Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDFC9E68B3D911F08B532AC8DAE4EC9C.roa
File: BDFC9E68B3D911F08B532AC8DAE4EC9C.roa (raw, json)
Hash identifier: HPs71wqy+fDEEPsQ4aDqRGPsHPrOOoWZCV4bFqndD3Y=
Subject key identifier: 52:70:68:8D:1F:1C:A7:5B:DC:B4:D1:AD:DB:B8:D9:B1:2A:6D:55:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDFC9E68B3D911F08B532AC8DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 08:40:23 +0000
ROA not before: Tue 28 Oct 2025 08:40:18 +0000
ROA not after: Tue 02 Dec 2025 08:40:18 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107996 (0x1a5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 08:40:18 2025 GMT
Not After : Dec 2 08:40:18 2025 GMT
Subject: CN=69008177-dc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:b9:c2:b0:db:8f:72:51:5a:b9:2f:2c:05:
ae:82:1d:8b:77:f2:04:3d:49:61:d9:1a:24:c0:1c:
ad:60:b5:e3:d3:ef:ee:0d:db:6a:8c:8b:a8:3b:a5:
5f:b6:1e:8f:b5:ba:d6:c4:98:b6:25:ec:7f:ba:cf:
62:b6:77:1c:fb:51:90:26:d3:e5:55:79:ed:37:eb:
fd:d0:3b:ef:4b:08:62:c8:67:18:6b:1f:5c:f4:c5:
3c:6d:bb:d5:7d:5e:ff:6b:27:00:79:e7:4c:f8:56:
17:c3:96:bf:26:ed:17:cd:b2:64:88:3c:9b:93:85:
9d:d9:84:72:f5:19:5b:c3:e2:c4:29:56:e8:e0:05:
af:14:9a:aa:9e:50:57:20:5c:a9:87:6c:da:26:a2:
fe:04:b3:ba:36:b0:01:29:a1:76:e2:6d:81:a3:4c:
57:0a:43:20:13:9a:7a:25:5a:1c:ce:44:e9:e4:52:
87:93:e7:b3:50:72:c4:e3:d3:a2:0b:22:35:0a:46:
79:34:d2:72:58:65:ae:41:3f:2d:cb:32:f1:cc:30:
7e:86:44:b0:96:15:3c:b4:3f:8d:64:74:73:7d:c3:
85:c8:21:e6:24:93:48:33:72:ce:a5:2a:f3:57:91:
83:17:11:a7:bf:60:5a:52:1f:8d:4e:02:25:53:7e:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:68:8D:1F:1C:A7:5B:DC:B4:D1:AD:DB:B8:D9:B1:2A:6D:55:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDFC9E68B3D911F08B532AC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:29:d5:e1:ef:6a:60:80:89:09:58:c9:3f:9c:65:de:c8:49:
aa:bf:68:6b:ee:86:25:03:a7:ed:4b:09:c5:6c:87:25:1f:58:
2f:15:42:66:b3:8a:d9:84:1a:5e:41:ae:49:99:42:ae:ad:c6:
40:df:e9:bd:d6:71:cf:ac:22:87:01:d7:85:33:89:7a:19:8c:
5c:77:ac:f0:24:0d:b0:2d:b9:8b:7f:73:88:58:e8:88:09:a1:
a8:49:2c:6e:b6:64:7d:77:50:04:c2:bb:53:25:8e:4b:64:f9:
77:7c:d8:0c:9a:f4:0b:00:0f:0d:c2:37:1c:46:2a:7d:40:dc:
c0:00:13:07:01:ea:d1:dc:9c:cc:c1:eb:04:91:f4:09:60:d3:
0a:41:69:6c:ba:06:ff:09:aa:91:6b:01:46:f5:7f:a3:2f:b7:
27:23:0a:8b:45:c3:96:4f:44:e1:9d:d3:ae:2a:1f:0a:c9:41:
e4:a0:f6:ce:f8:f7:a8:f2:e2:b3:45:37:a6:d3:ed:f0:c1:88:
5c:58:0a:e0:60:ba:47:4f:ab:0e:df:e6:92:db:10:56:e6:1f:
b4:7a:62:5e:49:29:ba:66:6f:f5:32:bf:88:84:1c:d8:e0:f0:
4b:d4:22:54:a7:76:92:ac:06:e1:3d:50:2c:45:0c:b4:5c:bd:
f5:33:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:57 2025 by rpki-client