Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C6330C9D8E11F08DD599CCDAE4EC9C.roa
File: B3C6330C9D8E11F08DD599CCDAE4EC9C.roa (raw, json)
Hash identifier: sSvBaobWMlXS6GhclyEU5lafs1O5woFFHTxIHYDF7vA=
Subject key identifier: 9F:E3:B1:7E:20:B8:C5:D9:72:EF:12:29:19:EF:99:9B:C1:2F:BA:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C6330C9D8E11F08DD599CCDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 23:47:48 +0000
ROA not before: Mon 29 Sep 2025 23:47:42 +0000
ROA not after: Wed 05 Nov 2025 23:47:42 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106939 (0x1a1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 23:47:42 2025 GMT
Not After : Nov 5 23:47:42 2025 GMT
Subject: CN=68db1aa4-8242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:cd:f0:dc:a5:ee:32:8b:c9:b7:ed:47:36:
2b:56:4d:c5:16:fe:dd:51:18:63:59:ec:2d:9e:a7:
35:3c:24:a9:5a:38:1d:a6:00:da:22:fe:fd:2a:d3:
d3:a7:df:cb:82:0f:1c:30:be:80:fc:8e:03:32:9d:
1e:b4:87:f1:16:31:19:73:5a:f7:a0:36:97:ce:2a:
37:6d:16:f2:82:5e:ee:69:64:8a:a4:7e:22:5a:bb:
ee:7e:db:0d:4f:df:54:99:fc:2c:a1:1b:8e:4e:8d:
d2:c5:c5:f5:b8:03:92:58:6e:fd:bc:62:a5:ca:2a:
8c:13:9a:a2:c2:5a:07:db:d2:32:18:54:37:eb:e3:
9b:d5:ba:d3:e0:71:02:5a:d7:ca:2c:2d:80:51:8a:
09:91:d4:51:dd:a3:9e:cf:61:4d:9c:91:23:6e:89:
d4:f0:40:3d:59:3a:ee:04:99:a1:cd:a5:98:d6:78:
53:5b:9c:94:02:86:47:f7:43:9e:96:44:00:e9:1b:
80:8e:50:03:29:56:fe:e1:53:4c:6a:07:d8:f9:47:
d7:de:fe:33:67:32:d9:43:eb:0e:02:2e:2a:fd:27:
cc:aa:1a:83:7a:fb:ea:64:9d:e8:2a:b2:bf:a7:a9:
e5:b4:32:86:fd:81:00:31:0e:26:d7:7b:4c:23:41:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:B1:7E:20:B8:C5:D9:72:EF:12:29:19:EF:99:9B:C1:2F:BA:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3C6330C9D8E11F08DD599CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
10:49:dc:ce:01:63:5f:9f:00:31:8f:72:79:92:59:17:c8:0c:
c8:01:0e:c3:57:e6:37:ef:34:c4:3c:45:6a:fd:c7:98:12:5e:
66:88:ac:eb:3f:56:ce:c1:97:49:27:e6:77:55:e7:ae:87:11:
ec:f5:99:4b:9d:17:11:49:08:e8:6a:2e:6c:aa:f0:53:62:1f:
b7:53:73:db:30:2f:27:a5:bb:d9:76:1a:59:5a:1f:44:0d:1e:
8b:8b:a5:41:65:76:f6:30:03:ce:d5:72:23:a7:1d:4d:53:36:
28:ad:00:34:cc:28:12:67:ba:47:de:87:9b:72:b0:7a:9f:37:
58:d7:32:6e:91:fb:d0:dd:8d:db:8d:6c:7a:ba:96:3f:18:74:
5c:f6:55:e0:c4:0e:d9:21:4d:4c:b5:4b:bf:e5:ce:5e:89:37:
a5:7a:d2:08:d9:10:15:87:76:f2:ef:ba:af:04:64:a0:2f:57:
08:43:06:40:6c:22:e2:5a:b9:df:3a:19:ab:dc:2c:39:67:b5:
cb:54:e8:43:1d:98:46:91:98:8e:e9:40:9e:b1:4e:9a:c3:6f:
98:37:fd:2b:45:11:ef:a7:41:a8:b1:a7:c1:c9:f4:32:30:75:
bd:bc:1e:3e:bb:55:7c:75:59:66:4b:c5:07:c2:06:38:81:62:
90:b1:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:13 2025 by rpki-client