Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B75BD8B35F11F083DE4CBDDAE4EC9C.roa
File: C3B75BD8B35F11F083DE4CBDDAE4EC9C.roa (raw, json)
Hash identifier: UA7rXezR/ii5lDV0TIPP+BUt8El4Jt7AmEhKUExez0c=
Subject key identifier: 3B:28:4D:47:83:2F:D1:67:87:04:48:A5:57:31:A2:25:CF:EB:54:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A56B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B75BD8B35F11F083DE4CBDDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:07:14 +0000
ROA not before: Mon 27 Oct 2025 18:07:07 +0000
ROA not after: Mon 01 Dec 2025 18:07:07 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107883 (0x1a56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:07:07 2025 GMT
Not After : Dec 1 18:07:07 2025 GMT
Subject: CN=68ffb4d2-a8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:aa:8f:82:df:49:6a:de:2f:62:59:05:63:
40:fe:3c:5e:5e:ce:82:ed:e6:07:c0:2a:e5:30:24:
e8:c1:53:6c:45:47:e5:39:4f:1b:db:43:a1:fb:00:
24:5b:06:b7:00:a7:07:3f:06:8f:6a:ff:58:91:d2:
ec:74:7d:50:be:a9:af:48:fb:79:77:ca:44:89:83:
77:5d:e1:af:1c:bc:a3:a8:0e:5c:30:df:fa:e8:31:
4b:f8:c4:4d:89:d9:e8:df:74:74:0c:14:68:86:e0:
6e:55:21:e9:b6:29:f2:1f:39:6d:1f:93:0a:a8:59:
b9:c5:c5:47:c1:22:e1:5b:98:40:28:10:90:01:93:
83:58:cc:74:95:f5:46:4e:19:b0:d2:0c:7a:28:8b:
ae:30:b4:0b:22:ca:20:2c:7a:c1:e6:76:07:84:f0:
18:76:37:2e:15:5f:a1:45:92:aa:95:39:06:a3:47:
3c:b5:15:f3:27:76:6b:b8:6f:df:05:58:b7:a9:c6:
73:88:1c:cf:3c:82:0e:4b:6b:c8:c4:64:28:75:06:
5e:d2:3f:6b:78:ec:3f:42:8c:c8:4f:8d:7a:f5:b7:
4e:9d:00:f2:f2:a0:53:e1:f5:06:06:4b:1b:17:26:
ae:d3:36:3c:d4:cf:b8:4b:74:62:cd:89:a1:14:9e:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:28:4D:47:83:2F:D1:67:87:04:48:A5:57:31:A2:25:CF:EB:54:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B75BD8B35F11F083DE4CBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:19:a4:de:83:39:72:67:a2:09:72:50:08:ee:c3:e9:44:f4:
21:74:72:6f:e9:a4:58:9e:ae:2a:21:0c:8e:f0:3c:fe:68:55:
4c:c3:48:fe:35:3e:55:6e:fe:e3:1c:3c:c7:c6:a5:72:2f:e9:
6f:c8:47:56:9f:a1:e2:cd:10:75:e4:3e:8b:5e:d2:61:76:49:
34:ec:f1:53:a9:6f:0a:69:bf:e9:b1:4e:6e:0a:c5:d5:05:aa:
d0:34:fb:50:a8:ac:8b:1e:61:e3:b8:20:2e:f2:1a:7b:43:4e:
f6:5e:67:78:0a:4b:80:d0:64:95:ba:7c:34:f7:b6:d1:37:ee:
22:53:89:d9:2e:be:ee:c7:4a:aa:78:7f:b0:3b:db:e2:0f:cb:
2f:56:27:9c:79:3a:88:50:97:61:04:24:cd:1a:3b:b9:26:95:
0c:a7:d9:f2:31:fa:93:fb:d2:45:bc:d3:dd:be:92:be:6d:f5:
ad:a8:1e:31:48:dd:77:aa:6d:25:80:13:76:92:1a:01:01:9c:
c6:71:f4:cd:f5:46:d3:02:fe:36:75:b3:e4:39:e0:ad:cd:4d:
ee:2a:55:82:5f:4d:26:f3:46:43:45:4a:02:e2:50:a4:86:2f:
16:0b:cf:81:a5:4e:76:01:d9:c3:37:65:eb:94:b1:61:8b:91:
fe:1f:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:46 2025 by rpki-client