Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E507D836B4D011F0AFDE0CD0DAE4EC9C.roa
File: E507D836B4D011F0AFDE0CD0DAE4EC9C.roa (raw, json)
Hash identifier: A7enlGZZJ5+fN/geUrYZQ+zlufNVqen+C8tvhMxmscs=
Subject key identifier: E7:02:7D:F8:3B:EA:9B:40:7B:FB:F3:90:2C:6A:D7:EB:A1:4D:14:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A648
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E507D836B4D011F0AFDE0CD0DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 14:09:34 +0000
ROA not before: Wed 29 Oct 2025 14:09:29 +0000
ROA not after: Wed 10 Dec 2025 14:09:29 +0000
asID: 142002
IP address blocks: 154.198.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108104 (0x1a648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 14:09:29 2025 GMT
Not After : Dec 10 14:09:29 2025 GMT
Subject: CN=6902201e-12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:98:4d:75:81:d1:52:49:76:b8:e4:e6:f2:
50:ce:28:6b:3e:cf:e6:b2:72:0d:8b:60:22:6c:36:
f9:96:60:9d:ba:16:dd:0e:eb:10:f3:a0:10:d7:c2:
2a:da:8f:cb:2f:d0:83:9f:d3:29:41:d4:6d:cb:51:
f6:b3:e3:50:fb:be:bf:c6:66:a5:b4:72:55:97:5f:
4f:bf:7c:51:df:87:c5:ab:2f:fe:d3:1d:8f:79:5d:
5d:3b:4b:72:d9:6a:fe:55:cd:ee:1b:ee:b2:8c:f0:
77:90:c8:68:67:f5:b7:7c:75:d4:32:51:e5:75:f7:
17:1d:65:6e:ee:7d:60:7b:f4:39:3a:4b:66:27:10:
aa:20:1b:4f:b8:2f:51:40:fe:86:f9:01:9f:79:bf:
fe:5c:14:a0:03:d7:16:f4:b2:1d:3b:df:d8:99:c6:
07:f5:bc:d5:e3:74:9f:c7:33:3e:59:a0:94:04:50:
c0:3b:4a:6d:97:36:47:67:22:c5:38:4e:02:2c:cf:
6e:42:77:8d:66:9f:54:c7:67:a3:20:46:24:9c:4a:
23:63:3a:56:bb:8c:ac:24:e2:14:df:18:23:51:98:
a1:e7:a7:7f:27:d5:96:80:53:10:3b:11:d5:a4:51:
b4:c0:11:46:80:28:94:03:5a:a8:55:ec:52:e6:c0:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:7D:F8:3B:EA:9B:40:7B:FB:F3:90:2C:6A:D7:EB:A1:4D:14:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E507D836B4D011F0AFDE0CD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.163.0/24
Signature Algorithm: sha256WithRSAEncryption
97:21:fb:cd:b7:c6:e2:53:10:02:e5:d8:b3:9b:f2:7d:94:33:
2a:f9:10:df:b7:fe:48:06:26:f3:e1:78:9a:bd:40:12:49:45:
31:c2:4a:d2:82:88:a2:3a:b1:a1:74:97:4d:f6:ae:bc:26:bc:
33:2f:c7:de:ae:ba:ac:aa:22:37:84:73:a6:44:f6:72:2b:3f:
5d:37:d9:8e:b2:b4:69:37:b9:de:0d:8e:c6:09:ab:68:5c:ea:
ac:eb:0f:06:57:65:ee:57:d9:d2:fe:30:28:51:30:87:21:86:
5e:d5:9f:aa:2b:ab:f5:cd:ef:01:62:9a:2b:e8:ab:cb:20:cf:
2b:f2:ca:3f:3c:28:9e:3c:cf:c8:a6:6a:28:54:9a:ed:da:76:
e5:af:05:be:e8:d1:15:d7:52:0f:44:b9:c7:9b:57:54:7f:86:
15:81:12:45:68:9c:fa:e1:57:0b:e5:8c:43:47:b9:b0:6f:c0:
38:91:83:de:53:a7:10:68:99:83:2b:45:73:97:9a:15:a7:44:
13:a1:83:a8:c3:26:0f:85:29:f0:54:b4:95:00:c1:50:4a:93:
fd:74:40:2d:80:48:ac:43:26:b0:20:f3:b2:3e:25:74:6a:b2:
d8:83:af:84:27:1b:d3:b8:a3:f6:d9:a9:7c:61:75:8b:fb:65:
db:9f:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:05 2025 by rpki-client