Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3828E138AE6711F0AFAEEFC7DAE4EC9C.roa
File: 3828E138AE6711F0AFAEEFC7DAE4EC9C.roa (raw, json)
Hash identifier: Irjeh31F6YHqLiWeryBNzrSrXBcP0J7X0I7RuyLDUks=
Subject key identifier: 23:34:E5:25:5F:52:F1:E4:ED:23:B4:1A:F8:38:C7:B5:FA:FF:FC:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A48C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3828E138AE6711F0AFAEEFC7DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 10:18:00 +0000
ROA not before: Tue 21 Oct 2025 10:17:55 +0000
ROA not after: Sun 30 Nov 2025 10:17:55 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107660 (0x1a48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 10:17:55 2025 GMT
Not After : Nov 30 10:17:55 2025 GMT
Subject: CN=68f75dd8-1e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:8a:71:23:8f:1c:82:f9:7d:e2:fd:f6:af:
42:94:ac:10:e4:ac:77:63:45:d4:b3:3b:57:5c:eb:
1a:6a:d1:09:54:97:6b:05:ae:c3:72:d1:72:5b:e7:
48:76:2c:a9:e2:a1:95:bd:fe:d6:0a:29:75:0a:09:
c8:65:25:90:c3:20:3d:ef:f3:12:be:3f:27:18:ac:
34:6d:80:04:d9:09:75:7a:8c:a1:31:91:ff:fa:01:
e5:8c:68:d9:e6:dc:29:b1:cb:0e:3e:3a:ab:07:db:
60:2c:0e:cc:c0:a5:7c:6c:7a:fc:06:5d:f9:b7:09:
59:0c:9e:90:56:d5:20:87:19:2a:9c:be:f3:7f:0d:
dc:2e:b1:1b:e6:83:9e:67:c2:cb:aa:5c:09:0c:51:
eb:49:a9:80:72:96:cf:cf:0f:6f:f5:6c:a4:14:17:
07:11:d5:e3:5c:d5:44:02:34:4e:30:d2:6b:0b:ca:
2a:e2:83:77:18:aa:1d:3a:f3:d7:e4:b1:91:7a:57:
87:32:73:4c:88:13:03:89:2f:07:09:f3:4d:7d:57:
22:5c:de:3a:a4:db:28:0c:81:f3:23:b7:44:6c:f1:
f9:e9:5d:d0:0e:5b:81:3a:5b:c0:85:91:c6:37:cb:
e5:86:87:33:44:70:7f:71:6d:20:48:e2:a4:50:04:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:E5:25:5F:52:F1:E4:ED:23:B4:1A:F8:38:C7:B5:FA:FF:FC:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3828E138AE6711F0AFAEEFC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
25:d8:40:d0:f9:9b:96:b3:b8:26:35:5c:56:43:d7:e1:eb:a5:
58:17:96:5e:3a:d5:f2:a0:92:9c:37:81:73:80:6f:cb:48:5b:
20:eb:38:45:c4:5d:66:4c:31:b9:59:b1:38:eb:b2:84:a4:11:
3a:99:71:c9:46:ca:e4:54:db:39:c2:44:7b:43:c6:ac:8d:07:
96:33:6a:89:10:d6:5f:93:c8:c7:32:46:35:4e:58:dc:c8:d3:
11:bb:aa:96:28:64:21:f3:7a:0f:46:78:bb:d6:11:fe:55:c1:
c6:8b:66:85:7d:b2:e2:8a:e2:9d:b8:b1:d0:69:ff:97:df:ab:
98:9d:1a:42:21:e8:65:d8:6d:c8:0a:d6:63:c2:41:d5:e8:46:
33:22:3b:77:77:4e:85:6b:57:19:9f:72:be:7f:91:68:7d:9b:
14:d4:fb:e6:b9:94:56:ee:eb:5f:76:33:b4:08:a1:d0:1a:84:
4c:4a:6d:f7:07:f6:40:b6:4d:e0:a9:d9:8e:37:9a:01:29:e3:
b2:d0:43:05:ed:fe:10:a7:77:86:05:de:a6:47:ca:ab:a6:de:
79:06:fc:3b:02:1d:59:97:ac:b8:21:36:ca:44:f9:9a:82:f0:
a1:53:e7:23:26:de:05:e3:4a:a3:50:96:83:83:b6:06:28:f8:
e1:63:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:38:17 2025 by rpki-client