Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E16158AAE6111F08EEC2AA5DAE4EC9C.roa
File: 8E16158AAE6111F08EEC2AA5DAE4EC9C.roa (raw, json)
Hash identifier: LAy7d+B7+BcQ7NYxeAnU1UPfnX0y9BZy/sozdokVcVc=
Subject key identifier: C5:C6:79:0A:06:7B:E0:1D:99:09:B3:4A:DE:45:40:A4:F0:FE:EF:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A480
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E16158AAE6111F08EEC2AA5DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:37:27 +0000
ROA not before: Tue 21 Oct 2025 09:37:22 +0000
ROA not after: Sat 29 Nov 2025 09:37:22 +0000
asID: 20326
IP address blocks: 154.193.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107648 (0x1a480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:37:22 2025 GMT
Not After : Nov 29 09:37:22 2025 GMT
Subject: CN=68f75457-99de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:47:b3:70:0f:8d:35:93:91:b5:0d:0a:ac:
ea:3a:a0:d1:71:74:49:cc:15:88:9e:00:57:9d:3a:
c2:ec:65:ab:84:05:5b:97:b6:f6:de:5b:f3:15:ca:
19:53:e1:1d:92:20:ce:16:f4:7f:55:85:87:74:d0:
b4:ce:21:60:b2:f0:89:4c:91:13:05:b5:54:a0:4c:
a6:f6:e6:80:f8:61:d9:3a:81:12:33:69:5d:b2:d0:
e4:5d:28:e1:48:b1:79:cb:6e:df:71:31:e8:59:68:
0b:1f:9e:48:e4:df:26:cb:f9:29:54:98:76:c2:3a:
30:cc:2e:d4:1f:56:e9:56:b9:62:4e:df:b2:4b:a5:
6b:4a:ad:a4:00:d1:ff:ca:4c:94:0b:10:97:c1:ac:
7b:60:11:42:59:a1:20:19:ae:9c:aa:b7:25:f8:50:
3c:bb:1c:36:4a:ab:17:2c:fa:2e:ef:31:37:e7:5f:
fe:5d:34:d3:58:29:8a:80:a7:73:b4:4f:bc:b8:e9:
70:30:3e:fd:9e:43:77:03:03:75:61:8d:da:59:fd:
c1:ea:2c:e7:2a:56:bb:df:b5:55:c5:99:3e:bd:15:
be:59:cc:42:0c:a9:4c:72:9d:4e:d4:eb:5e:01:1a:
71:6c:66:58:09:2c:15:83:63:40:a4:f3:85:9b:58:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C6:79:0A:06:7B:E0:1D:99:09:B3:4A:DE:45:40:A4:F0:FE:EF:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E16158AAE6111F08EEC2AA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.134.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:f7:91:fb:42:cb:25:ea:2f:75:82:8e:20:22:30:09:ea:4a:
c3:89:05:80:28:49:f2:e1:69:37:c7:21:ee:16:71:7a:45:0e:
32:54:03:fa:72:e3:cc:be:2a:d6:dc:86:dd:5d:ab:28:dd:0f:
82:a8:83:37:86:ce:13:b1:94:77:a8:7c:cf:2e:17:d3:ac:5f:
d6:f3:9a:1c:e7:fd:56:77:66:ae:6b:03:a0:9d:c5:16:50:6b:
5f:1f:32:94:1a:6e:e8:3f:0f:5c:72:8d:3b:7b:80:80:4f:6a:
e1:03:d6:7f:58:46:78:10:f7:f3:24:6f:ed:11:b1:9f:2a:ef:
f4:4f:8f:69:b4:ad:f6:ce:d2:79:09:88:f9:e9:05:23:ca:2c:
ff:e6:1c:22:78:1c:65:02:45:04:73:0c:75:5d:b4:62:60:7b:
2f:31:d5:6c:a2:95:b4:d9:3a:f2:c7:81:ee:12:0b:14:18:89:
70:af:28:29:19:8c:9d:63:53:ba:7e:67:76:76:14:44:7f:68:
62:16:de:1c:f2:07:ea:37:a9:27:06:af:05:29:5f:e3:51:f3:
86:fa:bd:fe:56:b2:17:eb:b6:14:93:dd:b9:2e:d8:9d:6e:e9:
54:bf:1b:ac:67:c7:5e:83:db:59:32:d8:01:6e:12:54:ca:0b:
27:fa:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:18 2025 by rpki-client