Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C6B7B70835111F09237F5E2DAE4EC9C.roa
File: 3C6B7B70835111F09237F5E2DAE4EC9C.roa (raw, json)
Hash identifier: 902J7w+ObElbAbeUbXbRCNz0hivqANEJpQ/pI8NE64I=
Subject key identifier: D6:B5:6B:10:C8:75:0B:21:33:60:F7:86:78:BC:DE:19:1C:78:C1:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C6B7B70835111F09237F5E2DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 14:22:18 +0000
ROA not before: Wed 27 Aug 2025 14:22:12 +0000
ROA not after: Mon 03 Nov 2025 14:22:12 +0000
asID: 63139
IP address blocks: 154.93.83.0/24 maxlen: 24
154.93.95.0/24 maxlen: 24
154.93.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104640 (0x198c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 14:22:12 2025 GMT
Not After : Nov 3 14:22:12 2025 GMT
Subject: CN=68af149a-fc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:e6:14:1b:04:84:3b:42:27:98:7f:e7:98:
dd:e8:bd:f9:a5:21:b6:c3:f9:5d:e9:4a:eb:08:4c:
0b:0c:07:3d:cc:34:6b:d4:6e:e4:be:89:2a:1e:3a:
39:02:82:3b:23:d3:8a:25:5a:18:21:72:2f:bf:c7:
bb:1a:f9:63:57:81:28:76:76:eb:42:f2:0b:03:87:
3e:e6:5c:2f:05:b5:46:1d:99:7a:1d:f6:f1:96:e3:
71:91:fa:8e:46:95:27:ee:d8:7e:28:78:77:2a:8b:
11:f0:2d:36:7a:87:d2:7b:ea:f6:74:bc:24:85:ad:
64:a5:56:ad:99:cb:45:8e:6a:c8:1b:f4:82:d7:85:
b9:ac:b4:3f:61:51:ef:45:37:9e:80:8e:5b:e5:5a:
13:18:e8:52:00:b3:5a:f1:19:d0:06:3f:c7:be:7a:
7b:51:b2:65:8d:2b:58:6a:f2:04:ad:2c:5c:5a:c6:
9f:f8:fd:bc:9a:0c:6b:fe:5f:ff:04:6f:06:22:dd:
9c:1d:a8:60:9f:62:aa:84:3b:4d:f8:9d:67:2b:8e:
83:37:12:95:2e:c7:2b:46:38:f6:da:25:b2:c8:b1:
5b:f5:b9:6a:e0:9b:02:5d:1e:b4:53:91:61:1f:2e:
d5:9c:2f:d5:af:88:34:cb:db:2b:9d:1b:8f:a6:34:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:6B:10:C8:75:0B:21:33:60:F7:86:78:BC:DE:19:1C:78:C1:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C6B7B70835111F09237F5E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.83.0/24
154.93.95.0/24
154.93.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:60:7b:71:16:8a:d1:d0:44:3a:f7:9b:9b:09:24:ec:1d:27:
2e:33:71:47:09:df:56:e3:9f:8c:fa:d4:d0:d2:f4:7a:68:d4:
6d:c6:5a:1f:5a:d0:93:f9:00:42:da:53:64:5a:2e:ff:9d:0a:
52:a6:7c:ad:ee:d6:ab:4c:36:66:d9:6f:8d:01:14:cc:19:68:
4d:6f:1b:3b:5d:a8:2a:f6:db:f8:73:4a:eb:b1:b7:72:d7:7f:
7d:f2:a3:b9:c1:ef:ea:b9:e4:a4:db:1a:58:0e:8b:6f:9f:29:
4a:48:33:51:30:94:07:8c:e9:83:02:41:34:91:77:15:e8:4e:
a6:37:8b:0a:db:58:62:ac:20:b4:15:74:3b:f0:0a:84:70:cd:
74:05:26:b5:a2:5b:a2:6f:a9:13:c6:e8:eb:d7:94:71:c7:57:
45:5d:0f:dc:55:49:c5:fe:4f:d8:d7:3b:51:1a:f7:c3:74:e2:
51:40:d0:f5:4b:89:41:4a:3d:e6:be:0a:60:a1:31:ae:68:e5:
b0:34:df:a6:ff:08:a3:79:bf:96:88:56:c3:32:ed:d0:01:57:
4c:4b:73:15:e5:c4:0d:d7:09:f7:24:3a:f7:8e:65:f6:60:e9:
9d:ef:9d:bd:d0:58:03:0b:94:bc:1d:a0:3d:85:f9:80:0f:d5:
0a:d2:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:46 2025 by rpki-client