Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FD64798A29611F0BBB5A77FDAE4EC9C.roa
File: 5FD64798A29611F0BBB5A77FDAE4EC9C.roa (raw, json)
Hash identifier: CCtRkIRNaes9rM5QVlkhUGyoJ34y1XlPlALS17HIbH8=
Subject key identifier: 9B:27:A0:C7:68:90:88:3F:D7:03:86:72:62:73:20:56:63:E2:03:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A26F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FD64798A29611F0BBB5A77FDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 09:25:19 +0000
ROA not before: Mon 06 Oct 2025 09:25:14 +0000
ROA not after: Sat 15 Nov 2025 09:25:14 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Oct 2025 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107119 (0x1a26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 09:25:14 2025 GMT
Not After : Nov 15 09:25:14 2025 GMT
Subject: CN=68e38aff-55e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:aa:2f:e7:5b:d0:75:19:7c:c2:1a:d9:4b:
89:63:a1:89:96:2b:e4:df:6c:c5:e4:f5:5b:31:24:
00:83:88:54:bf:bf:3e:0f:71:f4:08:99:03:13:01:
c7:79:44:b5:62:9f:ff:3d:e7:9f:c3:76:44:9d:c9:
8e:7b:60:e8:b0:cc:e4:40:f6:69:82:48:bb:4b:91:
0a:68:a2:e0:ec:7a:32:b0:58:df:e0:84:e8:49:4f:
92:47:a5:a5:7b:96:c6:ba:6f:15:de:e6:03:9f:1c:
3d:34:77:51:23:2c:e9:0e:2f:30:11:d3:cf:23:79:
77:c5:97:8b:d4:3a:c1:40:18:f9:21:97:d1:16:00:
81:e3:32:31:fe:25:91:e4:b5:90:d3:35:c2:8e:9a:
bc:2b:84:45:dc:22:db:80:51:ed:32:b4:7f:af:3e:
5a:9b:ca:5f:af:e5:a5:86:ad:00:b5:6a:0b:e1:b0:
3f:23:23:8b:3f:e9:c6:a9:15:8f:06:25:ed:b1:0a:
ec:25:43:8c:3b:2e:f2:6d:55:25:87:a5:c6:06:61:
9d:ce:5b:d8:0b:22:94:f4:ce:c6:2c:bb:fc:41:c0:
fc:66:f2:3b:b9:66:53:e2:81:54:e3:d6:5a:3a:50:
0d:1d:21:f0:eb:81:77:77:d1:b6:b7:64:9f:e1:71:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:A0:C7:68:90:88:3F:D7:03:86:72:62:73:20:56:63:E2:03:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FD64798A29611F0BBB5A77FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ab:01:c4:88:51:7b:8b:af:8c:35:36:e7:65:04:d8:65:9f:
ea:ed:0b:08:9b:3a:f6:fa:2e:d4:55:c3:8c:ef:e2:c3:ed:4b:
83:3d:e3:2e:2e:d5:55:29:61:0c:22:46:07:3d:fd:34:cb:91:
a1:8e:72:d3:b5:a1:d7:5d:85:85:a0:7a:73:65:b8:56:68:e9:
6f:3f:32:9f:54:65:85:cc:93:c4:e6:fc:35:c4:56:9b:27:b7:
a6:95:ab:15:0d:47:dc:7c:d4:38:91:87:b2:98:74:24:de:3f:
a1:5d:11:f6:36:5e:0e:b1:31:ed:8a:a2:e6:51:90:7a:1b:fb:
9d:d6:f6:05:6a:80:20:29:bf:5c:69:c2:b5:87:8b:9c:ce:39:
ac:51:ff:b5:e4:e5:c3:aa:4d:9f:56:37:e8:b6:9e:53:92:43:
ae:82:db:ee:13:5e:c3:95:01:ac:47:cb:a6:6a:28:be:f0:1c:
cd:f4:fc:bc:6e:71:ff:b7:d4:c6:41:fd:5e:17:54:1c:12:b1:
4a:41:6e:6b:4a:9b:4c:7e:09:54:95:30:51:94:1a:1c:4e:8f:
e6:d2:d4:3e:65:17:0a:cb:3d:ce:b8:97:ce:2a:c2:e9:e6:27:
34:c5:88:bc:0c:a4:c2:5a:30:c1:a6:35:50:a6:88:07:cb:51:
40:12:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:37 2025 by rpki-client