Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC41627EA43611F0A69F128ADAE4EC9C.roa
File: FC41627EA43611F0A69F128ADAE4EC9C.roa (raw, json)
Hash identifier: QWV4wIs9kgTFaU7MjUZGylRT1yD/BMjS/6E37vYSKME=
Subject key identifier: E4:29:DB:EF:21:8E:09:8B:E1:D8:75:3F:94:6C:8C:90:1D:97:F3:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC41627EA43611F0A69F128ADAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:07:32 +0000
ROA not before: Wed 08 Oct 2025 11:07:27 +0000
ROA not after: Fri 14 Nov 2025 11:07:27 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
154.201.35.0/24 maxlen: 24
154.202.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107211 (0x1a2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 11:07:27 2025 GMT
Not After : Nov 14 11:07:27 2025 GMT
Subject: CN=68e645f4-61cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:f0:c9:f2:12:00:2f:88:a9:67:a7:c6:cf:
e2:2b:d6:6c:03:88:36:98:02:6f:ea:bc:9f:8a:05:
4e:2f:5e:1a:80:71:37:e2:32:7a:1b:c5:6e:c4:e1:
d0:fb:06:91:e6:bf:c2:f5:25:6f:c5:06:8d:45:49:
87:ab:17:a1:28:c6:1e:e6:43:86:16:8a:4f:cd:2f:
2d:a9:fa:5e:77:c8:e0:d4:75:10:02:7a:50:11:60:
71:5e:47:95:cb:74:95:00:a4:df:31:77:40:a3:f7:
43:4a:1c:47:cc:fa:80:24:38:a8:99:4b:f6:4d:86:
23:c9:49:b4:ef:ab:9a:a0:85:59:05:3d:08:e8:e9:
9f:bb:ad:51:54:11:be:12:90:47:12:29:b0:d3:c8:
c6:72:d8:eb:4c:13:f1:60:a9:15:5c:af:de:65:e1:
72:f2:ea:16:ea:a8:98:6a:cc:8f:81:dd:2b:12:25:
b8:88:e8:d8:24:c0:c0:65:7a:47:06:b2:a3:91:45:
fd:ca:a2:b8:3f:90:5d:ee:45:0d:c0:50:f5:73:e0:
d0:38:8f:cc:f9:8c:c1:1e:46:10:c4:81:77:96:70:
9b:e1:84:3e:e1:35:cf:5b:42:9e:28:d4:8d:03:26:
11:3a:27:87:3b:c6:56:f4:b0:07:31:a5:f1:71:d7:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:DB:EF:21:8E:09:8B:E1:D8:75:3F:94:6C:8C:90:1D:97:F3:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC41627EA43611F0A69F128ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
154.201.35.0/24
154.202.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:b5:f7:1f:db:1b:4b:74:b1:aa:b5:8c:30:cc:82:38:8b:
83:d2:df:e9:4d:b4:2d:42:51:47:e9:68:e0:3c:be:9c:cb:0c:
d4:2e:08:82:a1:c1:d9:c7:71:9c:b4:53:83:26:e7:97:28:c6:
9a:7d:8a:be:42:aa:7c:14:ab:6a:1f:eb:65:d1:93:ab:09:1d:
06:43:ba:20:e4:6f:f1:07:8c:ac:85:34:17:13:8a:d0:09:ff:
83:5e:a6:0d:6a:f2:b4:92:8d:d7:c2:f2:4a:81:b8:79:47:d9:
48:65:30:48:a5:30:82:71:43:33:cc:89:da:76:6f:18:90:2f:
c6:08:40:d4:64:f8:0e:d4:7e:79:50:0f:2e:fe:30:23:d5:fb:
0d:22:12:09:23:80:ab:37:c5:bc:0d:49:78:1f:c3:4e:05:74:
61:18:84:d4:86:c0:f5:ab:d5:c1:61:5f:77:fc:a4:42:d2:20:
4a:5e:a3:26:f4:50:a8:08:76:37:0b:8a:7b:ca:0d:25:7b:8b:
0f:05:eb:b9:60:d2:94:6f:7a:d5:a5:f0:35:de:8a:1f:37:eb:
19:fa:b7:22:24:84:90:24:9e:78:9b:8a:ff:8d:a0:94:81:9e:
a6:47:12:64:bb:3b:ca:4b:30:2c:b3:3d:01:a4:d4:6c:90:52:
82:48:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:08 2025 by rpki-client