Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/B3F3B298BD5D11F08B10CDAADAE4EC9C.roa
File: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (raw, json)
Hash identifier: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=
Subject key identifier: 12:BA:D3:70:99:C0:F0:AD:38:AE:28:9F:FE:CA:3A:41:03:61:88:2B
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 0769
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/B3F3B298BD5D11F08B10CDAADAE4EC9C.roa
Signing time: Sun 09 Nov 2025 11:17:40 +0000
ROA not before: Sun 09 Nov 2025 11:17:29 +0000
ROA not after: Sat 09 Nov 2030 11:17:29 +0000
asID: 21003
IP address blocks: 62.68.32.0/19 maxlen: 19
62.68.34.0/24 maxlen: 24
62.68.36.0/23 maxlen: 23
62.68.36.0/24 maxlen: 24
62.68.37.0/24 maxlen: 24
62.68.41.0/24 maxlen: 24
62.68.43.0/24 maxlen: 24
62.68.46.0/24 maxlen: 24
62.68.47.0/24 maxlen: 24
62.68.51.0/24 maxlen: 24
62.68.52.0/24 maxlen: 24
62.68.57.0/24 maxlen: 24
62.68.58.0/24 maxlen: 24
62.68.59.0/24 maxlen: 24
62.68.60.0/24 maxlen: 24
62.68.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 13 Nov 2025 04:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Nov 9 11:17:29 2025 GMT
Not After : Nov 9 11:17:29 2030 GMT
Subject: CN=69107854-a2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:7a:71:8d:f8:40:b5:b3:1e:77:b1:dc:85:
a2:8d:16:bc:e6:e8:eb:c9:28:16:ac:c3:6d:7c:74:
18:98:ea:da:0e:0f:17:c2:a5:38:06:dd:ea:f2:e4:
d8:bb:e9:53:07:f4:a8:43:80:a7:fc:f1:5e:14:19:
39:79:42:2e:5e:f7:84:ec:97:79:29:35:40:61:e3:
1b:32:71:c7:84:f3:b6:be:4b:9c:c2:c2:2c:59:82:
7d:b4:5e:13:8b:40:62:e1:a3:ed:06:2f:25:e4:74:
60:61:30:e8:b1:3d:7f:03:da:75:5b:ad:c4:a2:a7:
5e:39:4d:24:3b:9b:1d:10:0b:e1:98:32:af:9c:56:
9f:02:a6:af:4c:b0:20:fe:e8:a7:01:d1:ce:86:ed:
ad:24:30:01:41:69:be:4e:ac:98:44:66:f2:56:0a:
21:4c:7e:a7:91:ea:3e:94:1f:ac:b1:34:11:6e:36:
2e:27:1c:9f:a4:b7:23:ba:0a:0e:73:61:1c:98:b9:
d1:e2:1b:37:cf:b4:59:12:2c:49:6b:5a:51:5f:a5:
9e:ce:18:5e:7c:2c:4c:bc:51:e5:1d:3b:6f:61:e6:
7e:5a:8d:09:75:ad:e2:cc:8e:d3:75:e4:16:f7:7d:
fd:b1:6c:83:56:20:3a:c5:5f:ac:dd:93:72:14:95:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:D3:70:99:C0:F0:AD:38:AE:28:9F:FE:CA:3A:41:03:61:88:2B
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/B3F3B298BD5D11F08B10CDAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.68.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:64:29:fe:69:10:ea:91:75:fe:e1:3d:25:d5:94:6b:2b:8b:
d4:34:3b:f8:f5:3e:17:62:56:9e:04:5a:e6:f5:66:97:d6:fb:
09:23:f0:9d:df:14:ae:9a:b5:3b:ee:eb:ea:24:06:9e:55:a3:
fe:16:1d:30:33:ab:2e:a6:6c:a6:00:60:83:16:e3:0a:11:cd:
3d:03:a4:ab:15:e7:a2:58:44:e2:65:f9:83:8b:9f:e0:d3:ad:
13:c6:9a:c2:8a:80:71:88:a6:02:bd:99:5e:1c:76:6f:f9:17:
4a:0f:65:fa:b3:4c:43:cb:13:6d:da:24:9c:46:86:ff:31:5e:
77:38:76:03:c8:a8:83:df:ad:7f:02:48:fb:65:18:44:65:f8:
88:f3:86:96:23:b5:88:72:c7:8e:62:aa:d0:84:8e:5d:8d:b7:
c3:6b:9f:d5:cd:1a:8a:88:30:3a:3d:f9:9b:92:ee:1b:0b:fc:
10:0b:50:c9:26:1f:22:f0:df:b9:fc:ff:5b:76:d3:c0:65:84:
1d:e2:0c:4c:0d:9b:85:26:7b:e3:f9:43:97:ac:06:1e:9d:a9:
a6:7d:7b:fd:4e:5f:e9:e8:cb:fa:14:4a:03:84:29:1e:a9:99:
d9:11:50:2e:a1:d3:df:03:70:54:43:3e:ba:f8:96:41:7c:12:
78:08:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 12 00:54:29 2025 by rpki-client