Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBB46386AE4C11F0A3C8BD9FDAE4EC9C.roa
File: FBB46386AE4C11F0A3C8BD9FDAE4EC9C.roa (raw, json)
Hash identifier: SgCLEB7Av32M7SMlODoJfRNysLeHg0vSJtvbJQYUFEo=
Subject key identifier: 4E:8C:D3:45:95:5A:22:73:BC:96:E9:B5:7C:78:91:35:0E:69:F5:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A464
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBB46386AE4C11F0A3C8BD9FDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 07:10:11 +0000
ROA not before: Tue 21 Oct 2025 07:10:07 +0000
ROA not after: Sat 22 Nov 2025 07:10:07 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107620 (0x1a464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 07:10:07 2025 GMT
Not After : Nov 22 07:10:07 2025 GMT
Subject: CN=68f731d3-a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:64:34:29:b0:1c:ec:2a:3d:a0:e1:66:eb:
de:d5:bc:af:44:c8:b9:2c:4d:82:8b:5e:30:07:83:
d0:5f:a5:7d:b1:27:75:7a:43:20:fa:41:f2:1f:1d:
2d:99:6a:97:cd:05:74:db:2f:6c:d5:7f:95:8d:9c:
7c:05:f2:a7:c8:2c:b8:5f:c8:f4:fb:79:5b:f4:29:
35:ea:15:22:7f:56:2f:92:51:e1:cf:12:9b:f7:7a:
0b:84:2e:ec:37:d1:ef:12:b8:e7:b1:35:0c:e8:c9:
30:fc:76:d0:40:5b:42:4d:ac:bf:e0:b6:0f:ef:e8:
2a:a5:a2:29:02:b1:7b:da:32:e0:e1:90:05:9d:de:
7e:4d:dc:11:cb:ef:50:7f:26:17:0d:cb:75:9f:56:
bf:50:94:a1:34:f7:8e:46:ea:d5:51:ce:25:39:3d:
88:21:02:95:02:99:14:0f:d5:0c:88:81:71:ce:df:
89:29:f2:ed:e5:bf:01:4a:60:8b:97:ec:88:a8:31:
c3:64:41:4e:e8:72:1c:ae:a0:c3:1a:c9:6b:77:17:
5c:67:df:c7:56:cf:e5:d9:0d:16:62:d6:35:12:d6:
20:2c:b6:8f:73:6c:ad:d6:31:71:61:93:82:b0:54:
47:2b:bc:e4:3b:41:73:2b:2f:44:04:fd:5e:ea:c2:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:D3:45:95:5A:22:73:BC:96:E9:B5:7C:78:91:35:0E:69:F5:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBB46386AE4C11F0A3C8BD9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a8:a9:85:b7:1f:ea:56:a1:db:19:6e:b2:0c:5a:35:14:48:
62:d2:a1:a7:27:bd:fa:34:89:6f:dc:2f:39:d2:fa:9a:6e:52:
51:fd:eb:26:fd:7c:17:96:8b:63:3b:9c:9c:fa:76:0b:d0:85:
a5:49:91:d3:d9:ab:21:7d:24:dd:9a:df:fa:ba:fd:d5:c6:18:
86:aa:a2:88:17:4d:04:4c:aa:52:9a:5d:50:58:f5:83:0f:97:
c7:0c:42:aa:a9:94:ad:16:ef:ac:f2:a6:e7:f3:f5:92:cc:a0:
ab:f2:62:a8:8e:74:0d:ff:95:49:5b:64:9d:49:23:f1:87:74:
39:ca:9a:94:26:4b:d4:28:9f:57:32:7b:a0:79:fd:f6:55:e1:
2d:4e:fb:f9:97:ed:2a:dc:a5:78:93:12:52:97:c1:da:4a:52:
a3:f2:cc:eb:0c:78:72:66:2e:61:73:12:6a:8e:ad:77:07:89:
86:93:e1:b6:71:7d:45:c0:f0:ab:38:ec:be:d6:5c:bc:f0:ac:
df:93:be:f5:96:83:c1:b6:69:d9:f0:14:fd:66:ee:a0:bc:96:
e2:51:66:b5:9c:0e:0e:3b:60:5e:b0:bd:56:1f:2a:46:34:9a:
ca:85:a5:7f:78:df:7f:da:60:8f:7f:24:ee:e1:d3:96:da:13:
72:42:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:05 2025 by rpki-client