Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883631E0AE6611F0A2A69BC3DAE4EC9C.roa
File: 883631E0AE6611F0A2A69BC3DAE4EC9C.roa (raw, json)
Hash identifier: Bwf7aSaXelvxakvqYJiEZI+VWgp3ltfpYkv9dYuSCHY=
Subject key identifier: 35:06:33:11:47:9A:8D:47:AC:33:2A:2D:52:4A:44:7F:5B:DE:E4:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A48A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883631E0AE6611F0A2A69BC3DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 10:13:05 +0000
ROA not before: Tue 21 Oct 2025 10:13:00 +0000
ROA not after: Sun 30 Nov 2025 10:13:00 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107658 (0x1a48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 10:13:00 2025 GMT
Not After : Nov 30 10:13:00 2025 GMT
Subject: CN=68f75cb1-efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:49:f6:5f:60:f9:a9:71:cb:70:26:62:80:
49:bc:aa:97:f0:3c:e5:81:9b:23:9d:4e:26:f2:e6:
cc:e9:d6:6f:55:2e:e4:32:58:0a:e3:c4:86:a3:cd:
dd:a3:14:37:33:32:6b:26:91:4f:6b:24:6a:3a:82:
f6:b3:fd:cb:06:78:96:2c:2e:8a:a2:2b:b5:8c:24:
7c:a4:c9:a9:69:50:25:2b:48:31:df:c7:49:ce:2a:
db:48:d5:ab:8f:3c:0c:2c:80:85:bc:63:19:59:62:
52:19:ef:b9:f3:25:a0:86:29:1e:77:60:d2:f6:6c:
04:9a:25:71:60:b8:4d:a0:f2:d4:c5:e8:d7:13:78:
c9:6a:53:d2:b5:a8:8f:e1:31:cc:5e:0f:d7:41:41:
ab:e9:b8:8b:ff:be:e9:a5:b3:f7:9a:50:c0:b3:da:
bf:dd:67:12:1f:bd:57:11:12:c0:a6:3e:9a:f3:10:
82:22:90:c7:0c:95:fc:fd:ef:f5:dc:77:86:63:69:
99:dd:1e:ae:a1:b4:7d:ad:ce:06:69:38:e7:09:02:
db:18:aa:a6:d5:98:01:71:7f:3d:4e:e0:c5:5c:64:
ed:c9:da:ff:02:53:90:43:df:a0:b1:04:35:f6:55:
11:0e:85:3c:88:a8:dc:9c:f8:5e:22:cf:55:7a:ac:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:33:11:47:9A:8D:47:AC:33:2A:2D:52:4A:44:7F:5B:DE:E4:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883631E0AE6611F0A2A69BC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
28:7a:ba:bc:14:cd:15:35:55:4f:72:8d:f4:7d:6a:ff:31:26:
21:e0:93:b9:5e:b4:e3:33:6c:0e:7c:90:bb:2e:87:0e:50:86:
e8:86:f7:2e:d2:75:31:96:a7:f9:1c:36:6d:ad:71:4f:84:f7:
ae:50:89:fb:83:cc:93:0e:6b:9c:c6:73:20:07:ec:11:30:fc:
db:e5:54:a6:a5:28:af:bb:d3:ee:2f:69:9a:19:af:93:ff:d0:
f4:1b:3c:aa:df:bc:06:70:a1:12:e7:b0:27:d5:1f:ef:ee:b4:
34:c2:0d:ee:b8:4a:70:55:86:7b:7b:cc:bc:63:a7:88:61:01:
dc:b1:60:99:6a:ad:7b:6b:9d:54:1b:ee:d2:77:54:fb:4f:5a:
23:f8:40:37:3c:42:ff:92:7d:b0:13:42:09:25:86:eb:ba:5d:
cb:ee:3a:64:2b:0d:39:48:77:d8:1b:80:a4:95:b1:78:e4:65:
0b:8b:39:93:58:f8:68:97:fd:2f:aa:3a:95:56:ab:b6:10:49:
cc:e3:38:53:ae:04:ef:b0:0f:b1:42:26:69:03:e6:02:57:e0:
c0:e3:65:b1:66:14:b4:49:66:c4:3b:2d:4b:a6:13:b8:78:97:
4a:9e:79:83:ec:98:f3:a1:66:1c:d1:52:53:ff:eb:92:08:17:
4d:2a:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:18 2025 by rpki-client