Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/03FBC8F8AE6211F0B670B7A7DAE4EC9C.roa
File: 03FBC8F8AE6211F0B670B7A7DAE4EC9C.roa (raw, json)
Hash identifier: Hero/puzDpVDLqxdHOb+QpKTo8YJgJsCdsLulnrwXls=
Subject key identifier: 53:9A:38:28:00:46:B0:FB:D6:08:2C:30:BD:92:D0:EF:75:4B:67:24
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0436
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/03FBC8F8AE6211F0B670B7A7DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:40:45 +0000
ROA not before: Tue 21 Oct 2025 09:40:40 +0000
ROA not after: Tue 31 Dec 2030 09:40:40 +0000
asID: 15964
IP address blocks: 154.72.182.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 21 09:40:40 2025 GMT
Not After : Dec 31 09:40:40 2030 GMT
Subject: CN=68f7551d-2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:c1:73:00:35:d1:94:18:61:42:50:7c:bb:
e2:3e:c2:e5:c6:44:d3:8b:9e:47:a6:36:41:cc:5e:
6e:0c:23:aa:a1:9a:84:0f:ef:54:76:17:0e:95:02:
71:0e:9f:fc:1f:cf:d3:cd:06:b6:0d:77:67:87:89:
86:8d:c7:9d:39:b8:de:89:23:93:6a:68:cc:36:ff:
41:04:25:0f:45:59:8c:2e:8f:e1:4c:95:f4:8b:63:
6b:c5:7e:28:90:f1:7d:4b:1e:4a:48:76:50:dd:ea:
27:5a:0c:c5:45:0e:80:69:41:17:aa:5a:c5:8d:3a:
a9:a7:b2:cf:81:c4:f8:a3:ed:cd:89:52:31:8e:88:
f8:49:2d:28:22:04:5f:f4:2b:f2:89:14:12:be:ce:
43:07:81:90:63:d1:06:84:67:71:72:db:ce:d3:9b:
37:6a:7d:1a:c4:42:8c:37:63:fc:aa:30:bd:92:55:
5a:de:57:ea:b2:34:67:8c:ee:ee:50:1f:3d:ff:7b:
e7:a8:0a:cf:85:aa:69:50:df:f4:0e:74:13:c4:9d:
28:79:e9:3d:6d:3e:4d:c1:e9:e2:e2:d2:41:23:0c:
58:11:aa:28:50:78:cf:9a:0d:2f:f2:5d:7d:11:40:
e5:94:14:a3:8d:e1:89:75:b3:49:ed:e2:cb:11:ab:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9A:38:28:00:46:B0:FB:D6:08:2C:30:BD:92:D0:EF:75:4B:67:24
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/03FBC8F8AE6211F0B670B7A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.182.128/25
Signature Algorithm: sha256WithRSAEncryption
6d:07:a3:60:89:05:9b:67:d7:78:70:5a:2e:5b:a2:f6:ff:23:
84:e7:e2:26:8a:89:61:eb:17:b3:fb:97:1d:54:10:6b:57:06:
ce:f6:74:81:ed:35:83:6c:b4:2b:79:1a:2b:75:84:10:d6:09:
8a:5d:2e:46:89:27:07:c2:8c:31:3b:2f:f1:5b:ea:0f:84:d8:
a3:7a:09:e8:29:34:9b:3f:92:19:9b:57:c3:d9:d3:64:f0:c1:
1c:02:db:50:41:38:20:23:b1:bd:bb:88:5a:e8:cb:1d:df:83:
d4:cb:83:72:e0:2d:92:37:b2:56:30:58:70:3e:48:11:ce:bf:
06:bb:24:c7:bf:85:44:35:25:91:3d:7a:28:f8:01:4c:11:20:
78:e6:05:52:ae:3a:8a:e5:3c:23:88:6e:32:86:21:2f:ec:13:
38:d6:2e:65:40:1f:18:f1:31:14:10:ec:53:2c:47:ac:5a:9a:
65:5a:09:9a:22:ba:4e:9f:69:63:e4:7a:52:54:0a:99:54:99:
38:69:b0:bd:1e:e0:5f:4b:c1:7c:9e:d3:c0:6f:80:a5:d0:dd:
f1:9b:f4:21:1d:bc:35:8d:be:04:85:94:8d:3a:51:ee:38:ea:
79:89:cc:c5:ae:98:9f:38:99:47:11:8f:77:7f:4a:71:f5:16:
0b:04:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:20:54 2025 by rpki-client