Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8E3006A4F111F0A37220C3DAE4EC9C.roa
File: 3A8E3006A4F111F0A37220C3DAE4EC9C.roa (raw, json)
Hash identifier: yVu6YqX1lOBBGt0HTfiEQxEx4LfgXmYcuyegNJXnvQI=
Subject key identifier: 81:59:A5:AE:36:05:2A:95:CE:D5:48:44:3E:27:78:79:0D:A4:C8:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8E3006A4F111F0A37220C3DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 09:20:43 +0000
ROA not before: Thu 09 Oct 2025 09:20:36 +0000
ROA not after: Sun 16 Nov 2025 09:20:36 +0000
asID: 22773
IP address blocks: 154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.202.29.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107268 (0x1a304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 09:20:36 2025 GMT
Not After : Nov 16 09:20:36 2025 GMT
Subject: CN=68e77e6b-f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:dd:33:38:c7:9c:d7:e8:54:0e:78:b5:d3:
32:38:f9:48:78:ff:29:8a:d0:9a:bd:fc:63:4d:31:
07:c0:52:34:a9:bb:0b:c4:d2:f9:a9:91:b8:6d:cb:
7b:85:84:16:f7:6c:c3:83:bc:dd:4f:a5:8d:91:32:
39:79:ea:ee:43:dd:8b:41:55:57:46:a4:5a:99:78:
9a:ee:0b:87:47:10:66:f0:88:a8:d3:2c:14:9e:4a:
2d:c0:5d:90:dc:cc:97:e3:d4:cb:05:09:7a:39:f5:
b5:75:34:2d:ad:19:e7:88:72:84:4c:a1:c9:41:45:
af:93:d4:d3:bc:c2:3c:4a:0c:16:9b:10:0c:3f:92:
7d:78:20:96:b2:3c:25:ec:94:b6:33:14:e2:73:15:
8f:9a:f3:03:3f:c6:91:b8:ba:44:e1:12:a7:5f:12:
03:59:45:82:e1:ae:6e:3c:72:2e:6d:38:1f:2d:8a:
50:5b:92:8b:1e:7e:5e:b3:a8:6c:ea:9d:32:7a:14:
45:32:a5:c2:76:41:f3:30:df:a3:0f:39:b3:84:4a:
13:27:9d:3d:2a:78:44:4d:88:39:39:d2:ba:09:e6:
a7:79:4d:14:4b:da:dd:2a:0a:c5:60:f9:1a:57:00:
4d:ca:16:eb:08:14:0f:20:43:28:12:5e:c8:a8:78:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:A5:AE:36:05:2A:95:CE:D5:48:44:3E:27:78:79:0D:A4:C8:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A8E3006A4F111F0A37220C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.24.0-154.202.29.255
154.213.218.0/23
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
33:f9:bd:55:1e:6d:15:9a:6b:30:b9:d3:ba:5b:1a:70:18:36:
db:f9:36:f5:99:23:0c:8f:37:19:9b:6e:ee:68:90:f8:a2:c5:
84:43:12:b8:27:04:4b:95:ff:80:a9:96:a8:4a:91:87:ee:20:
7a:a6:f6:e6:01:7c:7b:a2:37:e3:65:a3:58:4f:77:77:e9:20:
9b:41:6a:5f:d1:d0:78:42:e9:9c:e0:e3:00:d7:fb:a2:d5:ea:
9b:ba:08:70:05:21:3f:74:21:68:c1:01:1a:c6:c4:fd:cd:39:
f7:4e:ba:65:05:76:29:be:0b:f0:b5:7e:98:c7:0f:db:05:72:
5c:8a:d2:de:4d:8b:a7:1c:d0:51:ad:09:e0:59:a6:7e:d9:fe:
ec:62:36:eb:25:a5:d5:70:ac:5d:a3:c5:cd:b4:38:4f:f1:b3:
18:c3:f4:74:fa:19:9c:f2:76:6c:69:d0:e4:74:3e:7a:68:85:
49:9e:b6:7d:b7:b8:9e:1c:70:ba:46:54:5d:20:3f:1a:08:0b:
5c:15:33:bb:2f:35:db:f7:15:8f:ed:96:6c:be:63:32:71:49:
59:0f:2f:dc:5b:34:5a:ba:31:c9:fd:95:03:69:88:3c:70:3e:
ec:d4:86:6f:69:c2:27:1f:81:2a:9b:00:21:11:c4:59:2b:e2:
19:5b:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:09 2025 by rpki-client