Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C7EBD66A43011F0B375F2DCDAE4EC9C.roa
File: 3C7EBD66A43011F0B375F2DCDAE4EC9C.roa (raw, json)
Hash identifier: ae6Pna4Sh8iR+ZHAh+4iBifeHCO9LJ3OcMfLJpChqH4=
Subject key identifier: B2:C9:89:0E:73:54:49:44:DB:7C:A4:9B:4D:64:9F:88:2C:E4:0D:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C7EBD66A43011F0B375F2DCDAE4EC9C.roa
Signing time: Wed 08 Oct 2025 10:19:13 +0000
ROA not before: Wed 08 Oct 2025 10:19:08 +0000
ROA not after: Thu 15 Oct 2026 10:19:08 +0000
asID: 132139
IP address blocks: 154.200.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107205 (0x1a2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 10:19:08 2025 GMT
Not After : Oct 15 10:19:08 2026 GMT
Subject: CN=68e63aa1-8910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:94:27:02:a6:c5:88:0e:87:c7:d8:70:e8:
30:b5:91:7a:22:a0:7f:f9:94:0f:91:f2:a3:bb:a9:
95:35:e8:94:4d:87:83:08:26:4d:28:c0:00:df:60:
3a:d3:05:68:cd:f7:d1:16:5b:2f:4e:7e:a6:4c:c1:
04:59:bd:40:a1:56:a9:c2:51:4f:e7:13:9d:18:a4:
60:83:f7:f2:30:85:ac:ac:79:58:55:08:76:85:b4:
71:61:9d:a4:b2:f1:3d:60:99:f9:db:da:a5:28:a5:
7e:0a:74:a2:ee:9e:92:87:59:d0:74:af:c4:93:27:
49:a0:ba:a8:2f:6b:ea:90:f3:4b:c2:95:18:48:70:
d5:15:5c:8a:e4:e5:d8:7d:8c:36:66:b4:6a:da:c3:
52:01:56:35:0d:fb:5b:fa:cf:27:24:77:bb:50:10:
3f:4d:a5:1b:58:5c:5c:a0:62:20:5f:fc:dc:34:4a:
1a:c2:09:be:66:ec:25:ea:e3:ad:a3:71:e4:54:55:
22:6b:8d:6f:be:e5:bb:39:1a:41:08:c7:8a:a2:22:
24:73:f1:9a:05:ca:58:5f:4e:ff:48:5a:58:f3:eb:
72:53:0a:1a:f0:bc:60:32:59:73:2f:94:5b:bc:9e:
d8:5d:17:08:f3:63:b8:b4:b3:52:90:fd:8d:f1:24:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C9:89:0E:73:54:49:44:DB:7C:A4:9B:4D:64:9F:88:2C:E4:0D:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C7EBD66A43011F0B375F2DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.103.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c3:9a:e0:11:ed:d3:a5:c0:ae:64:bc:ba:a2:82:23:39:73:
2a:9e:6e:86:1d:b0:9d:d3:e4:84:3e:81:d3:a0:a9:37:b6:c1:
4f:51:2f:d7:4c:df:3d:c8:52:13:bd:79:a7:6d:84:02:ee:ae:
73:9f:44:81:9b:e9:62:b9:dd:17:de:6d:d4:25:47:31:90:d2:
70:73:25:75:b0:57:ec:b7:5f:92:b1:be:a9:a5:9e:47:cd:73:
fb:6a:fd:d7:fc:89:44:1d:3d:d1:05:8b:bf:17:27:30:d6:62:
e8:15:0c:bc:cc:64:68:37:64:7e:7c:35:5c:52:17:49:a4:0d:
94:9d:28:d4:90:8d:85:a3:99:05:eb:f1:4d:3c:5b:28:c2:fa:
de:b9:23:3d:db:96:6e:de:53:4c:91:e3:43:2a:0c:5e:93:b5:
e0:e7:76:dd:96:57:09:24:e5:68:5d:81:4d:b6:da:42:bc:ce:
07:d0:1b:d1:e3:ad:73:69:3a:a8:4c:8a:76:b6:71:90:a7:38:
98:8a:2f:b7:99:13:0f:e8:9f:00:1d:f0:f6:c9:2e:7c:1d:4b:
97:04:42:c2:75:18:5e:27:ba:10:35:ef:e2:87:33:5b:2d:b4:
a0:31:41:6c:92:47:7f:e7:18:60:68:eb:4d:32:bf:73:f4:5b:
3c:c7:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:45 2025 by rpki-client