Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C59D68A802811F0A1B750D8DAE4EC9C.roa
File: 3C59D68A802811F0A1B750D8DAE4EC9C.roa (raw, json)
Hash identifier: UCZxpqfhTKC/124wo9ZbPSYxUG8jSSEcgFF1BQkPRxE=
Subject key identifier: 63:3C:CD:B7:F3:09:39:70:C5:E3:EB:B8:55:BB:69:41:24:52:CD:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C59D68A802811F0A1B750D8DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 13:51:15 +0000
ROA not before: Sat 23 Aug 2025 13:51:09 +0000
ROA not after: Tue 30 Sep 2025 13:51:09 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103881 (0x195c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 13:51:09 2025 GMT
Not After : Sep 30 13:51:09 2025 GMT
Subject: CN=68a9c753-2d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:46:b0:b8:b1:54:39:40:1c:96:66:42:b0:
2f:e7:60:d7:42:dc:94:3a:ad:d0:28:36:99:46:a3:
29:77:ca:1b:f5:37:22:ea:ad:ec:cf:09:fa:4a:30:
96:62:e5:70:01:66:63:1d:14:e2:79:e2:39:7e:04:
93:3d:18:53:4a:3b:52:d2:ce:c2:ea:49:1b:d1:57:
96:51:7f:a2:f7:44:c1:80:c0:e9:6d:88:ca:5b:bc:
03:53:1b:df:c4:ea:4f:bd:cc:42:66:90:a6:3e:d1:
17:c5:d0:eb:5b:14:72:44:5d:3f:e7:5b:10:70:17:
5c:64:21:df:ad:a0:87:6c:86:e8:15:a3:4b:1d:c3:
77:4d:10:03:79:08:2e:27:5b:75:e2:83:44:3d:42:
b8:22:16:5f:0e:59:ee:c9:40:43:34:07:df:b1:1f:
3e:89:6d:c2:82:c1:c9:39:5e:fd:fd:f9:98:96:6e:
6e:23:ff:9f:0a:da:5c:55:7e:6a:9f:7b:79:7c:92:
65:14:d1:fe:1a:ff:85:24:1d:02:c9:c4:dc:ef:78:
6a:e2:6b:3c:5b:c4:cc:b1:34:96:10:ae:ae:a1:fc:
8a:9f:bc:77:39:09:44:f4:d3:27:40:a2:05:a2:77:
7f:99:96:d2:5a:3e:dd:3f:3b:26:82:97:a8:b7:e6:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:CD:B7:F3:09:39:70:C5:E3:EB:B8:55:BB:69:41:24:52:CD:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C59D68A802811F0A1B750D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:b8:f0:b4:32:12:62:59:e0:d4:e6:2d:ce:73:9e:75:8c:35:
3b:00:a2:66:89:9b:43:92:ea:e3:52:ea:20:83:2c:b9:89:cc:
07:b4:61:92:1b:32:73:2c:59:b5:38:63:30:26:b3:30:b0:b7:
e7:4d:b6:3d:a8:fa:49:2f:0e:6c:d2:25:99:36:d0:e1:99:4a:
77:fc:2c:10:55:0b:00:de:03:97:ac:19:57:60:c6:f0:34:78:
40:bf:c9:3a:a9:57:f1:ce:75:bd:82:64:28:20:3b:13:7d:a9:
9b:ca:26:f5:f8:50:9d:5e:98:62:f6:c6:1f:36:a4:1d:dd:73:
6e:36:69:7f:38:cb:f0:67:05:3e:47:70:d9:ca:f5:fd:28:55:
cb:99:b5:18:89:f5:b4:75:c8:b2:fe:d7:e3:f0:23:51:ae:24:
06:19:8c:a7:41:27:ef:e7:fa:2b:bb:74:5e:c7:58:04:a3:b9:
64:74:66:47:1e:be:01:97:03:01:b6:74:fc:67:38:05:74:bd:
29:22:04:07:ca:45:e5:d9:3f:89:75:e4:c4:73:6a:c9:8d:35:
8a:9f:69:19:45:4a:5b:2a:42:5d:02:04:fb:a3:d9:6f:26:43:
8e:b1:a6:7a:59:86:81:50:f3:08:21:e9:eb:0c:4c:e1:9e:25:
aa:aa:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:30 2025 by rpki-client