Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F0EEFCB38211F094ED7195DAE4EC9C.roa
File: E6F0EEFCB38211F094ED7195DAE4EC9C.roa (raw, json)
Hash identifier: ZuwvckOZSytZmKueUIne53wu3G1KFZksDluInI7KZgI=
Subject key identifier: 8E:CB:F0:96:74:F6:62:55:B5:1C:3F:AF:51:59:4A:37:80:CA:54:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F0EEFCB38211F094ED7195DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:18:45 +0000
ROA not before: Mon 27 Oct 2025 22:18:38 +0000
ROA not after: Wed 03 Dec 2025 22:18:38 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107936 (0x1a5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 22:18:38 2025 GMT
Not After : Dec 3 22:18:38 2025 GMT
Subject: CN=68ffefc5-f0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:89:e2:87:72:b9:14:61:d9:91:53:0c:44:
dc:1c:3d:23:9c:2e:6d:67:89:87:86:7f:c8:1a:0b:
cd:b6:6f:fb:46:8e:5b:5a:04:49:88:2b:ae:61:f6:
22:c8:e0:4e:18:d2:72:65:a4:67:d4:c6:30:49:ee:
98:c1:65:cf:e9:c9:92:97:d4:f0:cf:91:9a:32:26:
a2:79:5d:21:ca:c9:39:f0:b7:32:1e:a7:44:19:77:
2b:52:1b:e8:b6:d2:3c:b0:01:5f:02:95:94:dd:1c:
d9:30:17:d7:fb:53:d6:e0:0f:84:58:d5:12:93:f9:
68:46:ba:a3:23:c2:c9:8a:cc:fc:51:d8:10:68:42:
66:47:bc:4b:b7:b9:c8:c8:41:18:84:69:6a:03:5b:
a5:85:3b:7a:60:84:85:89:dd:fa:43:1f:28:82:99:
d5:85:11:1d:93:4e:64:91:6e:7b:0e:58:e0:4e:58:
a5:33:c1:4c:65:26:e9:84:08:b0:62:fa:1c:6e:26:
5f:4b:d0:49:00:8c:0f:bf:df:69:b4:3c:8f:3b:d3:
8b:cd:79:98:fd:07:a4:29:95:3d:6b:fc:69:a7:42:
0a:51:89:ec:4d:ca:20:38:d0:0f:0b:35:47:ba:bb:
1a:e2:0c:3c:79:a2:80:8b:c7:93:70:72:39:6b:4d:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CB:F0:96:74:F6:62:55:B5:1C:3F:AF:51:59:4A:37:80:CA:54:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6F0EEFCB38211F094ED7195DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:89:47:82:6d:3d:e3:df:d3:14:c3:2b:ea:34:15:6b:7e:69:
f0:ca:0b:18:e1:dd:0e:49:d3:49:64:44:32:09:39:4c:65:1b:
de:6e:f9:8b:4d:9e:e5:4e:a0:d3:67:26:8f:19:0b:bd:ac:7c:
3b:54:34:e3:54:5c:b7:03:5b:d2:ca:d8:f3:45:f1:ca:4c:da:
40:54:1b:a7:be:c7:94:e8:59:10:dd:96:9e:3f:f6:b8:6c:f0:
ca:f7:c8:35:1c:fd:da:73:6f:29:a0:bb:6a:97:b4:e2:9c:f8:
ed:46:e1:3a:a5:8b:38:40:ca:e3:74:a2:65:7f:08:fa:01:59:
d0:ba:6d:96:ab:b6:35:c9:ab:58:54:f1:30:e6:cd:65:24:5c:
0f:1f:3e:c9:13:29:d9:1b:26:22:cd:4c:95:38:4a:9b:29:2a:
d8:c8:7a:bd:4a:c6:55:02:13:44:83:55:0c:c6:54:ae:32:c2:
40:57:f4:0a:92:59:54:b8:52:f0:32:ad:27:3e:04:f4:18:7a:
9b:04:9d:21:ef:fc:51:5b:00:71:d7:92:02:40:ca:ed:8b:76:
e4:a4:b0:c1:f5:af:dd:0c:3e:f1:fd:f3:f4:41:d9:19:1a:3f:
28:af:bc:80:eb:ef:ba:c7:01:bd:3a:24:a7:9d:55:0b:d0:e9:
17:c5:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:12:18 2025 by rpki-client