Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5C14AC6B96611F08D4318B0DAE4EC9C.roa
File: C5C14AC6B96611F08D4318B0DAE4EC9C.roa (raw, json)
Hash identifier: 7Jnx6eX2q1MWyRaSSpVUcFIzd2HsubQSw9WjGdlovNQ=
Subject key identifier: 34:69:21:1E:BE:81:4E:59:5D:25:3F:8B:B3:73:5A:91:CF:C6:33:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A777
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5C14AC6B96611F08D4318B0DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 10:12:31 +0000
ROA not before: Tue 04 Nov 2025 10:12:25 +0000
ROA not after: Sun 14 Dec 2025 10:12:25 +0000
asID: 21859
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108407 (0x1a777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 10:12:25 2025 GMT
Not After : Dec 14 10:12:25 2025 GMT
Subject: CN=6909d18f-a71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:20:96:b5:5a:5c:7e:d5:03:9f:15:86:eb:
2e:54:81:8f:78:fb:19:fb:33:82:92:21:07:13:82:
01:53:ce:4a:90:48:8f:aa:e0:89:4b:5e:27:7f:46:
09:d7:80:19:fa:26:86:2d:39:7e:b5:3b:be:2f:ac:
a5:f0:72:5e:c7:92:10:99:e3:8c:82:28:b4:7d:c4:
41:89:89:79:69:b6:17:4c:8a:7f:ed:c3:06:c4:11:
b9:16:f7:80:10:c3:9f:28:73:c9:33:ac:02:62:75:
26:63:0b:01:2c:a7:ad:db:b2:ab:a2:ab:6d:85:c5:
89:67:6a:36:9a:fe:49:f7:16:95:4f:d1:bf:a5:14:
ff:9b:03:ac:a0:de:b3:2c:4a:ab:0e:21:4e:f4:3b:
48:2e:47:c9:13:11:5d:d4:96:48:92:51:7f:22:66:
9a:0a:74:2c:60:9d:96:5c:a1:ba:b8:77:ee:f4:63:
f2:41:f7:17:51:1b:ca:ae:12:bc:08:5c:db:2c:ab:
fc:7f:25:9e:e8:64:35:bf:e6:06:15:d1:15:59:4a:
9a:4f:77:02:8b:33:c2:f3:3d:38:0e:d1:c6:0a:0d:
73:51:6d:5b:e2:3c:3e:cc:59:ea:a7:a9:4c:41:a3:
64:0b:02:ed:b1:7c:6e:ee:3f:b5:c1:6c:cf:e4:74:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:21:1E:BE:81:4E:59:5D:25:3F:8B:B3:73:5A:91:CF:C6:33:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5C14AC6B96611F08D4318B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:3b:41:0d:70:7b:8e:01:b3:42:7e:63:d2:8f:ea:95:5b:d4:
49:57:55:b3:41:fe:d0:be:6d:1a:84:d0:f6:d4:d4:40:1f:d7:
ff:b3:83:c0:cf:ce:00:74:d0:59:dd:d6:d8:ef:f6:41:7b:ee:
3b:69:b3:16:17:b9:dd:7d:c4:98:33:dc:58:87:77:21:65:b2:
e7:a8:92:3c:e8:53:86:cc:d0:54:69:a7:d8:05:62:80:ad:23:
bb:a1:2a:4e:c7:74:bf:fa:ca:40:21:5d:bf:3d:6f:a9:c0:39:
d3:96:6c:a3:48:14:1f:fd:1a:9f:45:d7:ce:bf:60:ea:4e:0b:
a1:19:5f:c1:1b:8e:2b:10:a4:39:fb:db:a3:a9:41:37:80:f9:
33:90:21:4a:63:31:1a:c7:ed:bc:64:e2:bc:ca:fc:4e:49:ad:
85:0b:7b:21:41:82:cd:fe:0a:1b:af:77:bb:f1:12:93:fe:34:
cf:e3:34:40:b3:13:71:76:9e:16:e0:23:1e:d1:d0:8c:a5:75:
1a:dc:fd:f9:d2:a2:22:65:29:e5:4c:ff:9a:04:1e:57:fa:c5:
5a:7f:a4:28:f2:46:7c:2f:cd:22:98:bc:1d:da:89:12:ea:fd:
71:2d:92:a9:5a:21:25:24:b3:dd:b4:b2:a9:b6:93:d6:f9:35:
d4:76:77:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:46 2025 by rpki-client