Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7EC7B5CAE5C11F08AD4A285DAE4EC9C.roa
File: A7EC7B5CAE5C11F08AD4A285DAE4EC9C.roa (raw, json)
Hash identifier: r/PNwm8PEHqYcHRzZ1Jig6WPkIoTILY1md6HMDqMEZw=
Subject key identifier: F7:17:3D:83:A6:BE:31:67:5C:34:E5:F9:D5:65:E9:69:DF:59:71:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A478
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7EC7B5CAE5C11F08AD4A285DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:02:23 +0000
ROA not before: Tue 21 Oct 2025 09:02:18 +0000
ROA not after: Thu 27 Nov 2025 09:02:18 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107640 (0x1a478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:02:18 2025 GMT
Not After : Nov 27 09:02:18 2025 GMT
Subject: CN=68f74c1f-9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:36:24:98:70:63:79:20:25:07:aa:0a:df:
56:5a:d6:73:92:98:39:11:03:1e:37:bc:1e:b2:84:
6b:85:94:78:d1:69:f5:cf:4c:60:bf:bc:78:49:c9:
95:b6:46:48:b0:8b:51:f2:be:15:7e:e1:aa:e7:78:
fd:6d:91:ca:90:38:f7:96:68:0a:54:84:25:88:9a:
b3:72:6e:f6:d1:c9:5b:69:2e:1a:0e:bf:12:9e:5d:
84:a3:44:2b:44:12:52:56:44:f2:79:41:0b:19:e2:
41:39:d8:fa:38:e1:a3:90:4e:9f:5f:7a:73:b9:d6:
6b:b5:75:e7:26:21:b0:72:12:9a:0c:19:a4:8c:43:
fe:bb:86:7b:a4:f4:fe:60:67:d5:40:1d:c8:b9:af:
41:60:bb:d3:0a:29:67:e4:5d:c8:cb:74:dd:a3:c5:
1b:a4:1e:12:44:1b:dd:50:c1:e0:58:81:6a:84:93:
77:03:2b:33:54:5e:54:61:aa:84:f0:ce:19:47:8c:
d5:d6:91:61:d0:97:d4:da:a6:78:3a:d0:24:08:e5:
6f:45:ee:3e:ed:0f:25:fb:57:70:c3:4a:01:64:49:
c0:49:c5:b6:71:e1:f1:10:5d:91:98:6c:d7:2c:46:
84:be:70:f3:1b:28:ef:a5:cf:2d:0b:d5:02:e1:0c:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:3D:83:A6:BE:31:67:5C:34:E5:F9:D5:65:E9:69:DF:59:71:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7EC7B5CAE5C11F08AD4A285DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
25:0a:f3:d6:71:06:f2:3e:ad:51:be:dc:a3:c2:c1:e6:35:25:
68:0e:ed:a5:33:a5:a5:9b:a5:73:5a:60:f8:37:1b:7d:53:d4:
7f:30:f2:c3:37:c1:d9:eb:4a:8d:cd:1b:60:5f:0b:8f:11:19:
4a:7c:80:58:b8:7a:e3:f7:23:78:7e:b5:d7:71:a7:b3:cb:fb:
1b:ee:c1:f9:e0:2e:0d:6f:6f:d6:af:5d:ac:6d:02:b0:23:76:
91:6a:3b:cb:11:61:1a:89:82:55:5e:75:4a:72:f8:bc:f0:62:
3a:99:b5:b0:b5:96:cb:6f:c8:fa:67:48:ca:fd:2c:31:e3:03:
79:25:c3:44:2f:77:3d:78:73:27:b5:99:67:62:20:10:01:fb:
f8:97:81:e0:99:b6:5a:a3:96:36:9e:39:82:73:13:b0:89:a2:
14:c9:e8:de:a8:44:73:ec:3b:14:7e:75:d3:31:97:05:75:1f:
fa:89:a5:6a:9a:87:6f:08:32:f7:84:d8:4b:59:5f:22:ae:6a:
20:3a:14:03:63:14:a6:32:98:9a:04:eb:26:04:a2:ab:af:94:
60:b4:74:55:55:50:a5:5c:4a:b2:af:4e:0b:91:94:37:cb:86:
8b:b5:ab:95:10:09:5b:0d:95:cb:d3:fa:c0:04:4b:d2:7a:19:
71:f5:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:46 2025 by rpki-client