Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54648F5289A311F0A76DAB98DAE4EC9C.roa
File: 54648F5289A311F0A76DAB98DAE4EC9C.roa (raw, json)
Hash identifier: HoTOt9NhIUnTgA228RqAajgnUFkjkd3yT2CvB3az52o=
Subject key identifier: C0:D2:68:ED:8F:D0:22:60:67:F0:87:2C:C4:29:C8:EF:69:D3:63:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019DC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54648F5289A311F0A76DAB98DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 15:25:04 +0000
ROA not before: Thu 04 Sep 2025 15:24:59 +0000
ROA not after: Sun 08 Mar 2026 15:24:59 +0000
asID: 21859
IP address blocks: 154.85.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105921 (0x19dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 15:24:59 2025 GMT
Not After : Mar 8 15:24:59 2026 GMT
Subject: CN=68b9af50-448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:1c:69:81:2b:50:83:4e:6f:d6:55:8e:db:
0c:fd:9a:6c:09:c5:49:25:ba:bb:68:18:5d:fc:ac:
77:47:57:43:76:7c:b9:c6:75:7f:fe:c3:48:e5:76:
12:41:e3:49:b6:27:1f:7f:6e:c2:ec:0b:c2:02:4d:
07:fc:c0:e6:0d:af:fc:f4:58:03:6b:7b:a4:83:8a:
de:ef:dc:f4:23:0f:7f:8d:00:26:bf:a5:0b:8c:32:
14:cf:26:49:29:4f:fa:62:87:ba:d5:4f:57:5c:54:
aa:66:a1:c6:80:d3:99:d2:f7:23:b8:03:18:df:6a:
47:a2:69:f2:04:89:15:fd:cd:96:85:3f:fb:0d:6c:
8c:0e:4c:85:2b:41:60:51:86:18:17:26:7c:e3:82:
9a:af:fa:13:7e:2d:ab:a2:54:8d:59:b6:4b:68:7c:
aa:ea:19:74:f0:04:9b:c0:44:ab:1b:e3:8c:8b:26:
09:59:3b:33:5a:08:f5:e3:84:31:58:4d:1a:a2:2a:
31:ea:88:de:6a:6a:9d:92:d6:7d:06:98:9e:6d:e4:
47:a0:98:0e:3f:31:7c:f5:92:1b:60:a2:db:34:02:
8b:21:9a:ce:ce:a6:aa:22:97:0e:63:66:76:26:d1:
9d:88:94:00:1a:ca:4f:dc:fe:db:9d:3a:04:c2:11:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D2:68:ED:8F:D0:22:60:67:F0:87:2C:C4:29:C8:EF:69:D3:63:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54648F5289A311F0A76DAB98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.0.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5d:04:86:1d:67:de:d6:3f:e8:5a:f6:c7:59:68:01:9d:6a:
9b:37:46:43:3c:64:6e:52:5a:dc:e7:89:63:cf:03:2c:9d:f8:
c7:92:38:30:99:2c:f3:3b:11:bf:05:e9:f7:60:1c:ea:3c:d5:
e0:9c:b3:ca:ad:51:44:ee:0c:6f:ba:4a:e2:19:43:b8:b7:04:
4a:eb:64:d1:90:86:34:85:db:c2:d4:b1:2a:1a:ad:c7:1e:4e:
5a:b5:a4:fe:b2:58:66:da:23:31:cc:b3:be:d0:cc:7a:e3:86:
4c:e9:c6:40:16:fa:77:01:55:21:84:d3:16:9b:c1:d0:db:63:
c7:3e:59:72:65:8c:ac:5c:2c:dc:28:98:72:ff:c8:10:1b:d8:
07:5e:31:d0:12:95:ce:c4:a0:ab:4a:38:b6:bc:31:ee:f5:f2:
04:a2:21:a9:f3:b3:e4:07:75:e4:fe:e2:5c:35:e5:3c:45:03:
8c:69:ff:cf:07:ef:97:5d:48:30:c7:21:3c:e8:22:c3:6e:24:
d2:46:af:43:a8:71:d7:fb:ce:0d:8a:8e:10:47:84:50:74:86:
33:81:ec:ff:da:94:34:4b:96:cd:b1:8a:74:ac:c7:90:4d:7f:
bb:2c:ea:9d:16:30:a9:d8:30:9b:df:7e:ff:0d:da:eb:48:c3:
50:3e:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:26 2025 by rpki-client