Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA2DCF10A42B11F0A254BAC2DAE4EC9C.roa
File: EA2DCF10A42B11F0A254BAC2DAE4EC9C.roa (raw, json)
Hash identifier: s20ynSXHQXO1gGUVhAXIC+SytmMhVBvfub4mSB20xdw=
Subject key identifier: 64:0E:27:C3:0E:3D:92:85:35:2D:A9:8A:D2:77:F8:20:36:35:D6:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA2DCF10A42B11F0A254BAC2DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 09:48:17 +0000
ROA not before: Wed 08 Oct 2025 09:48:09 +0000
ROA not after: Tue 11 Nov 2025 09:48:09 +0000
asID: 203020
IP address blocks: 154.85.28.0/22 maxlen: 24
154.94.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107203 (0x1a2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 09:48:09 2025 GMT
Not After : Nov 11 09:48:09 2025 GMT
Subject: CN=68e63361-44eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:e0:ae:48:47:b3:c8:fa:42:25:e6:79:02:
94:e8:4a:2c:28:b3:9c:cb:ce:1f:01:b2:b5:f9:48:
b4:8c:9a:bb:0a:1b:24:53:d1:ee:92:3e:9d:e0:b4:
72:cd:c4:a0:36:59:e8:6d:f4:f0:46:78:45:81:e9:
c4:c8:b2:46:10:4a:10:9d:98:e5:6f:ae:f2:a1:f8:
95:47:7e:5d:67:aa:ce:3d:f3:17:07:f0:cb:da:62:
cf:db:5d:45:f9:06:93:05:cc:95:49:a4:b2:b3:2a:
0f:ac:c8:4d:90:f3:1a:0d:96:cd:9a:c8:c8:89:c5:
f3:f9:b5:a6:52:98:1c:32:84:6a:2d:a3:c2:c6:a1:
a9:5b:46:44:16:63:31:59:70:f7:01:ba:1c:fc:e2:
a6:d3:af:a3:20:16:90:0d:77:7f:10:3a:86:01:e7:
d2:91:90:ea:78:d1:37:2b:69:43:2b:ad:ec:54:11:
e5:72:31:54:b6:c4:55:61:80:78:80:e2:d3:f3:4a:
c8:f3:54:44:c5:c7:e0:3f:5b:c5:16:59:75:60:1f:
bf:4f:c3:f5:7b:d9:27:8c:b8:16:47:84:1d:4a:54:
7e:74:ba:0e:e1:e2:f4:ae:7f:c7:5a:fc:fe:2d:35:
b1:95:56:de:1e:fa:f1:02:4f:43:9d:fa:f8:30:1d:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0E:27:C3:0E:3D:92:85:35:2D:A9:8A:D2:77:F8:20:36:35:D6:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA2DCF10A42B11F0A254BAC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.28.0/22
154.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
26:62:4a:08:b2:69:75:38:ad:f1:af:f0:96:d0:68:a0:82:12:
d9:ee:29:66:fe:8e:a8:75:19:53:f8:fd:97:e1:53:b1:f0:48:
f6:99:69:27:ec:ab:24:3c:57:32:55:16:ff:74:94:d4:52:5a:
04:c4:3f:04:1a:6a:9c:0c:e2:05:aa:45:e6:81:c3:5a:47:97:
83:54:1a:1c:b9:92:2a:9e:f7:39:1c:34:ef:54:6d:ea:18:03:
67:8b:1d:be:a8:aa:d7:e8:e8:c5:92:be:2e:ae:08:1a:e1:86:
93:73:48:a7:fc:3c:be:06:28:3f:f0:b4:54:7f:b1:bb:68:03:
65:d1:62:47:24:2e:c9:ef:4c:2d:2a:2d:e7:38:6f:69:e6:78:
ba:c3:7d:19:a5:75:58:dd:28:82:28:e0:50:24:41:66:81:86:
da:0e:6d:b3:4c:e9:ea:88:e4:6d:6c:93:91:cd:6f:f1:d0:46:
17:59:a5:22:7e:31:51:09:03:8d:36:21:2b:f4:b2:94:bc:af:
54:76:a8:71:a8:16:80:80:d2:42:be:9a:2e:6f:9d:74:91:48:
c9:af:a5:20:58:f8:25:ad:83:4b:34:98:f1:8f:2f:50:2e:5e:
25:07:0b:f7:b5:82:a0:c8:bc:78:6a:2f:eb:49:48:f5:d8:43:
ec:8f:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:19 2025 by rpki-client