Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7F132E4B88711F0BBEA2DB5DAE4EC9C.roa
File: E7F132E4B88711F0BBEA2DB5DAE4EC9C.roa (raw, json)
Hash identifier: xWP3VMhbKK+iXYf/+DaDvYaqU6F1ch66juXXbaHN8to=
Subject key identifier: 38:85:76:67:F8:A0:84:0E:E0:17:6E:34:A0:9F:DE:83:A5:35:2A:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7F132E4B88711F0BBEA2DB5DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 07:37:10 +0000
ROA not before: Mon 03 Nov 2025 07:37:06 +0000
ROA not after: Mon 25 May 2026 07:37:06 +0000
asID: 23764
IP address blocks: 154.209.21.0/24 maxlen: 24
154.209.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108274 (0x1a6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 07:37:06 2025 GMT
Not After : May 25 07:37:06 2026 GMT
Subject: CN=69085ba6-2756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:1e:07:8e:99:85:e0:dd:5a:27:a1:58:aa:
8d:4e:c1:f7:c1:9a:8a:5e:67:a7:d2:b9:95:52:6f:
c7:1c:4b:72:89:ad:99:52:e3:74:4a:22:b9:a0:ac:
06:02:29:a1:be:2d:be:ee:d6:11:d8:d0:6c:d0:75:
51:7d:f7:9f:2e:0c:fe:d8:48:1b:ea:a6:3d:7b:99:
a0:f1:14:10:10:42:6d:9c:57:31:bc:19:d8:fe:28:
78:6c:9c:57:94:ce:50:31:c0:6b:cd:39:b9:c2:87:
71:98:ca:44:22:22:49:c4:03:4b:c5:f9:9c:ff:7c:
60:dd:eb:98:a6:93:0f:9c:ee:2c:f7:39:9e:0c:e2:
a8:b6:db:0c:6a:d9:b5:51:cf:36:ce:99:d3:fe:a8:
8e:93:c1:e7:e9:76:ce:ac:c5:76:a2:72:a6:3e:d3:
d8:77:57:f9:50:e4:52:fd:60:2a:36:1b:56:90:15:
98:b0:40:b8:e6:12:23:c4:ac:f9:d1:39:0b:05:4b:
a4:9f:bd:06:86:c0:fb:7e:26:54:25:9a:b4:33:fa:
20:6e:2e:2c:2d:d8:b4:76:5b:b3:08:91:0a:fc:3c:
93:41:e3:32:4a:dc:29:bb:13:26:8f:31:ce:03:c2:
73:5d:6f:b3:be:a5:93:b6:73:3b:c0:6e:c8:1a:43:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:76:67:F8:A0:84:0E:E0:17:6E:34:A0:9F:DE:83:A5:35:2A:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7F132E4B88711F0BBEA2DB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.21.0/24
154.209.23.0/24
Signature Algorithm: sha256WithRSAEncryption
07:60:99:b8:13:01:7a:d6:17:f8:dd:4a:28:0b:c4:2d:73:b8:
1d:bf:58:ba:a4:fa:b0:ad:5c:f8:f1:2c:30:9b:f3:b2:ad:bb:
85:ad:f6:75:aa:b2:4d:1a:ed:68:44:e2:0d:62:47:6a:f5:1b:
d6:ad:36:32:0d:62:90:7e:11:a6:f0:4c:f5:8f:e9:3a:7c:fc:
66:69:7b:9e:88:46:0f:6e:93:00:05:52:97:4d:48:85:62:0e:
23:6b:3c:1e:24:5f:38:e4:1b:d1:77:6d:8c:98:35:9e:8e:fb:
c0:f4:66:8d:bb:5b:08:3f:ad:1e:73:2b:32:34:d8:e4:b5:c7:
04:09:90:72:a2:7f:6c:eb:ea:e4:02:cb:a9:7b:a2:03:35:cf:
d3:e3:9b:47:99:2c:0f:49:28:07:c3:af:34:94:df:fd:8b:b2:
c8:ab:ff:37:ef:f2:5b:27:a8:79:27:3a:7e:64:6a:27:0b:d0:
82:32:00:1f:8b:8b:8b:4d:82:7e:07:58:11:a7:69:3d:d8:98:
6b:af:8b:0a:9f:88:27:60:57:db:7e:cb:91:23:18:45:e4:ef:
7a:2f:06:21:45:4a:b5:a4:e6:43:48:a8:e6:c8:8b:15:a1:0a:
11:2e:53:3c:c1:82:6a:42:d9:2b:20:33:a4:76:f0:31:d5:29:
9c:4e:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:39:09 2025 by rpki-client