Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B19FE09E1011F09F663EA1DAE4EC9C.roa
File: C3B19FE09E1011F09F663EA1DAE4EC9C.roa (raw, json)
Hash identifier: 5XU9RI5Mtq+DLcygqP5HGlhw+TYEv+LdgusXwrMf6w8=
Subject key identifier: 02:87:B8:48:B9:C9:35:9F:6A:3A:55:0A:AD:E1:C7:9B:CC:EC:6E:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B19FE09E1011F09F663EA1DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 15:18:49 +0000
ROA not before: Tue 30 Sep 2025 15:18:43 +0000
ROA not after: Thu 06 Nov 2025 15:18:43 +0000
asID: 395201
IP address blocks: 154.222.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 16 Oct 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106964 (0x1a1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 15:18:43 2025 GMT
Not After : Nov 6 15:18:43 2025 GMT
Subject: CN=68dbf4d9-dd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:55:f3:96:45:c1:8e:4d:42:1b:c4:75:45:
93:c4:0a:2f:fd:7b:6d:62:7a:3c:f9:cb:15:3a:a7:
3e:9f:01:e5:eb:9d:32:0b:0d:f1:07:cb:af:99:bb:
12:bd:b8:2f:44:69:2a:c6:0c:d9:b7:c4:20:b8:43:
9e:73:cd:f2:a8:7d:5c:6d:bc:0a:cc:2e:ee:38:e7:
1d:96:44:d3:91:64:a4:e2:7d:62:1a:85:00:23:f3:
77:3d:1d:c2:3a:8f:e1:3c:6b:4d:fc:8e:b5:50:8a:
c1:7a:61:9a:f2:9a:05:c4:58:b2:9a:ca:ad:8a:ca:
23:b4:f4:ab:13:a8:7f:21:8d:3b:39:11:ba:85:3c:
e7:8b:b4:a0:1b:6c:d6:e7:1d:6c:4e:5a:67:ce:09:
52:48:f1:99:bb:f7:a1:a8:26:ce:88:7e:f8:bc:77:
07:a1:8d:42:92:82:27:61:c0:b4:66:e0:23:ca:c1:
98:29:81:26:52:71:8d:1a:4a:4f:59:a1:85:27:e5:
2f:4f:fd:91:1d:0d:a0:7f:18:8a:98:2c:0c:ce:3e:
f0:d7:b1:94:da:e5:ea:51:f3:c1:65:5b:5a:eb:17:
90:c8:62:95:68:36:d2:a4:bc:f5:72:2a:43:a9:a3:
35:a7:9e:91:2d:0b:b5:1e:ec:fc:93:89:c7:ca:ce:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:B8:48:B9:C9:35:9F:6A:3A:55:0A:AD:E1:C7:9B:CC:EC:6E:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B19FE09E1011F09F663EA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.152.0/21
Signature Algorithm: sha256WithRSAEncryption
44:3a:ad:e9:cb:55:8c:33:04:f5:52:fd:a1:74:06:ff:4f:8d:
af:90:07:9a:a5:b5:5c:a6:91:1a:3e:9c:d4:77:97:96:57:2f:
fa:77:89:82:10:0a:dd:ed:0c:a9:4a:87:78:20:b8:86:da:f3:
0a:f0:db:b7:e0:91:56:bc:5b:45:de:e9:bd:69:14:a6:10:ef:
58:fb:d2:67:40:1c:01:99:5a:ba:48:99:ac:72:04:8f:e7:fc:
3a:9d:a9:8c:2b:0c:9e:d2:c5:8b:97:03:1d:73:9b:ed:1f:ac:
1e:dd:c5:cb:9d:d6:c3:4a:0d:cd:ab:ff:8b:20:74:7a:d5:e5:
67:64:c1:a1:41:36:c0:94:25:3f:23:98:59:bb:75:15:c6:d0:
f3:05:7e:34:a3:0d:aa:a6:95:7d:d0:1b:6a:66:04:38:fe:80:
61:17:bc:20:b4:ab:05:53:0a:71:e5:4c:8f:46:1f:c6:7d:8d:
83:91:d7:80:ec:15:82:4d:01:fe:b9:25:ad:f0:97:e2:54:6c:
17:d4:08:89:87:55:8a:74:1b:7a:59:94:85:32:56:77:44:c8:
ff:d6:ae:8e:f9:28:fa:81:d8:29:05:02:5f:d6:15:f4:03:d9:
9d:4f:7b:ce:68:e0:0a:dc:80:a0:0b:ec:db:17:65:cb:c6:5e:
3d:76:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 07:59:31 2025 by rpki-client