Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A17691C2B89311F0843FFB7FDAE4EC9C.roa
File: A17691C2B89311F0843FFB7FDAE4EC9C.roa (raw, json)
Hash identifier: L/EDFuvuuL0YflfBQwdBYzjB6VHNDXQ7dcfxc6/znLU=
Subject key identifier: 86:15:81:75:D8:7E:74:A6:28:52:CF:3B:81:08:8B:BE:3E:36:1F:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A714
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A17691C2B89311F0843FFB7FDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 09:01:06 +0000
ROA not before: Mon 03 Nov 2025 09:00:56 +0000
ROA not after: Sun 09 Nov 2025 09:00:56 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108308 (0x1a714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 09:00:56 2025 GMT
Not After : Nov 9 09:00:56 2025 GMT
Subject: CN=69086f52-9024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:a2:25:f5:0f:96:21:5d:21:e0:14:7c:01:
34:45:57:41:76:e0:dc:22:9d:d6:3e:f5:89:56:53:
34:95:8d:bf:ec:9b:2c:6e:67:0d:96:77:bd:7f:48:
7d:53:91:d6:8e:c7:86:47:bf:d3:fd:ab:70:3c:31:
10:9e:69:f5:a9:bb:b1:a0:77:7a:2b:f0:86:52:f7:
21:65:63:f2:55:7f:77:04:2a:99:ba:94:30:28:57:
05:90:6b:4e:13:2c:42:42:8a:1d:e3:1b:56:1b:0c:
63:4d:e8:96:59:6d:e4:a5:f8:1e:03:d6:35:81:15:
af:65:db:a7:81:7a:cb:d5:75:29:3b:0b:f3:77:e8:
e7:6b:3a:70:29:63:b8:f5:2a:20:2b:74:c0:44:71:
e4:57:31:32:e7:be:92:0c:40:2d:ba:fb:fa:91:4f:
06:1f:f0:db:27:74:06:4c:15:5a:03:fd:2c:58:b6:
48:3c:e9:bb:94:6b:8d:b9:ee:8e:db:57:b7:fc:a6:
28:b3:bb:36:b8:95:a3:7c:0f:ba:4f:4a:94:6b:4a:
28:97:ce:04:bc:15:16:1a:4c:6d:89:68:c5:cf:ff:
8b:62:f0:62:be:a6:3d:82:6a:30:55:05:7b:47:2d:
4f:74:6e:e8:b7:3d:36:b5:ff:39:73:0e:64:a9:44:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:81:75:D8:7E:74:A6:28:52:CF:3B:81:08:8B:BE:3E:36:1F:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A17691C2B89311F0843FFB7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:28:5d:cc:4f:19:f4:78:e8:18:e7:51:8e:73:0d:e5:23:70:
02:f3:dc:c1:52:2b:0e:18:ba:bf:f8:b9:4d:4b:b3:83:e2:4f:
17:e6:30:fb:29:a4:bb:b2:9f:e9:39:87:9c:1e:20:ad:61:00:
b8:9e:6d:13:14:59:22:17:f3:1f:45:3e:e7:84:b4:89:a0:60:
4d:30:67:45:ec:ce:78:7c:67:aa:f2:79:e9:61:cc:bb:15:82:
89:7d:f7:d1:b0:f2:23:bb:0c:6d:61:96:b9:a7:95:f9:55:fe:
6b:c8:d7:16:f6:fd:26:c3:bf:8c:1a:d2:15:0c:b6:3f:74:d6:
9f:cd:d0:18:ba:b0:7c:e9:4e:e9:4f:a3:3e:7e:b1:d2:91:5e:
f9:eb:be:77:04:ad:e1:da:be:0c:2f:2c:ba:b9:91:56:f1:50:
c8:58:34:13:05:59:be:a4:93:74:97:27:d4:63:94:76:8f:d5:
23:2e:a5:b9:fd:3b:be:d1:8d:fa:ed:ed:58:1f:2a:8a:7c:fc:
dc:73:eb:26:62:b3:36:50:a5:40:98:da:63:7c:3d:fe:0a:7f:
72:7f:62:5c:7e:ea:7c:81:34:36:f0:ac:d8:23:d5:db:8d:20:
33:0e:c7:ff:16:03:9a:ad:91:a6:18:6c:dd:2f:6b:89:c9:2e:
ad:33:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:53:53 2025 by rpki-client