Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2D1D18B4FB11F09B38DDDBDAE4EC9C.roa
File: DC2D1D18B4FB11F09B38DDDBDAE4EC9C.roa (raw, json)
Hash identifier: NqXV45S5JGFT37s/gB38I8Ma+TyZpYfCJsFEvB7NoAs=
Subject key identifier: 98:D6:C9:FF:0F:BF:40:C8:DE:09:77:A5:D6:B8:48:C3:9A:AF:C2:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A69E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2D1D18B4FB11F09B38DDDBDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 19:17:09 +0000
ROA not before: Wed 29 Oct 2025 19:16:52 +0000
ROA not after: Sat 03 Jan 2026 19:16:52 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108190 (0x1a69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 19:16:52 2025 GMT
Not After : Jan 3 19:16:52 2026 GMT
Subject: CN=69026835-1a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:75:57:c5:ce:f4:8d:a9:e5:3c:fa:56:18:
bc:07:c1:57:64:18:31:c3:e5:b1:15:f9:65:9b:c3:
d3:6a:27:91:1d:ea:86:4e:c6:c6:3a:9d:15:12:fb:
d3:b3:24:f2:e3:00:77:ee:71:0a:9a:1e:dc:34:af:
4a:f5:f7:d7:02:95:80:e3:97:9d:83:ee:3d:9d:bd:
6f:20:dc:75:e4:e4:08:6a:fe:e7:92:fc:9f:e0:3a:
b5:1a:7b:4d:ac:9a:89:d6:9a:a2:bf:26:ed:1f:4f:
da:12:6b:5b:c0:1f:9e:2b:e1:17:aa:5f:99:7c:c0:
82:ed:0b:c7:09:ee:f7:1e:bd:92:e8:bd:97:20:2d:
bd:fa:2f:f2:8b:a1:17:ac:0f:eb:75:8e:dd:10:14:
06:87:f9:92:a4:6f:3b:b2:b6:ee:57:2f:a1:29:78:
cf:f3:3a:6a:d8:55:af:eb:a6:96:e5:d8:a8:9d:18:
e4:29:79:03:a3:eb:93:c8:30:b1:b8:5f:40:11:e3:
1e:f9:6f:20:f1:8f:f3:14:f7:66:ec:8c:d6:60:b6:
13:0a:dd:5a:b2:8f:b3:ea:06:2a:34:0f:62:b0:7b:
a1:b3:01:83:f6:53:b0:af:e4:0a:70:28:83:22:36:
da:07:60:75:7b:0f:9e:8c:ce:2f:bd:e2:a8:8f:f5:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:C9:FF:0F:BF:40:C8:DE:09:77:A5:D6:B8:48:C3:9A:AF:C2:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC2D1D18B4FB11F09B38DDDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:37:32:fc:67:e1:86:fa:48:12:20:19:28:60:eb:9d:3c:49:
6c:26:94:e7:2a:04:84:e5:0e:35:d1:73:ff:2b:a8:cf:3b:4e:
ce:4c:28:49:95:b6:17:c4:d4:87:0a:a6:22:ff:a3:8b:c2:80:
58:a4:6a:0f:27:d4:0b:11:f0:bc:cf:0f:dd:e3:fc:ed:80:3e:
84:1e:fb:ad:11:92:ef:d1:0b:1f:59:7c:29:d7:b3:85:52:76:
7b:18:92:70:9e:92:23:cd:5f:2d:8c:5b:77:e4:b1:af:81:3d:
0d:9b:4f:79:7c:8d:1b:7f:8e:25:31:71:53:db:cf:f4:37:be:
a7:0e:78:96:1a:8d:35:13:a4:1f:11:22:ba:c8:df:8a:a7:5b:
a1:92:0a:a4:4e:74:6b:00:15:d9:df:c5:4e:56:3d:eb:26:31:
94:e0:2a:b8:25:40:79:0f:23:50:91:97:05:5a:11:db:b8:2a:
5d:65:28:f0:35:bf:1d:49:d1:c2:7d:db:0c:c8:97:64:a3:8d:
66:da:1a:22:62:5a:e3:8b:23:9e:81:c8:21:0f:d3:78:af:c7:
ea:4a:e7:1e:d9:a7:ae:48:23:79:d5:f0:a1:7d:17:c3:12:c2:
64:4e:68:f1:1e:15:75:64:1d:7f:6c:90:6f:07:72:6b:c3:a1:
a6:1b:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:13:38 2025 by rpki-client