Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5724A1AB56111F0A6CEDCE4DAE4EC9C.roa
File: C5724A1AB56111F0A6CEDCE4DAE4EC9C.roa (raw, json)
Hash identifier: 89BP9g5AXKOy1PSKAnfwkUr0bk8s0DdVmwiNFXhMrzE=
Subject key identifier: 1F:01:B0:13:02:2A:B8:0E:E7:0A:E9:28:A0:69:48:2E:82:DE:EC:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5724A1AB56111F0A6CEDCE4DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 07:26:38 +0000
ROA not before: Thu 30 Oct 2025 07:26:33 +0000
ROA not after: Sat 21 Nov 2026 07:26:33 +0000
asID: 201390
IP address blocks: 154.91.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108195 (0x1a6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 07:26:33 2025 GMT
Not After : Nov 21 07:26:33 2026 GMT
Subject: CN=6903132e-0c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:f5:6d:a2:f0:67:69:01:fe:55:59:34:f6:
19:28:05:9a:28:5a:3d:a7:ae:f1:9d:57:97:c6:9c:
9d:dc:bd:e0:41:99:af:cf:80:c6:ce:19:3e:22:0e:
fc:2c:7b:95:46:b2:56:72:b0:3e:d8:fc:10:ed:9d:
19:f5:8d:4c:85:e1:e2:7e:18:a2:11:8b:fe:cb:52:
d6:a5:e0:70:a8:5d:a1:e6:f6:40:e3:fd:36:f6:0c:
9d:1e:1a:bd:40:31:74:a6:ef:dc:21:ea:b6:e8:e4:
3f:aa:d5:71:f5:9c:43:5a:e0:fe:38:b9:5c:a4:24:
4d:76:32:e6:0c:a7:35:a4:c4:65:2f:7b:e2:67:72:
02:74:66:0d:48:cd:f1:60:17:d7:cb:a2:12:22:fd:
29:04:41:df:8f:15:c2:6a:34:5c:d6:9a:e5:05:50:
80:f1:7a:60:3e:bc:17:fb:81:a5:36:58:c2:3d:de:
3e:ca:bf:26:a1:ac:ea:dd:52:12:33:90:52:b7:72:
0f:20:54:6d:00:7d:24:06:a6:29:f7:a3:56:2f:fb:
25:d9:ba:a0:e6:42:e5:b1:3b:fb:23:33:19:a0:e2:
ae:93:b6:a0:9b:fd:94:09:74:46:b5:2c:a3:6b:81:
da:dc:72:a9:68:7a:29:8d:40:c7:e4:34:0b:74:b8:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:B0:13:02:2A:B8:0E:E7:0A:E9:28:A0:69:48:2E:82:DE:EC:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5724A1AB56111F0A6CEDCE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.2.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1e:57:18:2e:4d:f0:81:aa:64:02:99:aa:f5:5a:96:24:1a:
2a:05:1e:c3:15:72:24:1f:9a:7e:40:8e:e4:4f:47:22:b9:ef:
f9:83:c6:4c:09:cd:7e:ac:2b:55:3e:3a:fa:d6:24:1f:11:60:
82:87:34:e0:88:a2:ca:e6:08:9f:de:20:b3:d3:41:e3:db:c1:
8f:ac:97:bd:25:79:ba:2c:78:e0:6e:3b:cd:5e:a3:74:47:b9:
df:f5:1d:0f:97:1f:07:7e:dc:68:64:03:a6:fe:ff:98:3f:fa:
d6:e0:0c:a1:04:9b:51:f6:7b:c3:ad:1c:72:ba:01:02:25:a5:
50:c3:ab:48:ac:41:d1:74:31:63:87:e1:5e:f9:ca:af:ac:d6:
b9:73:9b:f8:9e:0e:51:1d:99:b9:b7:41:01:5e:72:0c:f7:f3:
ef:6b:81:98:54:2d:b6:23:9b:34:0b:13:fe:e3:d9:02:f3:55:
49:d6:65:21:9b:aa:50:ac:f8:94:a9:d9:38:94:4a:bb:2c:37:
b5:3d:46:d2:df:3e:8e:1d:91:ae:6d:f8:23:69:fa:9b:8d:6a:
5e:3f:9e:db:b7:4b:b8:1e:c5:70:f0:8b:40:a1:cc:66:5b:61:
c1:9e:53:5d:12:dd:6e:5c:50:bd:a1:76:39:b8:ae:a7:f5:79:
5c:26:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:28 2025 by rpki-client