Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD5AF68A44911F08719B382DAE4EC9C.roa
File: FFD5AF68A44911F08719B382DAE4EC9C.roa (raw, json)
Hash identifier: Z2R9H+ecPxWyFI2/GcCBRuxnpkIEOhlLfNGeXxQ3gt8=
Subject key identifier: 67:92:C1:0F:D1:71:D4:76:C9:9B:D4:2B:CE:AB:DA:90:9E:90:85:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD5AF68A44911F08719B382DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 13:23:38 +0000
ROA not before: Wed 08 Oct 2025 13:23:34 +0000
ROA not after: Thu 27 Nov 2025 13:23:34 +0000
asID: 8796
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107229 (0x1a2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 13:23:34 2025 GMT
Not After : Nov 27 13:23:34 2025 GMT
Subject: CN=68e665da-6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:b0:30:ef:14:28:8c:67:95:d6:b0:b3:ed:
e7:07:56:1b:29:5d:9d:15:02:17:9e:02:29:f2:30:
30:9f:6d:05:d6:9b:4d:9f:99:73:6b:4d:88:13:43:
ee:ba:df:e0:f0:27:bd:c8:77:01:3b:7c:a6:d5:43:
6a:59:d4:25:21:69:3d:13:df:ce:d6:77:f0:a1:a3:
4e:2c:d8:b2:f6:7f:dd:2d:2b:89:75:fd:19:a1:f5:
5a:0e:bf:7c:0f:6a:47:b5:6c:49:71:ba:1f:0d:d2:
3b:c6:88:2c:5b:83:1c:76:54:3b:bc:f2:fe:2d:d8:
29:bd:6e:27:18:02:f3:78:0a:7e:3b:0b:dc:ba:83:
e4:6f:80:ae:9f:3d:8a:a8:3c:5a:fa:9d:d1:d6:9b:
66:83:cb:ae:98:1f:ce:d8:d5:9e:ec:92:cc:30:e1:
31:2d:4a:ba:e5:51:1e:42:b4:a7:98:fe:85:3d:96:
0e:48:f3:04:dd:e7:0e:02:87:cc:3f:a2:2d:25:a1:
99:f5:bf:d0:be:88:e8:7d:3a:7e:66:80:97:c1:fd:
64:1f:95:e1:c8:fd:7b:f7:53:13:8d:2b:fb:10:fc:
fc:06:b4:22:7d:0f:3d:57:2b:3e:f2:b4:80:0c:5a:
82:6c:36:e6:2f:4b:0e:c1:ff:0b:dc:cc:97:ad:1a:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:C1:0F:D1:71:D4:76:C9:9B:D4:2B:CE:AB:DA:90:9E:90:85:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD5AF68A44911F08719B382DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
96:b9:bc:11:89:f2:fd:d5:8b:57:f5:41:e0:6d:15:01:f1:53:
28:50:fd:6d:85:c9:cf:99:32:54:e7:15:cd:32:b6:75:18:bf:
b8:6b:cd:d8:64:4f:44:67:60:da:7a:20:2f:55:2d:31:29:35:
89:48:28:cb:7b:ff:87:31:68:5d:91:41:f9:f8:65:24:43:97:
4a:8f:99:cd:a7:c4:17:dc:b9:11:f7:71:f4:ab:39:1e:26:a9:
38:71:28:7b:1d:75:5c:9a:2a:33:dd:f2:f7:c9:81:a7:28:72:
2a:3b:4f:e5:d7:d1:9a:ec:bc:45:0d:5f:38:a6:4b:93:4b:47:
1c:7b:df:af:2c:93:40:a1:2e:17:e6:2b:48:7f:60:7c:37:2e:
2a:06:c4:36:93:8b:0d:03:9f:78:07:f3:f1:68:13:00:bf:c2:
49:f8:bc:c0:c4:9d:ac:47:7e:14:a0:02:41:8b:0a:b5:89:54:
af:ee:0d:1a:bc:8a:6b:ca:06:6a:af:12:a4:11:8c:9b:8b:9f:
ba:44:c9:61:e0:b8:5d:dc:7f:dd:fd:ce:1b:da:44:93:89:40:
b5:d3:15:0d:3d:3d:13:36:1f:7e:8f:fb:ad:3b:1f:11:7e:02:
b8:b9:64:2b:48:60:fc:92:c1:ba:da:5c:fd:56:53:8e:a1:20:
b9:cd:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:49 2025 by rpki-client