Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94722B4C7F5111F0AFD934D9DAE4EC9C.roa
File: 94722B4C7F5111F0AFD934D9DAE4EC9C.roa (raw, json)
Hash identifier: sEB0kNyPFSh25CcdajwRI0So/ieudqSPOcOh75WNIEo=
Subject key identifier: 50:06:B9:2E:10:E5:63:A5:C6:5D:9E:F3:29:BC:DF:4D:2A:FD:5F:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0194A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94722B4C7F5111F0AFD934D9DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 12:14:41 +0000
ROA not before: Fri 22 Aug 2025 12:14:34 +0000
ROA not after: Tue 30 Sep 2025 12:14:34 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103584 (0x194a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 22 12:14:34 2025 GMT
Not After : Sep 30 12:14:34 2025 GMT
Subject: CN=68a85f31-f536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:b2:8c:ad:55:91:8c:3d:18:5a:b7:ad:a2:
6a:94:d7:96:9e:f3:2f:02:fb:c7:22:7f:bb:95:a1:
b8:f5:e6:2a:8d:dd:54:28:ed:41:bc:e9:06:36:c5:
fe:21:f4:3a:b6:5b:4b:89:3c:66:82:d5:85:d5:6d:
f3:f2:37:3b:b5:a6:89:96:2e:cd:1a:bc:75:35:32:
9f:2a:1d:1b:22:58:85:a6:99:c9:9b:c8:9c:a8:60:
d1:8e:fa:5f:b4:ac:be:e9:f9:f5:dd:08:9d:6a:b5:
c9:15:76:fb:b2:91:2f:9e:ed:65:65:d9:59:ce:bd:
7c:65:6b:58:76:24:36:32:1b:ee:38:30:2d:ee:9d:
d0:9e:21:b6:37:ca:3e:b1:74:34:c8:f1:c5:2b:55:
96:b9:46:b1:ce:6d:0d:ad:4e:15:b6:0e:5f:08:5d:
9c:27:bc:8c:4c:17:4f:d8:82:39:72:3e:e5:7f:75:
af:90:3a:11:75:7a:87:da:ed:19:51:e4:53:a8:77:
a0:0b:be:45:3b:9e:a0:60:6e:6c:ff:e3:45:73:a8:
3b:ed:fd:91:b6:c7:46:fb:c6:47:24:99:b1:bd:2e:
d9:9e:09:5a:33:ed:6e:af:5a:c1:3f:d4:70:17:bb:
1b:bf:a5:b9:9b:12:d5:d5:f3:48:79:68:fd:22:eb:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:B9:2E:10:E5:63:A5:C6:5D:9E:F3:29:BC:DF:4D:2A:FD:5F:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94722B4C7F5111F0AFD934D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f2:0f:94:a6:b7:18:f1:f7:86:f7:c6:c0:3b:94:ef:49:5e:
f4:b3:17:9d:01:51:de:19:4f:3c:e0:e6:93:26:2e:79:fc:8c:
2e:a3:66:47:ed:1d:e7:a7:e7:c0:93:92:75:6a:c8:7c:df:c7:
55:47:d3:66:83:11:65:cc:4a:92:29:04:e7:a0:f5:f0:cb:ab:
e0:82:9e:27:04:e3:ce:2a:72:5d:9a:a3:bb:18:d5:62:73:cc:
02:8d:55:5f:d6:d5:cd:eb:23:85:22:c9:5c:49:a1:1f:0d:8f:
9c:b8:93:cf:5f:d2:b9:74:80:8d:91:2b:7d:ed:3b:c8:cc:db:
4b:e5:c7:bb:ef:ae:a3:7e:c8:35:6a:c2:3a:af:28:27:70:ec:
30:2c:e3:33:72:ee:ce:41:45:21:b4:54:1c:19:8a:9d:0d:70:
08:6a:a3:a7:bd:67:50:0e:25:1f:9e:89:fd:da:2d:d9:3c:cb:
36:2d:75:be:7e:13:96:6d:09:73:b5:20:1a:ac:cc:e6:e9:c9:
e4:05:a9:3a:23:59:40:4e:5f:40:84:80:eb:51:fd:13:1c:f6:
b1:b3:ab:2c:b6:7d:a8:71:8b:10:bb:5a:f2:a7:1b:34:ca:3b:
a3:02:49:87:84:7c:43:d0:fa:9e:93:f4:0d:09:5d:c5:3b:58:
8a:dd:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:46 2025 by rpki-client