Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4A3276B38211F0870A3D91DAE4EC9C.roa
File: 3A4A3276B38211F0870A3D91DAE4EC9C.roa (raw, json)
Hash identifier: +KB1mBWME3X0k8PnFkBVYql9h1oaWAOMgU8jMz4ZtU4=
Subject key identifier: 1D:DF:27:52:C2:76:79:3B:DF:2F:E9:A1:75:B4:34:42:8C:58:3B:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A59E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4A3276B38211F0870A3D91DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 22:13:56 +0000
ROA not before: Mon 27 Oct 2025 22:13:51 +0000
ROA not after: Wed 03 Dec 2025 22:13:51 +0000
asID: 23470
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107934 (0x1a59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 22:13:51 2025 GMT
Not After : Dec 3 22:13:51 2025 GMT
Subject: CN=68ffeea4-4814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:ca:91:73:15:1a:fd:37:5b:d8:81:8b:4c:
d9:e9:40:c2:66:95:84:f7:64:27:60:bd:03:d7:57:
eb:fe:d6:63:c7:e3:74:c4:16:b6:10:20:8a:64:05:
24:13:7a:c9:09:ac:56:48:bc:48:e3:99:74:30:59:
70:07:35:ce:d7:ef:dd:f3:9a:1f:d1:43:a9:90:4f:
c8:6e:ec:c1:ab:a9:3d:ae:de:40:fc:f6:d4:c5:0a:
ad:ef:41:b2:b1:8b:c2:9e:08:c8:f8:42:32:1e:35:
d2:a4:26:b9:06:d0:dc:62:be:b2:54:79:26:34:07:
46:88:bb:e0:c7:aa:31:45:81:c5:ea:5b:01:de:35:
7a:a2:f7:42:d5:cd:14:4e:a3:99:6f:ba:12:c9:ed:
b6:d6:04:32:bd:eb:f0:bb:fe:42:a1:d7:e5:ce:75:
5e:f4:dc:ab:67:12:ee:1c:d7:24:7e:19:58:2a:29:
e2:5e:1e:8c:4a:cb:90:33:ec:99:1f:1a:86:64:43:
c1:94:b8:16:b5:3e:ea:26:1f:f7:42:d1:11:d7:49:
04:77:fe:f0:e5:3d:de:33:67:ad:04:02:60:bb:16:
d3:b9:84:6a:4c:3e:ee:24:dc:c1:f0:e5:b4:1a:86:
1a:52:93:83:e4:a5:6e:e7:1c:bf:73:a4:30:37:84:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:27:52:C2:76:79:3B:DF:2F:E9:A1:75:B4:34:42:8C:58:3B:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A4A3276B38211F0870A3D91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0c:8a:78:f9:df:8b:77:5b:88:63:66:d7:94:8d:dc:b8:91:
24:fc:76:dc:76:22:54:4a:b3:99:73:94:5f:a8:05:11:39:6d:
3a:9e:9f:b4:8c:ce:84:a2:37:03:47:b4:c4:0a:9d:9f:8c:8b:
95:7a:93:c0:c8:c6:e3:f2:b5:d6:de:da:dd:07:6a:68:bb:0c:
2c:0e:eb:10:99:18:06:02:f8:df:ab:24:6c:12:c8:0b:8e:b6:
b6:63:35:8a:44:c1:f3:2b:f6:8d:b9:6f:e7:f6:1e:39:d7:02:
af:b2:99:b3:85:4c:8a:23:ce:32:44:a4:8a:0d:3d:cc:54:49:
6b:a4:dd:59:b8:8a:09:87:34:fb:1f:15:0b:7a:95:93:3d:7d:
e8:4e:5a:05:7f:70:77:4f:d7:46:ce:06:90:63:6f:dd:09:26:
64:69:2d:0e:27:35:5c:3d:43:11:16:82:be:a7:b8:3b:50:4e:
12:35:04:9a:92:ec:3d:9f:ed:c8:32:02:ce:79:87:42:e6:0b:
da:02:1f:3c:2d:5f:ba:34:1c:0e:41:fc:cb:eb:28:4a:8a:53:
58:41:e3:5d:b2:9d:12:ba:76:0b:d9:9b:a6:bc:7d:93:b9:8b:
b6:22:e0:45:ec:c4:19:51:dc:d0:c1:ec:8c:a5:f9:4d:df:fd:
55:b0:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:19 2025 by rpki-client