Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F5FEAE8A2811F089460581DAE4EC9C.roa
File: 08F5FEAE8A2811F089460581DAE4EC9C.roa (raw, json)
Hash identifier: D20GcibZJrG+U8tvSkp3+dH20+XtiAvPPWKnkV+LQ0k=
Subject key identifier: 34:32:F3:1F:F8:A2:C0:68:EA:51:4F:8C:62:36:7B:C8:7A:BA:40:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019DE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F5FEAE8A2811F089460581DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 07:15:01 +0000
ROA not before: Fri 05 Sep 2025 07:14:56 +0000
ROA not after: Sat 02 May 2026 07:14:56 +0000
asID: 23764
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105961 (0x19de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 07:14:56 2025 GMT
Not After : May 2 07:14:56 2026 GMT
Subject: CN=68ba8df4-a56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:4c:0b:5f:ce:73:78:16:6c:c0:16:30:ff:
b8:b0:91:c7:b4:71:b2:d5:e1:a1:d4:06:aa:fa:6b:
03:54:fd:37:dd:0e:38:50:d3:a3:fa:da:6a:71:a7:
59:20:91:0a:8f:1e:67:67:a4:d1:25:51:4b:d7:43:
e5:64:a6:ed:bf:8e:dd:69:d9:1e:88:9f:27:a8:c7:
2c:b1:4d:b7:1d:e3:3e:30:18:0a:82:94:be:d7:9d:
b8:c8:8e:21:b4:f2:8f:47:60:7c:b8:c0:22:e3:63:
f5:c5:33:9a:76:2e:cb:6a:99:d0:60:ed:5f:1e:93:
9d:f8:90:e6:b9:8d:bb:3a:61:43:99:76:cf:63:58:
14:0b:97:5e:8a:b4:a3:3d:c5:90:7a:0f:83:ed:d4:
ea:1d:41:ac:cf:1d:8b:d2:2b:c7:3d:b2:c7:5a:d8:
07:3e:5b:f0:9a:49:59:67:1b:33:09:ce:10:13:22:
3b:9e:1b:f2:ec:5b:f1:65:82:6c:af:4d:8a:7b:a8:
84:b3:17:27:54:d1:3e:c2:62:ca:86:14:99:d2:9f:
14:8a:27:4f:ce:a3:4d:df:e2:63:ce:6f:d5:61:41:
ee:bb:a3:c9:96:ff:c1:c1:b7:7d:3e:6f:11:45:ab:
88:4a:45:50:5d:4f:54:dc:15:eb:0b:6d:8f:50:87:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:32:F3:1F:F8:A2:C0:68:EA:51:4F:8C:62:36:7B:C8:7A:BA:40:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F5FEAE8A2811F089460581DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ce:c7:76:77:48:2f:1a:d5:f4:e5:6b:93:32:a3:30:a4:e5:
d6:b0:07:1c:99:db:3a:6b:db:e7:0f:ca:11:41:e7:03:12:74:
22:71:9f:bd:7f:0c:d4:ee:22:53:b0:08:2d:8e:10:9a:91:f7:
62:20:69:1d:4f:ea:49:68:b2:3d:ba:63:ca:b7:e9:dd:c5:4e:
3f:a1:d3:2e:d0:b6:34:5d:1d:4f:f4:ab:bc:28:4e:59:38:f2:
4f:26:4c:15:3e:50:bd:e3:8c:0e:b9:8a:dd:24:47:ea:5d:b1:
5d:09:a5:3f:20:88:96:2c:34:4c:b6:88:db:3a:28:c7:a6:86:
af:e0:34:cf:e2:eb:d1:4c:4d:01:ab:f4:e3:0a:1f:08:43:4c:
00:ed:7c:a7:be:62:31:ee:b2:b3:b7:50:a1:5f:a5:d6:bb:f9:
33:d6:f5:6b:40:86:28:05:bb:71:ea:25:5e:44:2f:60:83:97:
ac:6e:54:43:38:7c:92:10:20:0b:a1:b7:47:b6:bb:2d:7d:31:
a9:57:13:16:eb:a6:b1:3a:85:0c:e1:61:fb:6c:26:e6:af:78:
c3:20:c9:84:04:3c:90:93:b4:c7:b3:2b:53:31:a0:68:64:ab:
bd:85:f8:1f:cc:80:e0:d3:8c:83:ad:1d:58:4c:bf:f6:07:db:
3a:40:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:41 2025 by rpki-client