Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA679CAB41311F0A10690B0DAE4EC9C.roa
File: BAA679CAB41311F0A10690B0DAE4EC9C.roa (raw, json)
Hash identifier: frD87rYBe/b04DeAro3LY44lx7Lamt004BsJSmZuhYI=
Subject key identifier: C7:30:F4:87:E1:4E:CE:13:80:94:0B:7E:59:48:C3:50:F6:21:0D:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A619
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA679CAB41311F0A10690B0DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 15:35:28 +0000
ROA not before: Tue 28 Oct 2025 15:35:20 +0000
ROA not after: Mon 15 Dec 2025 15:35:20 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108057 (0x1a619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 15:35:20 2025 GMT
Not After : Dec 15 15:35:20 2025 GMT
Subject: CN=6900e2c0-b21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:68:7b:cb:23:98:7c:3f:80:82:e2:4f:22:
19:96:8d:a6:09:85:cd:5c:7b:15:66:a3:0d:e7:3c:
9b:82:59:70:a8:dd:61:38:27:ff:b4:b3:35:aa:b1:
c9:fe:4c:cf:e3:b0:94:e2:0a:2a:88:48:97:60:0b:
fd:13:cd:33:7a:d3:5d:8e:56:8c:d0:8a:47:dc:20:
30:0f:cf:b7:88:6d:7b:46:dd:b5:47:fd:02:45:cf:
ad:ec:b8:e0:a6:9b:90:b7:69:98:31:e8:86:2c:08:
cb:0a:e4:7a:26:5f:8a:84:af:61:b1:73:22:b3:f7:
78:3b:97:ec:35:5c:33:1a:09:92:14:6f:06:e1:d1:
e7:b8:1c:29:e9:2b:38:02:0f:67:68:dc:e6:47:53:
04:61:8b:3b:b6:af:b5:65:20:85:06:cb:eb:38:11:
49:c4:3d:9e:10:c6:fc:e0:de:6c:05:c5:93:85:fa:
b6:ea:8d:66:ab:c1:89:82:6d:53:ad:22:46:bb:ba:
3c:58:03:70:24:b5:1c:70:c7:d5:c2:04:e9:b0:ef:
97:d5:ca:05:3c:37:2d:a7:88:89:1c:eb:b8:a4:ff:
88:b0:5a:db:0b:60:f5:78:d9:83:02:16:ce:11:ac:
7e:c3:ee:c1:ec:04:c9:fb:79:0a:ab:0d:25:83:c1:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:F4:87:E1:4E:CE:13:80:94:0B:7E:59:48:C3:50:F6:21:0D:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAA679CAB41311F0A10690B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:59:a5:39:20:4b:8b:d2:7c:04:87:66:78:9f:2a:7d:31:a5:
b7:14:96:48:4c:45:92:21:b7:94:7e:c8:fe:1e:41:30:fd:50:
71:43:fa:71:49:33:eb:54:64:2a:38:f6:be:a3:ab:5a:d7:c9:
9a:2c:ce:86:62:7c:58:b8:7e:27:42:64:55:07:c0:dc:16:f4:
48:5a:75:fd:8f:b7:ef:6d:6b:2a:7a:7e:f8:c7:97:f2:cd:32:
27:07:9b:14:9f:cd:1f:48:2b:e7:28:c6:5b:47:ac:47:06:a5:
ba:c8:7e:32:4a:18:b6:ba:e3:0e:61:5b:11:73:f2:e4:73:3c:
d9:0d:67:f7:26:bb:80:6f:90:29:70:ce:01:e0:e2:7b:2c:9a:
cc:0e:d0:e2:4b:52:7a:46:ce:b3:6b:79:54:6c:7f:4b:9d:46:
de:f7:ad:72:8c:ad:ca:a3:c2:bd:11:7a:29:4a:2b:a9:7b:4d:
33:fd:ec:e1:68:d2:7d:2f:d0:3b:24:f9:ff:2c:b6:a4:d9:a3:
dc:07:86:43:b3:4b:34:cf:ed:ad:fa:37:da:02:61:6b:99:cc:
b8:d7:ce:6d:e1:db:fc:ca:07:02:d9:b4:b7:77:25:e7:b2:56:
b9:87:00:71:0c:6c:4f:d2:c6:ff:96:12:4b:85:a5:b9:95:21:
8d:c0:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:08 2025 by rpki-client