Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9BC1EAB3F211F09490EFE3DAE4EC9C.roa
File: EC9BC1EAB3F211F09490EFE3DAE4EC9C.roa (raw, json)
Hash identifier: KGaq0Ex3VRc9vnsg2zl9liLo38F9Fkh6kIsyPh8CUoY=
Subject key identifier: CE:91:71:A1:E5:9C:44:B5:B5:1F:87:C2:78:0B:75:E5:EF:7C:22:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9BC1EAB3F211F09490EFE3DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:40:38 +0000
ROA not before: Tue 28 Oct 2025 11:40:34 +0000
ROA not after: Sun 07 Dec 2025 11:40:34 +0000
asID: 395201
IP address blocks: 154.222.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108008 (0x1a5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 11:40:34 2025 GMT
Not After : Dec 7 11:40:34 2025 GMT
Subject: CN=6900abb6-53b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:ac:57:37:99:c8:c3:5f:22:b3:2b:18:73:
69:e0:3d:f7:40:85:9f:bf:33:42:a0:e5:f2:77:16:
c5:66:b9:99:02:9f:07:ba:bd:28:ab:e4:bc:22:ca:
21:e1:1e:4d:b9:c5:98:b5:33:c0:17:30:46:65:e0:
ef:26:24:67:36:6b:50:a0:b7:6f:b9:7d:73:bd:78:
7f:92:bd:fc:dd:48:53:2f:6d:30:54:3c:4b:90:44:
1c:36:28:b1:da:a0:46:a9:7a:d6:a0:df:59:08:94:
50:09:c1:72:b7:a3:79:d6:6d:b5:f2:9b:0c:45:f4:
1a:a9:b8:21:e6:91:33:2f:b5:5b:64:4d:7d:02:3e:
63:b2:e9:f7:4c:b6:54:9e:a9:c5:94:d0:3c:f1:d0:
b0:99:ae:06:3f:76:32:35:c9:7d:7e:a4:c4:bb:e1:
2e:54:2e:bd:2c:1a:c5:55:8a:bd:df:86:d8:4b:38:
19:62:7b:07:f3:29:f5:f8:e9:df:18:9f:18:6e:63:
04:f5:52:f5:cc:53:ab:2c:ce:0d:85:18:8e:e6:3d:
3d:67:b2:44:4b:e2:16:52:3d:ed:cc:60:76:c8:c7:
fb:35:f9:a2:fe:99:b6:a7:f5:09:79:6b:40:34:e3:
4d:dc:b2:d0:53:f6:6e:44:d8:5a:fb:bf:36:0e:a3:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:91:71:A1:E5:9C:44:B5:B5:1F:87:C2:78:0B:75:E5:EF:7C:22:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9BC1EAB3F211F09490EFE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.152.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:a3:96:62:bb:81:de:ee:b5:3e:0f:8c:d0:24:39:65:59:30:
cf:72:b3:3b:4b:4d:04:e6:7a:8d:d8:36:e8:7e:e7:65:c7:de:
02:39:50:14:44:bf:72:a1:b3:54:1b:a1:21:af:cb:53:2a:52:
2c:bf:30:37:c5:64:19:7f:1f:62:f2:2a:2c:1f:15:98:1d:b6:
b3:31:4b:4a:75:8b:20:62:94:37:2d:c3:bc:b2:f1:a7:cb:bf:
b3:1c:09:e2:9d:39:dc:f9:30:e6:97:1a:d1:da:31:ca:d9:b4:
4d:46:3f:d9:55:75:94:d5:43:16:4f:5b:da:20:03:6a:cd:aa:
de:cc:e3:6e:99:f7:29:84:24:bd:25:d0:2e:59:30:d0:f3:0f:
5f:1d:5d:9a:68:65:e0:22:5f:a5:7d:27:b6:fc:fe:ba:93:38:
89:09:fc:3f:2d:42:36:3d:1d:f2:78:4c:b9:9a:16:5e:5a:99:
af:99:85:50:3d:ff:58:6f:3b:e0:66:0c:45:ad:4f:b9:18:3c:
4a:f4:c8:8f:0f:00:52:40:2a:1b:50:84:b5:37:92:3f:6a:03:
4b:9d:c9:1e:cb:c7:ce:8d:ad:9f:10:01:a4:bf:13:dd:f0:fe:
ee:3e:f8:d9:10:31:2e:fe:96:df:07:14:2d:17:b4:6a:1e:c3:
6a:f0:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:13:47 2025 by rpki-client