Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9206AF12B8A511F08BAD1BEBDAE4EC9C.roa
File: 9206AF12B8A511F08BAD1BEBDAE4EC9C.roa (raw, json)
Hash identifier: J9qi176r++mOhlIf2mggcOkH1/mOOcHHM1ceP6B6rgk=
Subject key identifier: E6:2D:19:F5:DF:72:61:EF:B9:1A:07:3D:EE:C3:1A:35:90:40:CE:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A72A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9206AF12B8A511F08BAD1BEBDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 11:09:31 +0000
ROA not before: Mon 03 Nov 2025 11:09:24 +0000
ROA not after: Wed 10 Dec 2025 11:09:24 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108330 (0x1a72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 11:09:24 2025 GMT
Not After : Dec 10 11:09:24 2025 GMT
Subject: CN=69088d6b-2923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:dc:d5:cd:72:6b:9d:7d:f6:53:4f:69:1a:
dc:25:56:d4:54:97:96:7c:bc:ee:4e:53:9e:1b:c9:
38:8b:7e:cc:90:eb:eb:c9:f5:31:fe:af:ba:c3:0d:
17:a6:86:75:1c:47:d8:55:6a:1e:1d:f8:d4:e1:5d:
34:89:62:a1:81:5f:2b:bf:dc:0b:cc:1e:7a:27:7e:
fd:85:97:fc:b4:8f:c1:e0:a8:cf:6f:28:15:75:1a:
79:c8:7b:a0:c9:8f:fe:67:ff:a7:37:37:4d:a1:c2:
cd:51:e8:a1:f3:6a:79:35:b2:b8:4a:57:c8:d8:a1:
b1:28:b1:0d:5a:08:7f:28:f3:3e:8e:b2:95:36:c3:
37:07:99:f1:e9:13:d8:6f:97:0b:cc:e2:fa:c3:95:
cb:3f:b8:33:d8:7b:27:b3:b5:a0:c0:5c:32:f6:9b:
bf:b1:ba:00:4c:8f:ad:68:c0:6d:b1:5a:df:53:e5:
20:8e:f0:82:be:c5:12:84:1d:bf:d0:50:54:34:a3:
4d:05:2d:bc:cc:e6:0e:5c:5a:ab:f8:dc:69:59:fc:
26:f6:2a:9f:ca:b3:60:e2:90:3f:35:a3:01:6d:20:
7f:7e:2a:33:ba:aa:e3:dc:64:eb:ec:fb:cf:55:0f:
16:e5:b0:d6:86:ed:42:90:6c:d9:5d:e6:5c:8b:17:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:19:F5:DF:72:61:EF:B9:1A:07:3D:EE:C3:1A:35:90:40:CE:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9206AF12B8A511F08BAD1BEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
40:e7:18:95:cc:b3:e6:c8:07:da:6f:9d:4a:04:1a:71:11:e6:
62:3b:bc:98:6c:12:c4:33:88:3a:c8:03:d4:2a:52:cb:f3:a4:
18:18:7c:04:ef:55:23:dd:9c:f7:41:e0:76:52:bf:64:c1:6b:
eb:9a:b3:3d:f7:00:f5:12:21:bd:54:17:27:2c:f0:3e:14:55:
c6:9f:a9:4f:fe:b4:1f:3e:0a:e2:fa:93:94:56:4d:50:e7:a9:
7b:57:33:de:01:ad:73:74:44:16:36:06:a9:f9:34:11:0e:27:
88:64:cc:8b:e6:5a:13:67:19:1e:73:53:86:b4:b1:36:65:93:
96:6f:10:83:04:ff:42:91:ed:89:65:9e:72:64:65:b2:75:0e:
71:f0:37:92:e8:4e:fe:de:36:6e:8a:0a:48:af:ac:25:a5:6c:
7b:a2:6c:70:e3:a0:13:23:e6:72:44:96:46:24:af:1e:91:f5:
25:d8:13:f5:6d:72:1e:ef:86:df:b6:9a:cd:cc:f7:88:93:43:
65:d8:5f:ef:61:03:97:3c:9d:65:9d:64:72:8f:14:af:25:b3:
76:a2:25:bd:38:d7:1e:e2:e7:45:f5:23:71:5b:3d:1b:f3:17:
69:19:20:4e:c7:3a:60:52:53:b6:a4:90:c7:1b:69:a0:e3:c0:
d2:d5:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:39 2025 by rpki-client