Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBCAEA2B93811F0ABE6EA88DAE4EC9C.roa
File: CCBCAEA2B93811F0ABE6EA88DAE4EC9C.roa (raw, json)
Hash identifier: exkQGIytPA2vxwEOQrW7JwU8fwsm9YiRNZYVrIKbljM=
Subject key identifier: 5C:1D:1E:CB:B4:32:B4:D8:31:4C:B8:F4:56:90:1E:F5:3D:95:AB:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A755
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBCAEA2B93811F0ABE6EA88DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 04:43:26 +0000
ROA not before: Tue 04 Nov 2025 04:43:21 +0000
ROA not after: Tue 09 Dec 2025 04:43:21 +0000
asID: 200373
IP address blocks: 154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108373 (0x1a755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 04:43:21 2025 GMT
Not After : Dec 9 04:43:21 2025 GMT
Subject: CN=6909846d-37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:e6:68:db:c2:52:0c:3f:5c:d3:c2:c2:29:
11:10:55:42:a1:2b:20:62:ed:9f:b2:5e:65:af:3c:
e9:c2:91:5b:36:f0:db:2e:02:4e:6e:48:5d:4f:ce:
53:a3:38:41:a9:a0:33:39:f1:80:45:be:58:de:45:
b3:96:60:6a:85:09:33:fa:35:67:1a:b0:f6:23:2e:
89:02:c6:48:f3:cc:2c:1e:c5:4f:5e:f3:d3:0f:27:
89:f7:32:a0:57:57:aa:97:d5:c9:00:9d:80:17:5a:
06:62:47:c3:e2:6a:ff:f5:6f:67:c5:c1:b2:94:9e:
21:67:64:9f:ad:a5:bb:d1:83:e3:af:e0:27:f6:5b:
97:82:5d:08:f0:b0:29:94:f8:c4:80:6e:91:05:db:
98:a8:e2:d6:83:cc:17:34:d2:da:20:de:a9:8b:70:
a8:bc:99:0c:77:68:a3:a8:0b:e8:8d:c0:3f:c2:e0:
9e:36:7c:9e:d3:06:ba:26:cd:45:d0:80:32:61:4d:
1a:dd:b8:fa:f5:7d:85:26:0d:5f:fc:66:7b:f3:d2:
51:a2:db:be:88:c8:24:ad:6d:1c:3b:92:58:f1:f3:
c3:79:42:4b:4e:3f:6d:01:10:bf:4c:88:3a:c7:71:
1a:4e:3b:89:65:b9:d6:70:80:90:56:1b:a8:22:2d:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:1E:CB:B4:32:B4:D8:31:4C:B8:F4:56:90:1E:F5:3D:95:AB:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBCAEA2B93811F0ABE6EA88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7c:c1:ab:29:68:1a:b2:ca:e8:1a:11:19:3c:73:d5:b4:d5:
8c:14:05:f7:04:14:e8:59:07:7f:1d:60:67:fc:29:a9:54:34:
34:9d:8a:0e:e0:28:24:e6:9e:b1:60:fb:0f:4e:62:90:43:5b:
3a:c7:7b:54:15:5b:25:9d:15:21:52:b6:0a:37:b2:c4:c2:15:
e5:49:2e:7b:18:2c:2f:66:1b:5f:11:d0:e9:e9:a3:55:e0:97:
29:85:7d:e2:b6:ab:9b:a6:e1:e8:e8:78:ba:ed:03:9d:d8:93:
40:b6:cc:27:43:e3:fe:0a:20:be:f3:c4:aa:32:40:68:3b:5c:
08:f2:23:64:60:fa:71:b2:de:b7:60:96:25:67:c5:5d:95:16:
7a:f3:c0:db:d3:c0:47:cc:b1:49:7d:c1:4e:bf:c6:e7:47:ac:
dd:98:a9:f8:46:39:ce:92:29:09:62:19:52:8f:94:60:95:3f:
0f:2e:f1:5d:0f:62:e5:88:dd:85:63:c9:7c:b6:2e:72:b2:9e:
b3:24:f2:2f:0b:5e:ad:4f:ce:07:a6:16:68:65:8b:9a:ff:2a:
72:98:9c:4c:d8:96:ca:08:b3:f0:bd:9a:26:81:7d:ab:28:1f:
08:65:41:bd:bb:a1:1a:c0:b9:aa:b4:dc:5b:1d:a7:25:cf:ac:
b7:70:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:08 2025 by rpki-client