Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E6D30E0B4FA11F0853776D3DAE4EC9C.roa
File: 9E6D30E0B4FA11F0853776D3DAE4EC9C.roa (raw, json)
Hash identifier: d2yyLtrbqJrLSpiEIe2YVNpV6ufLl5jPnLS770/MJCc=
Subject key identifier: C7:D4:57:A5:32:7C:9A:EF:31:B4:07:4E:BC:0B:1E:3C:84:D7:D1:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A69A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E6D30E0B4FA11F0853776D3DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 19:08:15 +0000
ROA not before: Wed 29 Oct 2025 19:08:10 +0000
ROA not after: Sat 03 Jan 2026 19:08:10 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108186 (0x1a69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 19:08:10 2025 GMT
Not After : Jan 3 19:08:10 2026 GMT
Subject: CN=6902661e-021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:26:a5:35:63:ef:b3:e7:45:55:d6:aa:7c:
df:50:55:30:43:a7:ea:dd:39:87:48:85:8f:9a:1a:
80:db:32:de:fc:44:fd:67:35:3f:82:73:65:6a:95:
f2:e5:ca:20:93:bd:b5:73:a7:75:3c:47:b1:ee:70:
d3:ee:72:28:d3:dd:df:38:51:bf:ab:ae:93:ce:b8:
4a:cc:59:f0:33:b0:67:de:1e:7f:35:c1:c1:a0:3c:
78:a9:52:f6:ea:cc:d8:cd:98:84:75:bf:3f:93:f1:
03:0e:c0:03:fe:33:4b:54:8d:d5:cc:e9:f1:7f:69:
fe:87:a3:91:02:49:d6:fe:20:03:b1:8c:b9:8a:de:
0c:20:fd:02:7a:af:19:de:da:40:28:5e:e2:c5:f7:
02:ca:65:59:0a:af:94:a4:58:22:3f:be:30:be:2e:
bf:21:97:c3:8c:80:7b:dd:57:8a:66:bf:b4:c2:89:
f1:b9:d8:14:96:bc:ec:24:dd:c2:91:b4:e7:d3:ee:
b2:ef:eb:46:ba:38:51:98:20:6d:4f:ad:de:b1:ca:
10:87:f0:de:74:ef:90:e4:a6:23:39:ed:07:c0:64:
a2:d8:3a:11:02:96:cb:5f:45:b8:e8:e7:59:25:ef:
aa:65:0f:2f:50:c6:67:e2:3f:1f:26:bf:81:42:fe:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:57:A5:32:7C:9A:EF:31:B4:07:4E:BC:0B:1E:3C:84:D7:D1:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E6D30E0B4FA11F0853776D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/23
Signature Algorithm: sha256WithRSAEncryption
18:cc:29:0d:8b:8f:fb:a6:1c:6a:37:d7:f4:6c:29:c3:76:81:
1c:b4:33:09:7a:2f:a5:4e:48:cc:88:c0:2c:64:15:a9:d8:87:
0d:48:33:90:4d:09:dc:e5:f7:bc:d6:e7:2f:e9:0f:3d:c3:ef:
91:87:43:a6:a9:0e:07:23:75:c0:09:bc:f4:85:03:da:cf:6b:
68:df:73:38:63:54:c8:e8:23:4a:a8:e7:56:dc:04:37:dc:fb:
46:6e:2b:d1:15:a2:30:c5:f1:9d:18:9a:72:28:4b:1b:c2:96:
20:38:4d:0f:fb:f2:9d:7e:84:bf:13:97:a7:8e:7c:2d:f5:fc:
c6:73:7f:a5:bc:79:67:86:04:21:b1:5c:a3:5c:36:80:61:b8:
8f:2e:36:76:20:97:e5:20:9d:7a:d6:94:6b:76:57:28:0a:f4:
d9:19:22:08:b4:1f:a4:40:77:6b:8e:67:61:02:ad:b1:ca:4c:
f4:9f:bd:0c:8d:66:cf:72:63:a1:a1:22:90:4d:a4:83:86:90:
64:d7:84:19:d7:61:99:2a:4e:60:09:29:87:20:79:65:63:28:
c8:1c:bf:d3:fe:8c:97:b6:2a:fb:65:6b:c2:f0:31:20:a0:9f:
24:51:35:83:01:44:ce:85:a8:69:73:4f:e5:87:81:ce:0c:ec:
ef:9f:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:46:44 2025 by rpki-client