Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0579DAAD9311F0A5A3F3F4DAE4EC9C.roa
File: FF0579DAAD9311F0A5A3F3F4DAE4EC9C.roa (raw, json)
Hash identifier: lzqXZT5lwrydXi6tfZKym7DlkqTsueMk4/kmwhx4mA8=
Subject key identifier: 03:2C:DC:0E:E7:90:5F:71:6F:D1:33:68:75:08:89:E5:48:23:17:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A451
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0579DAAD9311F0A5A3F3F4DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 09:06:00 +0000
ROA not before: Mon 20 Oct 2025 09:05:55 +0000
ROA not after: Wed 26 Nov 2025 09:05:55 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107601 (0x1a451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 20 09:05:55 2025 GMT
Not After : Nov 26 09:05:55 2025 GMT
Subject: CN=68f5fb78-5c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:09:60:a2:04:a9:c9:63:75:11:6b:d9:27:
df:6a:1f:13:20:e3:5d:70:a5:52:0b:c5:79:d7:9f:
21:c9:7d:5c:b3:60:63:73:2b:48:ab:6f:f3:f5:89:
27:d3:aa:85:5a:b5:26:52:ac:79:60:99:40:91:78:
01:69:fb:b4:4d:d0:b3:a1:84:6c:25:27:67:51:bd:
f1:ca:4c:bb:e8:09:98:58:b4:d6:2f:60:4b:62:56:
f6:2b:f5:82:04:58:99:08:80:53:10:63:42:96:0f:
bd:1e:ab:55:c1:9f:24:70:b1:f8:38:eb:bf:96:74:
82:ae:80:a9:a1:3e:ca:6f:eb:72:d2:b6:42:c6:50:
fc:e7:23:a0:fd:12:b3:7c:c0:5f:f2:41:0a:7c:59:
c7:90:a1:5d:8a:85:2a:28:e6:5c:35:b0:ad:fa:dd:
a0:42:06:d3:08:a0:ed:31:3f:38:32:45:14:25:fc:
c6:f8:45:fd:5a:e3:5c:e2:f4:90:d3:1d:97:25:5e:
3f:1f:68:3d:0d:95:0a:55:e7:5d:56:95:86:0f:72:
e5:06:c6:7c:7d:4a:96:2a:f6:b5:22:ab:c0:fd:1e:
d6:d0:3f:3d:bf:58:f6:5d:cf:41:d0:6e:12:f9:42:
a9:6f:2e:cd:48:77:67:41:ac:92:67:89:a9:52:7b:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:DC:0E:E7:90:5F:71:6F:D1:33:68:75:08:89:E5:48:23:17:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0579DAAD9311F0A5A3F3F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b0:03:93:71:e0:2a:5f:f8:2d:f0:fb:b8:2a:8e:1f:e1:75:
cc:34:e1:05:d8:46:c5:fd:73:05:f1:ac:27:36:82:d7:84:55:
2f:dd:8a:58:1e:45:ff:18:0c:93:2e:23:4d:62:ed:4e:7c:8d:
80:63:4b:d9:e9:93:d6:76:4b:e6:90:dd:3c:99:dd:d9:55:e9:
b7:b5:01:c3:b9:5e:82:5d:c8:67:c1:f2:c6:d7:10:6d:d2:ff:
70:c6:84:b4:34:e0:24:e1:ee:7c:77:9b:65:4a:e1:44:c0:07:
b6:c2:5c:67:4b:b1:d7:aa:83:60:07:44:e1:1f:a3:ff:fd:9d:
1e:4e:a9:7e:0a:e9:e4:51:08:e4:75:58:49:09:40:49:40:65:
e0:d0:9a:01:66:70:4c:4e:1d:63:7c:bb:c8:f8:5d:d3:cf:6e:
71:38:a5:09:d9:bc:75:51:66:5b:9d:9d:9f:79:3b:a1:4a:cd:
ec:ab:c5:06:85:4c:4f:62:07:b2:86:8a:09:4b:89:b6:03:ec:
b4:8d:a3:b5:30:f5:9c:3f:58:e4:a7:d4:e1:2a:3a:8c:9c:2b:
5f:2a:a6:88:22:f8:c3:70:9f:09:4d:fb:48:6a:27:fa:8b:de:
b4:6d:f9:71:a7:f2:23:52:e8:e4:71:70:fe:95:d6:af:70:67:
11:bc:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:10:40 2025 by rpki-client