Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF81A92B30C11F0AABEB6A0DAE4EC9C.roa
File: CBF81A92B30C11F0AABEB6A0DAE4EC9C.roa (raw, json)
Hash identifier: NJTBkEaP/u4bjj1lgO3/3jtQD/Mzx2R0rxY3qYFuEjM=
Subject key identifier: D2:17:C3:98:2E:3C:1B:CA:E5:74:CA:90:0F:BD:6B:91:81:AE:3A:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF81A92B30C11F0AABEB6A0DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 08:13:19 +0000
ROA not before: Mon 27 Oct 2025 08:13:15 +0000
ROA not after: Sun 30 Nov 2025 08:13:15 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107774 (0x1a4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 08:13:15 2025 GMT
Not After : Nov 30 08:13:15 2025 GMT
Subject: CN=68ff299f-4003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:2f:8c:d1:d1:56:e1:c5:53:f8:8a:cf:97:
6e:0e:1c:03:f4:b6:4f:c8:95:a7:45:f7:38:22:ea:
f9:2c:1e:c0:e3:37:d2:8f:10:81:76:3a:20:4c:4d:
0f:ca:44:29:da:41:b6:b3:53:90:b3:4b:56:1a:53:
e6:d0:da:44:71:84:94:61:25:4a:84:95:f6:a7:9d:
20:f2:f3:e4:6f:f0:06:b3:36:92:0d:45:bd:2d:64:
a1:ac:ae:46:8c:3e:66:d4:39:20:c6:c5:7a:1a:1d:
19:73:f8:f9:60:cf:13:53:b2:78:48:bb:87:49:96:
43:33:a1:de:cd:a5:da:ff:31:f5:35:3b:82:70:e7:
5d:d0:db:76:2c:5f:93:f7:8e:25:cf:4f:b4:2e:cc:
04:f8:66:eb:bd:20:98:d2:97:89:3d:02:c2:dd:12:
1f:01:6b:b1:53:a2:63:ee:c5:99:5c:44:1a:79:10:
0d:6c:9d:d1:f9:59:63:97:3b:bc:91:de:9f:80:3a:
8e:a9:fc:d6:26:e7:f5:16:6f:1f:83:40:44:22:e6:
34:02:ce:c9:62:b9:cf:d0:0f:61:62:68:e4:33:96:
69:18:b2:83:8e:52:38:7c:9a:32:bc:08:9a:2c:02:
7a:02:1a:78:7a:68:48:2c:93:08:31:d4:2b:f4:55:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:17:C3:98:2E:3C:1B:CA:E5:74:CA:90:0F:BD:6B:91:81:AE:3A:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF81A92B30C11F0AABEB6A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
d4:7b:66:3f:fa:c1:40:38:17:2d:65:5e:87:85:d3:9b:9f:d3:
75:fe:2a:ff:fa:a0:32:b6:c3:a8:6d:99:c9:aa:7a:29:a2:eb:
77:ed:c3:45:60:4c:c3:04:28:6f:37:60:9b:8d:3a:12:2d:6a:
56:73:92:a8:b4:39:fa:9f:0b:8a:10:e6:bf:de:5a:3a:f3:47:
f7:65:c0:5a:b6:6b:f4:d3:a1:bd:60:88:3c:ff:90:ae:e2:5b:
1e:bd:82:48:a7:a9:c8:cb:9b:9a:5c:91:49:1c:57:79:42:67:
4d:f1:70:67:85:aa:3b:de:08:7b:ef:35:7b:26:d3:23:ec:5c:
bc:f7:45:55:ac:85:8e:e8:52:e1:75:c0:3e:35:32:7b:00:04:
0c:7c:79:7a:ca:5f:5c:c2:c9:bf:6d:9d:ce:71:f5:67:44:e7:
4b:2d:51:47:b3:4f:5b:8e:0b:bc:f1:fc:e5:44:29:94:f1:90:
f6:e6:5e:ab:3e:48:82:15:5e:93:5b:00:d0:ca:a6:93:10:50:
cd:1b:35:08:94:b8:cc:77:ee:dd:41:9c:7e:22:19:39:49:f5:
6d:5c:a3:bb:9d:7f:8e:d8:44:de:ab:f0:1b:cf:6d:ae:9a:c5:
6f:96:e3:e7:d7:4e:ed:cd:f1:7e:60:fd:70:79:dd:37:23:ee:
bb:4b:85:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:02 2025 by rpki-client