Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF6DA22994111F0BD5071F5DAE4EC9C.roa
File: 3FF6DA22994111F0BD5071F5DAE4EC9C.roa (raw, json)
Hash identifier: ZuD5R5yBsB0W5nwZ4ENwU6tQlLiEsnxHL5lOVU8jGJQ=
Subject key identifier: 41:AD:CC:A0:5C:DE:0C:D4:F7:E1:0E:81:21:F8:CA:AE:11:26:92:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A06A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF6DA22994111F0BD5071F5DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:23:18 +0000
ROA not before: Wed 24 Sep 2025 12:23:13 +0000
ROA not after: Thu 30 Oct 2025 12:23:13 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106602 (0x1a06a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 12:23:13 2025 GMT
Not After : Oct 30 12:23:13 2025 GMT
Subject: CN=68d3e2b6-e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:fa:ba:53:06:b9:08:a0:d0:6c:7b:a7:63:
f7:57:2d:25:98:1f:9f:7d:62:db:d5:3b:4a:a9:d9:
22:19:9e:6e:6b:e8:a4:05:5c:7f:f1:4a:09:55:77:
aa:56:b5:8d:ff:33:44:d8:01:fe:e7:b2:8c:46:05:
26:e0:23:2e:57:16:7c:58:f3:0c:10:45:ea:5e:26:
1f:58:e4:62:eb:fb:f8:64:71:7f:49:68:68:58:ae:
4e:95:10:e0:0d:21:dc:04:f5:00:8f:76:ca:d0:12:
81:b5:e4:09:18:9b:25:41:25:4a:52:18:14:a2:3a:
d1:40:46:b3:05:2f:a6:ff:88:01:27:ea:f5:15:cf:
e8:c5:49:7d:00:79:7f:7c:5b:df:49:9e:28:04:1e:
63:56:1a:23:6d:c7:d2:aa:ba:fd:9e:b6:b5:3f:14:
02:94:1a:af:83:11:40:59:1a:8e:cb:bf:de:0a:b4:
6d:87:9c:46:d1:1d:a1:59:fa:31:86:96:79:89:7b:
53:54:b3:44:7f:4e:cf:bf:a6:12:11:ea:d2:fd:89:
d9:a0:c6:ac:63:2f:a5:01:ff:9f:ac:ef:7a:4a:92:
e1:dd:f5:78:fb:20:0b:8a:e3:98:d6:e4:71:fd:63:
40:af:bb:21:27:03:e2:57:20:c4:34:45:24:54:b8:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:CC:A0:5C:DE:0C:D4:F7:E1:0E:81:21:F8:CA:AE:11:26:92:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF6DA22994111F0BD5071F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5f:ae:2d:cd:10:f8:7c:c2:09:84:64:fd:46:95:77:5f:7f:
30:28:b6:ad:6f:5d:57:36:f3:5b:2c:0d:4d:ee:ec:5c:cf:de:
14:81:75:b1:76:1f:6c:c2:6e:cf:e4:70:2f:1d:8f:f9:a2:1e:
e0:12:4f:17:43:97:09:58:12:d3:c1:ca:00:b6:3c:c6:75:3f:
15:45:8e:fe:42:99:52:80:e3:b8:37:f5:8e:f7:00:cc:b3:01:
28:f3:d3:21:6e:f8:de:b9:b3:a5:2e:52:a3:97:17:bf:43:6e:
99:df:cc:16:12:86:03:53:9a:b5:21:67:73:ff:3a:1a:42:35:
8c:f9:d8:7d:59:05:d8:4d:66:cc:66:aa:72:78:0e:f4:14:45:
da:43:eb:82:12:27:2d:da:60:d9:7d:7c:31:6e:7c:ac:dd:a5:
c2:8e:b6:93:ba:54:41:6c:b1:59:fc:97:58:ca:56:ba:82:2e:
98:4c:89:b3:ae:5d:18:4c:c9:78:d9:72:23:23:b3:63:11:03:
c4:f1:f2:14:85:f9:55:0c:e7:7c:81:f5:8c:8e:35:07:32:c2:
82:42:79:65:1d:eb:65:fe:bb:66:3f:cd:13:70:d5:6e:6b:93:
52:1c:42:5e:a4:3a:c6:35:2c:a7:24:92:e8:68:df:4f:83:83:
a1:6a:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:27 2025 by rpki-client