Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2890340B34D11F0A978B3CCDAE4EC9C.roa
File: C2890340B34D11F0A978B3CCDAE4EC9C.roa (raw, json)
Hash identifier: SiNnZaN5AI45NiYzMiiB4mx5TTPSWKmcRr6aC2Q+qA0=
Subject key identifier: B9:EC:E3:07:B6:7B:EB:B8:2D:78:36:9F:A3:FB:D3:7D:37:C6:E3:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A541
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2890340B34D11F0A978B3CCDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 15:58:21 +0000
ROA not before: Mon 27 Oct 2025 15:58:15 +0000
ROA not after: Mon 17 Nov 2025 15:58:15 +0000
asID: 54801
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107841 (0x1a541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 15:58:15 2025 GMT
Not After : Nov 17 15:58:15 2025 GMT
Subject: CN=68ff969d-5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:36:d3:62:0d:a4:68:aa:cb:4c:28:c6:a7:
03:e1:2a:9d:76:ad:41:23:de:ba:b0:3d:2c:39:10:
0d:f2:3b:67:35:64:c0:28:f0:63:37:04:c3:99:c3:
c3:a3:ca:11:a1:59:ee:66:7e:cd:76:4f:a6:b7:38:
e9:c9:fc:4f:bc:52:68:3e:d7:4e:9d:43:64:5f:fe:
76:0d:26:69:6a:4c:38:dd:00:2a:78:2e:c9:7f:8b:
06:a4:0b:55:b2:02:a7:b9:ea:07:a0:0d:3a:c1:87:
7e:d5:52:c1:5a:0b:73:58:66:72:8a:4d:41:e1:b4:
5f:18:ac:e7:9e:ad:32:3e:c6:5d:8b:69:a8:09:31:
75:d3:47:b8:e5:c3:9c:06:3a:f6:f8:34:c5:5e:43:
d1:e0:96:14:52:31:cb:81:29:16:fa:41:49:3d:d2:
03:c8:dc:71:5b:e7:8e:fc:4e:22:7d:4b:71:93:f5:
0c:ab:d8:05:33:c3:65:df:0f:1a:44:76:d8:85:db:
3c:13:65:4f:fb:e3:ed:c1:c2:4a:9e:d2:2d:f1:fd:
5f:70:f9:03:85:dc:f4:c3:4b:cc:a8:c3:38:fd:e2:
34:57:24:12:c9:e8:03:36:1e:79:f5:31:06:49:a4:
4b:95:74:0f:63:f1:48:e0:91:d8:64:2d:12:e4:0d:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:E3:07:B6:7B:EB:B8:2D:78:36:9F:A3:FB:D3:7D:37:C6:E3:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2890340B34D11F0A978B3CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.161.0/24
Signature Algorithm: sha256WithRSAEncryption
24:03:2a:75:2b:a8:42:e8:28:5a:31:60:55:bf:bc:be:0b:4e:
cd:8e:53:af:bf:4a:61:93:93:36:9b:bc:c4:63:85:6f:13:2e:
7a:74:cf:46:2a:6d:ae:5d:48:b6:99:52:da:5b:f5:dd:84:8b:
45:52:15:82:aa:af:d0:d9:e7:a5:3a:42:e1:e0:07:49:cd:e2:
b5:85:41:80:2f:b4:36:4d:4e:68:02:61:7c:b6:1c:71:c4:e8:
4e:c3:04:29:28:63:12:54:c6:0c:bf:71:7e:ab:d6:3d:d8:8b:
43:ba:86:1f:a7:29:65:86:55:3f:44:3f:1e:57:a6:ef:a4:40:
03:88:fb:70:a1:6f:4c:25:cb:e1:d5:8e:59:10:c2:82:84:d4:
13:71:f5:06:c6:53:b3:c9:41:ec:03:8d:00:fc:11:0b:3a:dc:
f2:56:35:77:f1:8b:69:f8:ad:90:0d:69:f6:7b:67:de:f2:b8:
34:72:ce:af:51:2c:82:81:7b:9e:b7:68:fb:3b:df:9c:f3:d0:
ac:5a:43:13:9a:40:ff:0b:32:d9:9c:f9:f5:bd:c3:50:64:bf:
92:af:2e:a0:96:f6:cf:bb:3d:b6:a6:79:ce:98:de:33:68:bf:
57:2c:3e:0b:96:da:57:ad:6d:e0:4b:00:98:0e:e9:f1:bb:51:
df:7f:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:52 2025 by rpki-client