Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DCC169CB89311F0ACBAAC7BDAE4EC9C.roa
File: 3DCC169CB89311F0ACBAAC7BDAE4EC9C.roa (raw, json)
Hash identifier: yVyyI47JajIvCbJA3hVsIRsrkJX2DxY2/rPEgqOskng=
Subject key identifier: 35:AC:DA:03:43:F4:AF:41:CD:47:76:71:88:CD:69:A7:47:0F:FE:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A712
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DCC169CB89311F0ACBAAC7BDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:58:19 +0000
ROA not before: Mon 03 Nov 2025 08:58:14 +0000
ROA not after: Mon 08 Dec 2025 08:58:14 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108306 (0x1a712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:58:14 2025 GMT
Not After : Dec 8 08:58:14 2025 GMT
Subject: CN=69086eab-0cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:78:0a:28:2c:80:7d:3b:c3:03:ce:59:20:
9f:bf:b7:4b:fc:ef:1f:f2:1f:31:65:c3:31:9a:8e:
fa:05:c0:76:dc:64:10:82:49:b8:03:ae:e6:bf:47:
24:3f:60:15:08:9b:b0:45:3e:17:c7:56:23:a0:96:
c9:4c:0e:62:2f:f0:f5:77:e9:6e:74:01:c8:fe:da:
08:ed:b8:aa:bd:84:54:56:cb:9c:3b:56:30:8c:12:
43:38:79:91:0f:ff:13:91:f0:ba:8e:8c:02:8b:ca:
32:bc:1c:f0:e5:9d:dd:78:09:34:ee:44:9b:47:38:
59:3c:e3:25:3b:04:3a:dd:dd:9f:93:f1:96:c2:3a:
99:e5:37:2d:fa:03:4c:58:05:31:d3:7c:33:7c:9d:
b1:a5:8e:bb:4b:d5:fa:b7:14:34:26:27:f1:87:11:
7f:c8:96:bc:0f:eb:38:03:ac:bf:bc:93:88:a2:df:
2d:c5:2f:f5:ee:49:b8:6b:80:b8:74:ab:d1:71:03:
72:bb:ec:64:6b:db:59:d7:a2:47:92:ad:ad:28:c9:
70:91:be:58:d9:16:92:d8:5d:38:56:20:9e:45:ac:
11:80:ef:b7:6d:93:13:67:0a:ee:03:c0:97:9f:6b:
95:2c:55:59:2b:50:43:ab:33:41:6e:e8:b6:28:32:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:DA:03:43:F4:AF:41:CD:47:76:71:88:CD:69:A7:47:0F:FE:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DCC169CB89311F0ACBAAC7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:32:ae:38:0f:b2:45:a6:26:b8:8c:39:56:2a:54:ac:8a:49:
04:d4:df:92:d7:43:50:0d:73:4d:c3:a9:5b:e5:2c:0d:92:18:
43:86:3b:d6:b4:f0:ab:df:b6:6a:fb:8f:fe:2a:45:39:92:a5:
8d:ad:08:e0:70:24:0e:2e:41:91:15:87:ec:6d:25:bd:bf:45:
7f:57:58:7d:12:96:ac:9a:75:22:08:9d:f1:fd:ea:3b:81:e2:
bb:c0:73:53:01:5e:22:5c:9f:ce:a2:82:9f:a2:e3:38:ce:13:
72:d0:46:ea:a1:44:d6:8f:f8:4a:6c:c7:29:21:b9:83:aa:e8:
92:5b:0f:34:8b:1c:c0:96:69:a3:2a:aa:47:bf:25:77:81:ef:
c6:7d:e1:77:de:92:1e:4c:72:e0:f0:77:cd:6e:6d:37:8d:0c:
61:6b:a1:23:ca:57:37:63:e3:7f:2c:9a:2d:e8:69:ff:06:41:
5e:f1:ac:47:8c:f2:ae:74:40:56:38:2c:63:b4:02:6c:78:74:
4a:9a:b0:d0:7f:22:85:09:ab:c5:ba:cf:f9:5a:d2:26:3d:00:
20:ee:40:0e:9c:90:aa:61:6b:a5:c4:9f:39:48:23:9e:1c:e4:
d7:1d:4d:a8:58:b1:1c:8c:59:c6:4a:77:17:7c:c4:f3:ca:a9:
26:a3:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:20 2025 by rpki-client