Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F60D686A29211F097C0C1E4DAE4EC9C.roa
File: 2F60D686A29211F097C0C1E4DAE4EC9C.roa (raw, json)
Hash identifier: kuziqW/9BS+wXMPIcubawxnktAMM5Yh2LZ17PREfUB0=
Subject key identifier: E9:51:E5:10:19:97:6F:19:24:D5:20:E2:F9:1C:69:46:0D:EF:8D:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A269
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F60D686A29211F097C0C1E4DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:55:20 +0000
ROA not before: Mon 06 Oct 2025 08:55:14 +0000
ROA not after: Sun 11 Oct 2026 08:55:14 +0000
asID: 13335
IP address blocks: 154.200.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107113 (0x1a269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 08:55:14 2025 GMT
Not After : Oct 11 08:55:14 2026 GMT
Subject: CN=68e383f7-2d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:02:57:ce:42:6d:72:9d:0c:9a:4c:5e:7f:
b8:87:12:92:6b:f1:8b:5e:7f:0e:66:aa:b6:14:be:
f7:13:db:b3:5c:06:4a:b1:51:77:65:1b:da:a5:3c:
bf:6c:c6:f4:22:b6:09:7f:8b:52:b2:d8:92:e3:ea:
6f:1e:0d:bc:e1:90:92:02:b2:75:f2:f5:ad:eb:32:
d2:62:34:87:6f:bf:e2:85:b3:bc:b1:11:e4:4b:6a:
15:ed:5a:d4:b1:29:31:e9:69:af:12:4a:19:07:e9:
19:65:3f:6b:56:09:a3:a3:ef:d0:cb:e0:81:5c:f4:
a7:ca:26:c4:8e:61:1c:2a:f5:c8:7f:3a:72:66:0e:
53:b8:bb:83:65:00:a9:f2:23:a5:fa:73:33:cf:34:
53:bb:89:88:a4:fa:dd:de:66:a2:da:65:6e:0e:f8:
6f:bc:a9:94:36:a1:23:2f:04:96:e1:23:f2:55:11:
d9:4f:76:cd:e9:a6:f5:0e:64:02:3f:10:a7:ac:f6:
7e:0f:d3:c7:9d:ff:63:49:2f:e9:e3:72:bb:f9:5d:
53:a4:9b:73:aa:62:09:90:2d:bc:ad:48:67:94:e3:
41:18:05:ea:f6:2f:a7:72:15:06:e2:f7:d3:34:7d:
61:b8:27:91:b9:e8:c9:80:a5:3d:b7:89:b7:89:e7:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:E5:10:19:97:6F:19:24:D5:20:E2:F9:1C:69:46:0D:EF:8D:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F60D686A29211F097C0C1E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.89.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3f:17:04:3d:97:96:a0:5f:a8:7e:47:47:b5:54:2a:db:26:
01:38:58:03:10:35:4c:aa:fc:7a:ea:01:64:ee:c1:73:25:3c:
4a:d9:44:78:f4:fb:be:77:24:5e:09:7c:69:cf:a6:20:0e:70:
0e:26:ac:80:9a:8f:6c:aa:e5:b4:40:f6:34:92:a5:63:b8:22:
4e:8f:19:01:7e:25:ca:96:c4:a2:a3:3e:e5:8d:98:7a:0f:b1:
cc:69:05:d8:40:0e:fd:ec:1d:b7:df:a6:e3:79:3e:e7:19:d7:
1b:65:28:fa:a6:a2:b9:ec:92:b1:d4:32:d2:63:44:b0:21:b4:
0b:6e:8f:88:07:da:87:81:e7:55:6b:13:0a:00:8f:a1:80:f3:
f4:48:df:2f:cc:d0:8b:6c:92:71:1e:be:b6:a6:19:a6:79:6e:
5d:a9:3b:57:cf:f6:b2:33:ac:e3:06:e3:60:52:de:c6:45:7a:
c5:30:1a:03:f3:2d:21:12:3e:1f:32:de:77:e4:53:02:f4:38:
d0:9e:9f:59:97:77:00:7a:78:c2:9f:15:2c:5f:c5:fb:1d:05:
ff:73:b8:8f:61:76:0e:25:09:60:49:97:6d:33:1c:fc:c1:ed:
de:c5:42:11:e6:56:78:40:24:5d:ff:40:d8:05:6f:ca:99:75:
a9:79:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:36 2025 by rpki-client