Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2BECB6AA6511F0840291D8DAE4EC9C.roa
File: BB2BECB6AA6511F0840291D8DAE4EC9C.roa (raw, json)
Hash identifier: jmrGQlggSSVB4y8CpOiiyYN0gcfH/OhAys0mlCPkq+Q=
Subject key identifier: 48:D1:96:0C:02:E7:1F:F1:2D:17:A1:0D:A9:47:99:7B:C2:4E:DE:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2BECB6AA6511F0840291D8DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 07:57:16 +0000
ROA not before: Thu 16 Oct 2025 07:57:10 +0000
ROA not after: Mon 20 Oct 2025 07:57:10 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Oct 2025 07:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107460 (0x1a3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 07:57:10 2025 GMT
Not After : Oct 20 07:57:10 2025 GMT
Subject: CN=68f0a55c-88ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:6d:9a:c1:5e:0f:93:c3:35:c7:7e:c5:e2:
2b:f2:33:d3:39:cb:b5:68:b6:93:43:af:fd:38:60:
79:e4:49:20:61:8c:d9:ea:97:a0:f1:b3:6b:8b:f4:
de:f8:04:20:06:e7:3a:f9:5b:a9:f0:d1:82:f2:71:
43:d8:ae:f4:cf:24:01:4c:ef:e0:15:7d:99:b4:32:
6f:46:52:74:d3:9f:8b:69:54:72:ae:90:47:e1:a0:
86:39:ae:23:f4:ee:5e:cc:d9:42:79:2d:65:cf:8e:
78:61:26:99:0b:b8:e5:13:da:56:7a:c6:23:5e:63:
e1:f2:51:88:c6:65:a5:ba:4d:e4:4e:56:99:e6:df:
5f:47:37:4e:85:63:85:3c:a1:95:de:c1:1b:5d:08:
cb:18:3d:9f:39:20:8e:4a:7f:e0:bd:e4:61:0b:47:
d8:73:17:43:19:f9:ac:cc:66:55:12:f7:5e:8d:e7:
c4:cb:63:60:27:21:c1:aa:a9:11:73:b9:12:d1:41:
88:18:7e:c9:4b:46:44:37:ef:69:d1:e8:a3:5e:9b:
39:9f:e4:69:67:45:0f:c2:e0:2e:88:13:f4:a3:ea:
bd:d7:a0:d2:28:c8:0e:13:10:df:ed:b5:ac:a4:2b:
b2:20:29:4b:da:ee:70:65:db:85:d4:f3:18:e9:b4:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:96:0C:02:E7:1F:F1:2D:17:A1:0D:A9:47:99:7B:C2:4E:DE:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB2BECB6AA6511F0840291D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:76:8b:86:33:76:d4:65:cf:77:d4:78:b7:b6:29:71:99:43:
83:7c:0f:3f:35:12:51:3c:38:f6:21:07:b6:17:db:d5:8c:6a:
fe:23:d6:89:54:25:6d:b5:8f:e3:d8:eb:e8:ba:4f:e9:9c:08:
4e:f8:cb:9e:a4:ab:a7:8f:a8:fa:98:82:68:14:6e:2d:59:ab:
3f:c6:21:8f:66:56:32:19:d3:d4:50:94:46:ed:d6:e7:0e:df:
27:2b:a2:3e:af:a1:29:44:6e:64:16:02:97:e5:58:48:f1:47:
5a:68:da:17:a3:7e:e0:54:2d:2e:e9:15:61:ab:16:a0:92:0c:
d3:62:96:1d:49:a9:3e:24:f6:11:49:c8:e4:4d:59:c8:66:42:
0a:a4:79:86:a0:c8:03:c9:2f:9b:5d:ff:be:d0:18:4f:45:cc:
dd:19:2c:3a:e8:29:d0:73:45:45:a5:06:33:d3:5a:22:a1:31:
0a:ca:6f:bf:88:28:a3:4d:97:0d:40:f8:b3:79:56:4f:63:59:
bd:d5:d1:65:64:72:e9:a9:f0:b5:cd:74:e9:db:15:7b:19:a0:
9b:bf:b7:f2:f9:dd:8c:58:e9:1b:63:c0:a9:d0:5a:f0:74:61:
b0:f4:53:f7:ed:14:d9:30:23:51:06:01:8b:09:38:bb:ac:87:
0a:6d:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:53 2025 by rpki-client