Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADC1FAAB88D11F091E458D8DAE4EC9C.roa
File: DADC1FAAB88D11F091E458D8DAE4EC9C.roa (raw, json)
Hash identifier: gSXSHa1xiApWbPe3FQrJJ7m+95vEH2RvkDffqWfaqMY=
Subject key identifier: A9:EE:8A:EE:82:05:32:F3:F4:BB:D3:D8:95:3A:62:A9:B9:9A:5E:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A704
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADC1FAAB88D11F091E458D8DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:19:45 +0000
ROA not before: Mon 03 Nov 2025 08:19:40 +0000
ROA not after: Sun 09 Nov 2025 08:19:40 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
154.205.176.0/22 maxlen: 24
154.205.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 10:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108292 (0x1a704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:19:40 2025 GMT
Not After : Nov 9 08:19:40 2025 GMT
Subject: CN=690865a1-8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:92:e8:d9:30:19:80:a6:0b:54:5b:a5:bd:
4a:04:98:9f:e1:56:e6:6a:fb:b4:19:33:ef:60:8a:
56:a8:72:98:f3:fb:86:b1:ea:a1:66:c1:5d:e4:71:
0d:f5:19:96:cb:66:5d:c6:61:a5:54:dd:4e:c7:95:
75:54:d8:d9:0b:e3:e9:21:92:f1:e3:c8:ab:b4:0e:
00:a7:bd:f9:6a:30:01:75:bc:d9:13:3c:6d:bd:33:
9d:f1:59:77:78:d3:b0:87:7a:fd:77:bc:ad:72:9c:
c4:9c:22:42:3b:64:77:83:9f:b8:5b:4e:67:ee:f7:
20:51:a6:9b:17:82:24:3d:51:d3:3d:7a:bf:fb:14:
93:23:74:e4:e5:80:46:3d:b8:7f:ef:53:8a:61:e2:
cf:9b:8e:27:31:86:84:d7:94:9e:e4:02:10:c1:a0:
75:86:58:65:58:90:e0:1f:da:d3:86:38:02:85:49:
01:bf:b2:2c:64:09:7a:72:60:fc:7a:bf:37:c5:f9:
a3:42:4a:5b:7b:fa:ce:ce:63:ab:a6:85:05:5b:2d:
11:4d:bb:fb:84:0f:d3:9a:6d:0c:55:02:44:b5:ba:
60:6e:9b:05:70:e1:d0:26:52:e9:07:58:d2:de:32:
64:51:92:97:6d:0c:40:63:8c:b4:b8:c6:42:e1:59:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:8A:EE:82:05:32:F3:F4:BB:D3:D8:95:3A:62:A9:B9:9A:5E:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADC1FAAB88D11F091E458D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
154.205.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:5f:1c:38:ab:3c:23:b1:75:d1:1d:aa:59:96:3d:40:1d:e7:
fe:8b:c0:5a:af:b0:55:4f:dc:07:f3:1a:9c:db:da:d2:26:6a:
b7:31:d2:74:74:0d:b9:05:c1:59:a1:f6:05:70:f1:52:23:f3:
c9:cc:ef:66:0f:fd:25:c6:51:60:49:4f:61:8d:40:9c:2d:aa:
13:fe:64:ac:c0:7a:12:ef:b9:af:fc:d0:54:bf:07:99:03:8b:
bd:1c:23:ce:30:05:ff:86:94:34:c3:4f:2f:d0:2f:86:77:9f:
03:0a:1e:ad:b9:47:b4:4a:d3:e3:98:d1:87:12:3b:c0:a6:24:
55:19:38:dd:8e:ed:7e:52:85:8b:74:55:63:38:30:55:16:19:
6a:f2:bf:d4:51:ff:ef:db:b7:9a:29:5a:f4:69:af:dc:86:92:
22:c5:16:e2:7d:71:e2:46:50:93:34:2e:02:a8:3d:e3:c5:95:
4c:51:f3:10:ae:cd:d8:5d:c7:21:66:1c:06:72:45:e8:ed:aa:
da:00:cd:ff:5d:54:70:59:9a:06:cb:3e:01:8d:a9:40:83:d1:
c6:d4:23:d2:05:76:30:de:3d:82:1a:a8:a5:d3:41:67:74:47:
91:a0:a5:25:9a:81:2c:17:48:bc:58:06:83:07:96:f6:e0:f2:
5e:87:37:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:01 2025 by rpki-client