Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED939074B86511F0981296CFDAE4EC9C.roa
File: ED939074B86511F0981296CFDAE4EC9C.roa (raw, json)
Hash identifier: oyS9XIQTX7ior9CzENVIqG/dokwzvTkR9fai8m3uL/c=
Subject key identifier: 3F:BA:E6:E0:5E:FC:F3:91:F1:76:C4:E3:AB:0E:01:E5:7C:E6:6F:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED939074B86511F0981296CFDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 03:33:57 +0000
ROA not before: Mon 03 Nov 2025 03:33:52 +0000
ROA not after: Mon 10 Nov 2025 03:33:52 +0000
asID: 17497
IP address blocks: 154.196.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108262 (0x1a6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 03:33:52 2025 GMT
Not After : Nov 10 03:33:52 2025 GMT
Subject: CN=690822a5-5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:6f:5a:14:68:58:61:9b:85:da:df:9c:3b:
ca:b8:45:8b:4d:2c:09:42:a6:1a:c2:2e:52:d2:c7:
47:91:39:1c:76:2d:63:c7:fb:78:f8:7a:7b:fa:1a:
ee:ca:43:44:8e:66:63:e1:4e:ec:10:a2:b8:32:e1:
c0:38:45:2c:b1:2a:92:f4:fc:9b:24:3a:63:fe:9c:
94:ee:b4:15:57:8f:b1:6f:55:ae:df:90:2e:09:7d:
87:d3:b9:b4:0d:d2:de:d9:05:c5:fb:bc:64:ed:e9:
00:d3:3a:73:a2:da:ba:b2:9c:74:98:1d:7d:60:37:
10:dd:b8:a7:e9:e0:7a:36:84:13:f7:07:95:ca:ca:
f8:bf:63:5d:81:39:49:49:c4:5e:ee:a9:1e:e4:b0:
ba:8b:32:4e:e2:81:be:66:3a:9a:6d:57:e9:39:78:
9c:94:fb:5a:2c:db:92:2b:7a:97:8d:3c:29:be:1e:
62:b0:8d:31:ad:ee:62:00:3c:53:22:79:32:1c:60:
b5:98:c1:c6:e9:cc:41:cf:de:5f:d3:82:ad:9f:42:
53:28:f6:09:46:9e:5c:bc:c4:5d:1b:21:90:bf:65:
91:34:b7:e9:06:b2:f1:f3:8a:b2:95:33:4a:45:76:
f7:7a:b5:29:89:c0:49:5d:b4:3d:78:2e:56:81:9d:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:E6:E0:5E:FC:F3:91:F1:76:C4:E3:AB:0E:01:E5:7C:E6:6F:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED939074B86511F0981296CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:25:65:f3:eb:24:64:4b:fa:65:25:78:0b:7c:d2:aa:b7:e6:
9c:7b:71:be:92:61:2b:00:7a:b1:11:2e:64:2a:ae:6f:01:23:
c7:78:4d:a6:57:75:74:25:1d:a5:bf:11:ee:19:3a:3f:7c:d7:
0f:4a:8e:2d:50:03:07:e0:5b:3f:0c:ff:c1:1d:3b:26:32:79:
1b:52:4c:38:cd:f7:74:99:a3:5d:c8:68:60:3c:c2:87:db:15:
70:0b:aa:5b:a4:06:ff:56:88:c8:bf:12:3b:cf:9d:6b:62:ec:
65:a2:c2:4c:01:e4:09:4c:99:37:82:3d:72:ee:13:2f:df:c7:
ef:a0:55:27:5e:04:26:e0:fd:62:a3:c4:9a:f5:da:f5:01:fd:
f8:a9:c8:b6:e0:80:dd:bf:74:05:2e:8d:07:95:69:55:01:98:
94:e4:be:cb:28:70:45:17:c2:c5:df:73:d9:a4:48:7d:51:a8:
5a:18:18:c2:aa:ab:f8:6f:6f:af:46:73:2e:b8:ff:57:4a:8e:
6c:05:20:bf:2b:c7:15:61:4f:91:2d:95:5a:04:7c:f0:2a:0d:
eb:2d:34:19:77:a6:62:5d:54:f3:58:92:01:24:a1:0e:72:0a:
ad:67:bf:90:7f:7f:3a:03:21:c3:24:34:99:3e:13:b1:5b:18:
1c:82:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:13:45 2025 by rpki-client