Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A9448E9D5C11F0B9BEAB90DAE4EC9C.roa
File: C9A9448E9D5C11F0B9BEAB90DAE4EC9C.roa (raw, json)
Hash identifier: bqucWJ4tTmyHmY2X9BnsKOpI9XGK6UUQbQal0RyFix0=
Subject key identifier: 48:72:73:23:86:3F:C4:E2:48:9C:FF:87:55:72:B8:9E:54:6A:6B:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A16B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A9448E9D5C11F0B9BEAB90DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 17:50:30 +0000
ROA not before: Mon 29 Sep 2025 17:50:25 +0000
ROA not after: Fri 31 Oct 2025 17:50:25 +0000
asID: 202656
IP address blocks: 154.200.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106859 (0x1a16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 17:50:25 2025 GMT
Not After : Oct 31 17:50:25 2025 GMT
Subject: CN=68dac6e6-519d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:4b:ab:a6:4a:70:85:cd:ea:b0:34:86:6f:
30:44:3b:e9:ce:cd:93:c5:53:c5:f8:72:26:fd:3a:
51:2c:bf:23:ba:ef:d3:5c:75:6e:14:f8:b2:98:74:
2d:c5:1b:dc:b1:97:c5:41:70:92:d0:57:a5:cb:18:
2a:d3:8c:e5:d2:d4:3a:a7:18:f2:3e:16:e6:6c:8b:
09:ef:e8:eb:97:7a:82:88:86:66:96:26:3e:93:88:
7f:1e:80:49:d8:f6:53:9e:04:9e:7c:a9:89:1a:d2:
96:93:48:d9:ae:97:c9:ca:ec:8c:d7:24:3f:ac:67:
81:49:cb:f6:4e:50:b5:31:0b:76:4f:7f:fb:d2:a0:
d0:0d:ef:4b:0f:d1:62:fe:0c:ca:d3:c5:58:4f:33:
c6:80:12:2d:98:89:2e:22:b4:55:ee:cf:05:3b:dd:
48:bf:db:53:63:29:ab:50:f6:ec:d0:e0:bd:34:8a:
43:4d:d2:6b:fe:cd:44:ee:88:5e:24:44:e1:69:ed:
81:9b:2c:c5:2e:7a:6b:38:1b:86:7a:73:90:81:5b:
3e:d4:4d:59:2b:c0:d6:9f:79:62:80:e3:f0:79:91:
b6:c2:15:74:f5:5f:81:eb:5c:49:40:73:52:33:c6:
bf:3a:ef:a9:5a:5e:a4:ec:30:71:78:00:56:c7:6e:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:73:23:86:3F:C4:E2:48:9C:FF:87:55:72:B8:9E:54:6A:6B:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A9448E9D5C11F0B9BEAB90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.227.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:49:00:9f:49:d6:e9:44:28:c3:58:4e:0b:15:2d:5f:08:b3:
ee:ed:67:41:ef:78:9d:3e:11:db:a3:63:ad:b1:db:7e:29:99:
27:d0:8b:83:bd:88:e8:7d:a5:c1:7c:d4:f8:ca:ae:d8:73:3a:
f4:6e:cf:04:fe:0b:44:c8:80:96:6a:e6:ec:37:a9:9f:50:33:
50:e7:35:c5:09:fd:1b:07:45:6e:9c:9f:2e:14:b8:25:90:61:
5f:55:40:af:66:0c:ee:cb:08:57:30:27:df:66:4a:eb:b1:f0:
d9:2a:60:a3:e2:7c:8e:74:3a:d0:11:fd:12:0f:c0:85:21:ef:
35:c6:5a:3c:fd:57:ee:29:1a:ce:c9:86:0a:ac:a2:54:37:95:
4b:4b:4f:c6:ba:4a:5e:51:a4:e1:6c:e5:28:a5:3d:f9:e5:60:
80:56:ed:8f:3e:fd:be:5e:03:5f:c0:e9:52:d5:b6:5c:c4:ea:
7c:e0:89:af:99:12:21:4a:43:d0:aa:82:2c:17:ee:ed:3c:d3:
77:0e:15:c6:a7:cb:59:c5:5f:a2:86:3d:1c:31:58:38:08:bd:
3a:66:1e:65:ac:ab:97:3a:26:7c:c8:8a:60:2c:5a:84:28:d5:
db:d2:bb:5c:10:54:56:5f:e9:97:c2:8f:84:5a:41:79:8e:cd:
41:ac:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:25 2025 by rpki-client