:87:0f:48:08:bf:b8:54:41:10:62:7d:47:21:ee:
24:12:53:b5:dc:ef:65:82:9d:d6:75:43:18:26:af:
f9:c5:1f:3a:5e:b4:7a:bc:f5:da:5d:ea:ed:b3:dd:
ef:e2:ad:65:2f:82:87:89:d3:ed:43:1c:34:6f:b8:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:E8:D3:50:C9:B4:29:82:BD:60:6B:AB:4F:94:10:83:32:2F:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81C1EA12B73411F0AE8C16D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:71:98:2f:b9:ee:63:d0:66:20:42:9d:30:70:68:ba:24:3d:
71:ef:63:82:1b:4c:3f:81:97:5a:0f:57:6c:83:f0:05:ea:04:
a6:c7:70:85:ba:55:fb:63:b9:71:c1:2c:c9:1a:4f:89:28:0a:
e5:75:f4:a9:78:07:20:42:70:a1:1f:ce:29:00:21:39:d5:ca:
34:eb:73:00:bd:ab:7c:3c:38:d9:40:c9:fc:99:1a:f8:ab:f9:
fb:c0:b1:dc:ef:8b:f7:9c:a4:76:d0:f0:28:9f:07:bb:6d:85:
3b:5e:53:23:e0:e4:c0:fd:e8:a7:3a:9c:68:e1:93:58:8a:a4:
eb:cd:47:78:24:a8:76:69:44:02:2d:87:3a:78:ee:3a:dc:45:
fc:b0:0c:33:18:b2:12:79:b8:24:d2:14:5c:7f:af:c0:71:36:
c0:ad:36:66:72:e7:ec:5d:3b:08:c8:f8:b4:52:34:08:30:86:
b6:c4:73:00:c9:6c:c4:0a:93:ec:7f:2e:c0:bd:f3:9f:6a:f9:
fe:c2:3f:a8:d4:40:b8:ff:02:87:42:4c:0b:5b:d8:83:5b:c7:
db:10:0f:d7:70:76:f4:fa:f0:bf:fe:d7:cd:15:89:62:72:48:
39:aa:0a:64:f6:89:28:ef:f6:25:e0:24:85:72:cf:e3:98:22:
ca:ee:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:26 2025 by rpki-client