Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928AE3F4A9C811F0B1105788DAE4EC9C.roa
File: 928AE3F4A9C811F0B1105788DAE4EC9C.roa (raw, json)
Hash identifier: c5i46XNYw0MAor1bHxaBMYuDcEbXnY+JbQpi7E1OLhM=
Subject key identifier: 25:66:8E:A6:B9:15:01:BA:52:39:64:5F:44:B5:59:7F:FA:B3:8F:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928AE3F4A9C811F0B1105788DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 13:12:17 +0000
ROA not before: Wed 15 Oct 2025 13:12:08 +0000
ROA not after: Tue 25 Nov 2025 13:12:08 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107433 (0x1a3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 13:12:08 2025 GMT
Not After : Nov 25 13:12:08 2025 GMT
Subject: CN=68ef9db1-5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:8f:8c:c8:8b:b0:6f:19:b0:bb:61:60:33:
63:d0:d1:92:a1:62:e4:80:57:dc:3a:0c:6c:a3:98:
4d:5a:46:c7:a8:22:cb:2f:36:5e:a3:97:1f:bf:15:
38:de:e0:ee:24:33:8d:61:81:51:75:7b:b4:57:54:
3a:57:7e:84:43:ab:ef:6b:41:72:67:e4:22:c4:9b:
be:d0:ae:df:ad:68:dd:d6:31:d5:e7:c1:d7:7d:ce:
34:c2:ef:00:dc:50:44:d7:e1:90:ba:95:0b:ee:4c:
88:9a:cd:b2:27:dc:e3:3b:c1:52:ae:d0:18:4f:f4:
a9:27:88:68:82:9b:f0:89:e9:0e:10:9f:25:c2:5c:
c1:1a:66:76:b4:99:16:87:c1:e8:2c:54:07:ef:0a:
ba:c7:ea:c7:45:8b:c8:98:82:7a:13:d6:ed:d9:df:
21:d7:b7:84:3b:27:4b:cd:20:1a:77:7b:be:f0:d1:
cf:c5:fd:b6:ca:81:c4:77:c0:1e:a4:dd:61:8c:d0:
91:b7:fd:69:03:17:95:09:b1:3a:a7:df:92:75:00:
f5:70:66:6c:6b:b9:d6:bd:74:fc:93:81:0d:6a:c5:
d1:85:c6:0d:6b:3d:d6:8c:01:3d:e5:69:60:00:81:
1b:fc:2f:7d:e4:23:33:0a:2f:76:0b:76:1f:a1:74:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:8E:A6:B9:15:01:BA:52:39:64:5F:44:B5:59:7F:FA:B3:8F:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/928AE3F4A9C811F0B1105788DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
47:90:02:6e:1f:c6:a3:60:96:43:55:73:0e:c4:af:19:68:46:
f1:fb:8d:9c:71:aa:61:fa:83:2c:ed:3e:c8:8b:42:8a:b2:94:
cb:1f:6d:aa:a4:f3:3a:6a:f9:92:d7:5f:fd:82:61:7f:93:db:
87:86:8b:ae:38:47:a8:47:4c:a5:d9:3c:e9:c9:e0:38:e0:2c:
b9:74:6e:cd:16:0e:8a:a9:dc:0e:06:b4:0d:45:5b:61:ab:6e:
7e:36:35:b7:a0:2c:c4:4d:41:a7:aa:b6:0f:b0:ca:7f:5e:ae:
d8:58:04:b1:76:16:16:2a:ef:83:c8:20:19:9a:5b:41:2e:9d:
29:9e:06:18:50:96:e2:6c:a9:d7:93:01:91:5e:ae:13:fb:cd:
48:89:46:a0:89:f2:90:15:0f:14:7a:38:88:87:6d:d0:45:9c:
97:1a:f9:29:55:f0:8e:d4:2b:66:3c:72:1d:e6:e3:f7:ff:5f:
b1:5a:ae:56:8e:61:97:f8:41:42:7c:82:ab:41:08:9f:a6:3e:
d4:0b:ad:ff:7c:c2:65:de:a6:76:c3:6b:d2:1c:62:86:af:cb:
da:1e:dc:63:27:16:4b:0f:f2:2b:5b:b0:69:71:aa:4a:7d:04:
4c:b3:99:18:70:39:7a:b0:1a:77:cc:2a:f1:b7:a7:5f:1d:40:
14:c5:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:01 2025 by rpki-client