Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D99A7748B95711F0B941AFD3DAE4EC9C.roa
File: D99A7748B95711F0B941AFD3DAE4EC9C.roa (raw, json)
Hash identifier: L8VpBnOlrIoXB8Qlu1BXw9NBX+u2l/BJbxVVoUxPC60=
Subject key identifier: 37:2C:AD:90:05:2A:A3:79:E9:78:A4:D4:7C:6A:F1:FD:B9:91:01:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A76B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D99A7748B95711F0B941AFD3DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 08:25:42 +0000
ROA not before: Tue 04 Nov 2025 08:25:37 +0000
ROA not after: Sat 06 Dec 2025 08:25:37 +0000
asID: 45194
IP address blocks: 154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.211.0/24 maxlen: 24
154.84.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108395 (0x1a76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 08:25:37 2025 GMT
Not After : Dec 6 08:25:37 2025 GMT
Subject: CN=6909b885-3267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:1e:48:99:aa:60:01:6f:84:75:09:24:f3:
2c:e8:f9:8f:3e:58:75:63:5d:9c:b0:eb:38:04:54:
27:e7:17:7b:6c:6b:40:e9:79:be:f2:9a:6e:75:df:
44:07:e3:7f:82:52:bf:b3:f6:1d:5b:a0:12:de:5b:
cc:9e:e2:64:f1:5d:0e:a3:86:e7:66:f2:30:dd:d9:
43:a5:b4:be:d3:b4:fb:fd:66:c5:f5:99:cc:7c:05:
cf:34:b4:df:8c:88:27:9d:4c:67:ac:9d:64:cc:27:
5c:0d:9b:88:7c:a6:a2:01:7e:9e:a9:ee:ea:4d:4d:
3d:12:12:69:15:fa:43:ee:54:85:60:85:3b:2c:3a:
45:0a:82:78:ca:c1:a1:1b:d4:0b:5d:a3:59:3a:03:
c6:be:b1:17:28:f9:3c:c8:02:ea:9d:57:c2:da:89:
3e:cf:b4:1d:6a:0a:4f:b6:ad:c3:25:d3:16:c0:30:
09:03:6d:1c:0e:44:e7:cd:dc:ca:ce:39:54:4b:f0:
7a:3d:d8:9c:ff:d3:ad:4d:54:30:87:65:f1:b9:cf:
67:33:47:01:61:ae:79:dc:1d:03:2d:c4:ba:80:40:
0e:58:5f:31:fd:5b:9c:e2:b5:31:fe:b8:be:2a:89:
5c:88:08:7b:09:dc:91:8e:3c:d7:48:1c:77:91:fc:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:AD:90:05:2A:A3:79:E9:78:A4:D4:7C:6A:F1:FD:B9:91:01:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D99A7748B95711F0B941AFD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.209.0-154.84.212.255
Signature Algorithm: sha256WithRSAEncryption
13:e2:f6:b8:4e:d4:1f:e5:54:e8:4a:15:7f:15:7b:22:2c:dd:
15:7a:75:46:68:24:b8:00:ac:9c:d2:76:15:1a:af:3b:2e:3d:
4b:fd:21:1c:41:71:bc:30:0e:72:47:a2:5c:a8:7d:3b:fd:ad:
74:98:6c:d0:df:f0:76:c1:92:3e:8a:2c:33:66:32:08:19:d5:
90:37:3c:18:36:f4:20:3b:03:6b:a8:df:60:ab:22:51:a5:91:
fb:9d:43:02:42:1a:74:84:ad:c6:ad:58:36:71:aa:12:27:d0:
c5:64:9b:f9:db:d7:8b:89:c8:20:3a:af:2d:ed:3a:c5:46:5f:
66:24:c5:ee:fd:38:82:ba:d2:32:3e:4e:54:ed:21:06:17:6c:
67:27:ea:eb:da:79:79:72:f3:dd:1a:8b:bb:07:17:77:eb:47:
a4:2e:67:71:20:43:c6:2c:90:af:95:f1:c6:3a:de:7a:ee:bc:
32:91:7c:fc:85:83:38:7e:07:fa:0c:f8:c4:d0:15:6a:79:2b:
5a:e2:be:6c:f4:ac:40:c6:51:ce:b7:78:83:7f:1a:46:d1:11:
b4:23:fa:91:b8:ea:fa:f3:b3:9a:04:d7:20:89:2e:fb:fb:3c:
22:2e:72:ea:3d:d2:99:c4:90:3d:7c:f0:be:7e:38:66:3d:e6:
0f:ef:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:28 2025 by rpki-client