Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328FA3F2ADAD11F0865F0796DAE4EC9C.roa
File: 328FA3F2ADAD11F0865F0796DAE4EC9C.roa (raw, json)
Hash identifier: dJFR9E9WHUc1HQeDRqdLBue0wpoHuEAghZDcVzLn8Ig=
Subject key identifier: F4:67:DB:4E:73:21:15:23:5A:5D:2D:52:1B:18:24:90:D8:23:A9:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A459
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328FA3F2ADAD11F0865F0796DAE4EC9C.roa
Signing time: Mon 20 Oct 2025 12:06:24 +0000
ROA not before: Mon 20 Oct 2025 12:06:19 +0000
ROA not after: Sun 30 Nov 2025 12:06:19 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107609 (0x1a459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 20 12:06:19 2025 GMT
Not After : Nov 30 12:06:19 2025 GMT
Subject: CN=68f625c0-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:e7:01:99:38:ac:1c:e7:84:6b:03:ef:1f:
4e:9f:ee:89:d0:c3:8c:d4:94:09:10:de:82:58:c1:
a8:4b:0f:48:34:de:25:cd:e2:d9:a6:41:dc:b7:ba:
54:07:97:41:2f:e6:5c:fd:23:ba:bb:12:6b:04:bf:
46:dc:84:28:66:34:3c:95:a4:80:00:42:30:17:42:
c2:c8:3f:d7:3a:f5:6f:54:99:7c:ce:8d:80:16:1f:
49:f5:03:ec:38:13:e0:b6:77:16:f1:f5:0d:ef:c6:
e3:7a:de:c6:ed:fc:f0:78:a7:f7:51:5d:e4:4e:11:
b3:f9:b7:99:b6:6b:6f:b7:d8:ce:ee:7d:fb:b2:34:
33:75:36:6a:b2:80:e5:b2:45:cf:33:38:f1:64:de:
6a:2b:a3:38:38:66:83:88:fe:80:26:07:ac:a1:12:
62:d6:e1:e4:86:d9:62:c8:93:12:d8:e8:36:2d:60:
73:34:fb:3b:22:e7:97:67:30:90:02:1e:89:21:8a:
ee:30:61:aa:b3:7f:8c:fc:b9:d6:63:75:e8:ae:77:
39:b1:38:7e:61:c5:5b:1d:f6:a8:3b:84:bc:4f:ce:
09:60:03:24:b8:17:2d:a9:e4:c6:28:93:61:dd:2b:
86:b0:66:77:e4:10:10:08:b2:dd:4a:fb:55:5e:a9:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:67:DB:4E:73:21:15:23:5A:5D:2D:52:1B:18:24:90:D8:23:A9:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/328FA3F2ADAD11F0865F0796DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c2:ae:77:4d:1a:7c:04:63:25:8a:d3:cd:66:10:1e:3d:73:ea:
38:f2:6f:37:64:a2:3c:b9:a4:ae:67:86:be:33:51:eb:65:a1:
3b:62:44:e2:7f:bb:b4:d0:d3:49:a6:71:ad:d1:24:ff:f1:e5:
e4:3f:aa:f3:d1:cd:ed:ce:ca:8a:a6:3d:33:1e:f1:80:7c:51:
b0:48:16:99:db:bb:34:55:c1:88:80:12:3a:bd:c0:1e:a2:4b:
58:87:4f:a5:63:14:c6:4d:b3:84:44:09:90:66:d8:88:1c:69:
5a:29:c6:65:60:d8:15:d5:08:62:5e:91:13:f7:6b:57:c7:34:
24:c6:78:86:00:cc:07:ff:65:b3:f4:ba:05:36:d9:e8:37:6a:
ad:19:fb:bd:40:a0:55:14:20:bb:63:61:e8:0b:83:ff:ab:0d:
4a:d4:a9:36:83:62:a4:19:76:cb:3d:2f:52:1b:ba:94:08:08:
d3:2a:80:cc:c1:26:e2:95:23:cc:93:44:78:f1:e0:f6:52:07:
ed:76:48:11:1a:60:2f:43:6e:5a:62:20:71:ff:22:ce:4a:fe:
b1:db:4d:d3:09:d1:c1:76:fd:db:28:b4:46:f7:b3:fc:32:d4:
a0:f6:05:08:40:f6:69:e8:d2:e3:b7:d1:a3:db:17:76:2c:14:
d4:d5:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:11 2025 by rpki-client