Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B85E30EB88E11F0A6F493DCDAE4EC9C.roa
File: 8B85E30EB88E11F0A6F493DCDAE4EC9C.roa (raw, json)
Hash identifier: 93esz1TWMJUp0SoHlil0wE7Gvrk64d9eMc7ri2o5ZfA=
Subject key identifier: 4D:2F:60:2C:2B:20:E6:15:9C:02:2B:17:32:7C:45:99:9E:10:6E:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A706
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B85E30EB88E11F0A6F493DCDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:24:42 +0000
ROA not before: Mon 03 Nov 2025 08:24:32 +0000
ROA not after: Sun 09 Nov 2025 08:24:32 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108294 (0x1a706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:24:32 2025 GMT
Not After : Nov 9 08:24:32 2025 GMT
Subject: CN=690866ca-2ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:e0:d3:cb:ac:c6:9d:f3:fb:f8:56:ac:dd:
89:49:57:82:36:c4:88:ac:17:f1:51:1b:e8:81:8d:
58:57:24:fd:21:50:b2:02:6b:3d:51:8d:d9:37:25:
30:39:8f:3b:90:b0:49:9d:86:d9:ae:d4:04:e6:4c:
43:dc:88:64:b9:fc:75:b6:5a:dc:39:82:97:d8:8d:
ba:fd:43:fd:ee:ed:9d:5a:ac:4e:f1:c3:52:0a:c5:
3c:a7:dc:da:45:21:9c:c3:c6:82:bb:82:06:a8:52:
48:b3:1f:b7:5e:ce:98:b0:c5:27:42:d1:ff:bd:96:
cb:d5:9f:39:8a:f6:85:6a:bf:8e:6a:0d:ae:26:fd:
4c:5a:d6:3f:18:2a:29:7b:9e:d5:d3:5b:c1:0f:48:
0b:b7:c9:49:06:33:32:f1:73:f5:83:53:a7:93:75:
c7:0c:4b:c8:df:c5:ff:7f:c7:63:b7:9e:c6:02:a7:
49:23:69:86:c3:a0:a3:46:04:d2:7e:31:c8:e7:a9:
e4:d6:39:f3:55:d1:a2:93:a9:04:85:f6:d1:9f:20:
14:8a:49:90:80:32:d6:d0:70:09:43:a1:a2:f5:58:
bb:c5:24:d8:4d:05:06:6c:f0:31:48:55:4b:95:0c:
32:1a:f5:19:29:fe:ca:be:6a:ab:36:8b:54:5a:f6:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:60:2C:2B:20:E6:15:9C:02:2B:17:32:7C:45:99:9E:10:6E:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B85E30EB88E11F0A6F493DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
34:0f:b7:d1:ac:2f:32:a5:45:07:15:d5:fc:4e:c8:ed:68:27:
95:48:ea:86:8e:89:da:15:23:43:b6:68:71:95:b1:7d:04:a3:
b3:81:ab:0f:08:9e:d1:57:b7:1a:48:65:7d:6b:e9:57:b0:f0:
0e:46:0e:ba:a8:d5:aa:c2:81:7b:4e:bd:81:7c:38:de:e9:51:
3c:74:bc:ae:89:7e:2b:18:c3:54:67:47:fd:88:ed:12:ab:fc:
31:96:9c:53:01:48:76:c7:f6:0d:b1:77:fe:f3:2f:cc:04:d9:
af:30:a7:fe:00:fa:a1:6e:09:e5:ce:57:b2:4f:46:7a:f5:40:
b0:d4:73:cd:d2:13:93:5a:3e:10:a1:18:67:e0:06:40:4f:10:
4c:85:15:e6:33:25:b0:da:ba:8b:12:c8:27:af:46:7e:60:e8:
e8:a6:4f:e6:dc:68:be:d6:03:b7:e0:e6:8e:5f:85:9c:cd:95:
b1:f2:e9:ad:4b:2d:53:c4:30:37:06:de:bb:ec:a3:00:f5:99:
4e:ac:07:3a:4e:99:b2:62:1b:c8:99:89:5d:c4:49:6c:a8:1a:
1f:a4:df:05:3c:ec:b3:e7:36:af:45:5c:a9:28:f8:70:f9:c5:
4b:a2:92:31:d1:85:c0:a1:57:8d:5c:a3:38:5a:33:62:2e:92:
5c:89:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:35 2025 by rpki-client