Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3987D2F09EA411F0BE8507E2DAE4EC9C.roa
File: 3987D2F09EA411F0BE8507E2DAE4EC9C.roa (raw, json)
Hash identifier: viZd0ZnujWl6W2BB43JZnwhlAUEsRKyVoL9VLmOKEyU=
Subject key identifier: 2A:DF:F3:60:2D:80:53:8D:15:DB:02:F7:A8:30:ED:E8:BA:F6:80:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3987D2F09EA411F0BE8507E2DAE4EC9C.roa
Signing time: Wed 01 Oct 2025 08:54:23 +0000
ROA not before: Wed 01 Oct 2025 08:54:14 +0000
ROA not after: Mon 10 Nov 2025 08:54:14 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106975 (0x1a1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 1 08:54:14 2025 GMT
Not After : Nov 10 08:54:14 2025 GMT
Subject: CN=68dcec3f-48e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:0c:c4:7a:70:b5:6e:9b:73:c0:d4:80:c5:
07:3f:80:84:48:24:1f:9c:9a:70:6b:12:84:48:c5:
bb:98:8e:c0:f6:ec:2d:a5:48:03:79:70:65:04:f2:
14:fa:6e:87:8b:e1:45:46:de:ca:0f:c5:65:4a:28:
7a:81:a5:1e:d2:4e:8a:8d:b9:c0:91:58:eb:4b:96:
8e:80:e3:fd:cf:9e:46:d0:d3:c7:e6:15:f7:76:00:
a5:d4:5a:de:e2:99:9e:8f:93:5c:a3:7b:21:8e:0f:
9f:42:8a:00:ff:47:87:8e:1d:f3:4a:c3:da:7a:6c:
ee:30:78:43:39:d1:39:c3:7e:76:24:3e:e7:01:84:
b6:88:7e:b7:5e:d1:b4:f0:0f:cf:a7:23:f6:2d:d1:
43:a9:27:f3:e5:92:9e:2c:2c:07:76:6f:e2:2b:67:
48:93:96:d4:6b:0d:0f:05:95:3c:b3:aa:66:6b:6b:
cd:f9:98:8f:f4:72:c8:34:13:d1:63:80:37:f0:4b:
0e:28:22:52:01:05:12:87:ba:f8:70:cf:6f:3f:d9:
ab:11:9b:9e:12:dc:f4:f7:dc:17:de:ab:8f:9a:51:
e2:5a:57:65:24:05:03:25:e7:f0:f4:a1:15:4b:e6:
64:b6:64:90:17:88:15:80:f7:47:f3:52:88:9f:29:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DF:F3:60:2D:80:53:8D:15:DB:02:F7:A8:30:ED:E8:BA:F6:80:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3987D2F09EA411F0BE8507E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:35:25:32:eb:4a:c5:3c:73:ef:88:da:76:d2:23:33:82:3e:
7d:49:54:c5:08:f2:fb:42:58:15:a8:41:82:f2:bc:c0:23:08:
8c:51:86:b5:c2:e4:d2:21:15:f1:16:a8:5d:20:5f:7c:66:19:
e9:73:03:74:f4:1d:57:d2:d0:08:aa:3d:e7:25:61:ea:fb:3b:
33:dc:e7:75:03:fe:d4:aa:95:e3:f1:d1:eb:19:a4:9b:5c:9a:
db:a8:9b:e9:21:08:45:5c:3c:55:e7:d9:7e:4f:95:7c:1d:ec:
87:80:c9:21:16:c1:55:eb:15:40:8c:17:b0:a2:ec:f8:4c:98:
28:3d:e1:e7:1d:14:dc:43:90:b0:41:c8:4a:56:f7:97:ce:24:
b9:68:a9:ca:ba:41:6e:18:c6:9e:6e:21:43:5d:7d:8d:ad:57:
d7:dc:bf:30:2a:da:46:8b:de:bb:41:92:a6:17:55:64:39:3e:
4e:e6:6f:7b:72:59:ad:5f:a0:01:1a:bd:c4:b6:7f:48:a2:5c:
39:be:a7:fe:eb:18:a5:e0:aa:65:5e:00:99:56:0a:35:c0:fb:
0b:18:83:28:cc:85:7f:69:53:ad:ac:31:93:90:1a:b0:da:0e:
5e:a9:22:bd:c8:07:23:ff:b4:b5:04:9f:52:8a:d6:42:98:1a:
5f:e5:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:47 2025 by rpki-client