Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA5F1D2A35A11F0AB1586F4DAE4EC9C.roa
File: 1EA5F1D2A35A11F0AB1586F4DAE4EC9C.roa (raw, json)
Hash identifier: DDuhLSVlmm7snJTqYCrEaKJtg61D9nEGIxGVL9ATfww=
Subject key identifier: 1B:CA:46:63:95:CC:A3:AD:BF:2A:15:B4:8F:27:21:51:5F:77:E4:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A28E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA5F1D2A35A11F0AB1586F4DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 08:46:31 +0000
ROA not before: Tue 07 Oct 2025 08:46:26 +0000
ROA not after: Sun 16 Nov 2025 08:46:26 +0000
asID: 401696
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 10:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107150 (0x1a28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 08:46:26 2025 GMT
Not After : Nov 16 08:46:26 2025 GMT
Subject: CN=68e4d367-608b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:72:f6:ed:83:de:8c:59:7b:f8:c1:e1:c4:
3e:02:70:0a:df:60:c9:bb:83:87:cc:de:f7:c1:b5:
8d:a7:5b:08:5d:31:d8:d9:c8:8a:ec:cf:0c:8a:fb:
fd:21:41:06:6b:63:5d:c9:2b:f4:a8:cd:cd:6f:dc:
1e:de:6f:f1:f8:3c:ef:c6:b8:e1:2e:9f:a8:01:6f:
54:98:e9:f4:9f:df:03:99:cc:8c:1e:cd:82:70:21:
be:bc:bb:cb:30:6d:b0:6b:bf:82:59:9f:f0:79:6b:
ef:e3:c3:3d:96:e7:8a:f3:40:b7:11:61:88:60:fc:
41:1f:d7:7c:f7:c4:4e:4b:91:c2:94:03:bf:2a:f3:
3d:4b:2f:02:dd:c6:3c:91:59:2d:d7:73:c4:a4:5a:
96:3e:72:22:8d:2f:20:4c:1c:3d:16:e6:42:08:01:
57:f1:9b:2c:5b:e1:9a:c1:a9:5a:72:1b:fc:7b:79:
8d:7d:31:57:c2:ec:68:46:12:ed:6c:d8:ed:dd:dd:
47:a3:17:b7:61:65:1e:91:f4:b6:5b:79:23:21:6b:
96:65:43:47:58:b9:59:3d:a7:e6:e7:0e:ae:3d:3a:
f4:3e:5c:54:cd:16:94:c2:ab:48:4d:58:af:a1:70:
85:19:e7:20:5d:c4:62:85:8f:aa:f0:01:2e:13:96:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:46:63:95:CC:A3:AD:BF:2A:15:B4:8F:27:21:51:5F:77:E4:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA5F1D2A35A11F0AB1586F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ce:6c:b3:d1:4c:78:d8:54:93:a0:1a:69:67:bc:c9:cb:17:58:
96:e1:90:0d:9b:91:96:97:47:c3:c0:c8:a0:bc:16:5c:4c:bd:
d7:1c:83:09:12:6b:c6:30:26:f8:a2:e4:95:70:f1:b7:6a:93:
c1:b6:f0:89:7d:1b:8d:c5:f5:0b:cd:67:c5:0e:8e:e4:71:00:
46:e3:70:5b:8e:52:25:69:21:5c:be:4a:14:95:43:00:fb:c1:
3c:8c:ef:1d:df:c7:11:bb:10:12:65:7f:57:13:a7:2f:07:76:
33:52:fb:ec:26:e6:d0:f4:ed:a5:d9:6d:cb:80:12:d6:40:be:
55:8c:92:d3:0d:0d:ca:6b:8e:d2:b4:70:40:54:55:aa:f1:55:
f3:80:90:f5:6f:a7:56:bf:61:9d:5f:96:2d:10:3b:f7:83:50:
25:c7:f5:e7:a8:2c:d6:4b:a3:91:0a:3b:5d:67:9e:83:f8:34:
b1:fc:a1:27:b4:f1:03:2d:29:7c:c9:43:99:79:0f:b9:b1:bd:
ca:fd:63:5e:4b:9b:e7:49:4a:6c:50:5e:9b:b8:f1:2a:ee:95:
dd:8f:d5:34:7d:cc:d4:20:77:60:ba:09:12:0a:92:66:8e:25:
43:d8:2b:a7:8d:52:6d:f0:42:ad:23:08:44:a5:b8:14:66:7e:
27:5d:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:00 2025 by rpki-client