Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A013736A5C811F0BA0677B1DAE4EC9C.roa
File: 4A013736A5C811F0BA0677B1DAE4EC9C.roa (raw, json)
Hash identifier: pPNC0Cou4+pUe6bM9d7F88ceK6vmlDP17BmpKUetONA=
Subject key identifier: 71:CE:C2:D8:CA:3A:B8:E2:AE:8F:BA:0D:34:2B:3B:5A:A8:61:B1:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A349
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A013736A5C811F0BA0677B1DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 11:00:11 +0000
ROA not before: Fri 10 Oct 2025 11:00:06 +0000
ROA not after: Sat 22 Nov 2025 11:00:06 +0000
asID: 133180
IP address blocks: 154.84.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107337 (0x1a349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 11:00:06 2025 GMT
Not After : Nov 22 11:00:06 2025 GMT
Subject: CN=68e8e73a-4d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:4d:d1:7d:a8:1b:dd:71:ab:0e:7a:6d:db:
24:cc:b2:f4:ee:89:38:7d:e3:14:63:d0:8a:cd:eb:
a4:87:fd:a1:bd:e1:4d:be:bf:af:ff:50:f5:da:cc:
0f:44:97:8f:f6:7c:6b:6b:c7:b8:07:1d:20:71:82:
cb:ab:ed:e8:36:72:ef:bc:97:29:e5:96:69:3e:b4:
9a:45:b7:04:13:d0:ee:f7:18:bc:10:c8:a0:b7:34:
63:bf:fb:7b:f9:d8:0b:5c:02:4a:69:d4:ce:41:7c:
26:12:3c:67:58:a3:0d:3b:da:7c:ef:8b:72:31:90:
d0:32:6c:3b:e3:d2:a7:7a:fb:4b:5d:12:14:05:d8:
db:e7:07:01:f1:6c:54:51:c4:a1:9d:44:57:f7:97:
4f:ce:e7:40:3d:c3:d1:8e:05:34:77:52:a1:21:12:
a8:a9:d9:a0:e5:67:b9:a8:8f:1c:9b:5d:72:eb:a9:
d5:25:39:52:dc:d7:40:cb:98:64:ab:41:92:de:85:
9f:75:e7:cb:af:25:c0:3d:34:3b:b6:4f:99:4c:dd:
4a:9b:b5:19:01:91:a7:60:ee:4e:77:26:fb:17:cb:
68:77:9f:a0:f9:af:c2:27:ed:4f:f0:68:a0:0a:57:
0e:41:7d:ed:a3:9d:93:f6:ee:fb:88:b0:2d:52:01:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:C2:D8:CA:3A:B8:E2:AE:8F:BA:0D:34:2B:3B:5A:A8:61:B1:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A013736A5C811F0BA0677B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:76:0e:dc:65:79:00:d5:85:d0:cc:4f:2b:9b:48:a2:cc:f0:
c0:ca:01:9b:9b:72:ce:23:37:ac:a6:7b:0d:d4:2c:5e:03:e0:
d5:ee:ff:75:41:fb:e1:b1:95:a8:74:b9:b2:7d:7a:6f:31:90:
d6:33:99:fd:81:3f:b4:d6:cf:cc:d4:f9:1b:36:0f:00:c7:14:
43:50:1d:1f:af:34:19:4f:3a:4e:25:ce:6e:21:35:93:39:7a:
c2:fd:64:8c:85:89:e3:a2:91:8f:11:a5:8f:b4:7b:b0:a5:98:
9c:8c:27:6d:ac:e2:a4:c3:59:23:7e:0c:5e:88:a6:77:91:67:
24:25:26:a5:11:23:bb:33:19:0e:51:55:b5:d1:69:e7:94:e8:
dd:d1:a5:59:7a:b5:f7:74:d9:c2:d8:e7:30:3e:6a:98:c1:fa:
75:df:2b:d2:7f:5d:e9:67:ea:58:3b:aa:ab:b0:a0:33:87:7c:
95:c8:1f:10:bd:46:ee:9b:c5:e5:49:ca:f5:4d:b0:53:5e:a9:
e6:01:bc:1e:7b:f7:13:0a:c6:47:0b:db:d1:fc:ef:88:b9:82:
ec:ab:13:48:16:6c:6c:43:c4:83:40:f7:fd:0b:2b:f6:20:1d:
ec:61:a2:fd:5f:f6:60:d9:8c:12:09:44:ae:e3:cd:cd:5b:b0:
23:57:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:13 2025 by rpki-client