Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/393C8F06A43B11F0BF194FA4DAE4EC9C.roa
File: 393C8F06A43B11F0BF194FA4DAE4EC9C.roa (raw, json)
Hash identifier: fUUjOIp6axnwPaI5dPQEnBdrpcfbpmPmVK6Qw1U8Quo=
Subject key identifier: CE:E3:13:AF:D9:12:38:78:D8:18:45:30:B4:05:A9:BA:0B:AF:65:12
Certificate issuer: /CN=F365FABEAF/serialNumber=325EE3B250B9C682BFB020B336CBA289E1BCD230
Certificate serial: 70
Authority key identifier: 32:5E:E3:B2:50:B9:C6:82:BF:B0:20:B3:36:CB:A2:89:E1:BC:D2:30
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/393C8F06A43B11F0BF194FA4DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 11:37:52 +0000
ROA not before: Wed 08 Oct 2025 11:37:47 +0000
ROA not after: Tue 26 Oct 2027 11:37:47 +0000
asID: 37453
IP address blocks: 41.78.192.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.crl
rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft
rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365FABEAF, serialNumber=325EE3B250B9C682BFB020B336CBA289E1BCD230
Validity
Not Before: Oct 8 11:37:47 2025 GMT
Not After : Oct 26 11:37:47 2027 GMT
Subject: CN=68e64d10-7dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:e7:81:bb:91:63:92:b3:20:e7:f1:5d:15:
15:4b:60:18:1e:5f:c1:10:0b:56:c4:0b:83:96:de:
d9:d6:04:a1:00:ca:41:f9:6a:42:0d:73:6d:f8:70:
f2:6c:a6:4e:8b:49:0b:83:16:eb:6c:12:ba:ae:a2:
ba:a5:32:fd:62:44:23:6c:f9:e1:10:c4:12:39:07:
84:b8:f7:34:a9:13:1f:1a:56:60:5d:e3:43:ed:25:
01:d3:f9:6c:06:7a:e3:7a:54:92:34:af:27:95:53:
11:a3:07:35:66:9c:6a:f1:18:d6:4f:6f:43:c1:3a:
b1:cf:e2:ee:a0:ea:c5:db:ea:e4:e1:78:c6:db:98:
27:e8:2f:00:e2:9f:3b:be:4d:2f:cb:c8:e1:81:36:
da:d4:5c:a0:1e:80:89:50:1a:e3:bf:7a:20:ab:cc:
f1:31:21:67:4a:d1:c6:70:82:60:73:db:ca:3d:f2:
8b:a8:27:4b:f5:5e:d4:ff:0a:e3:24:d4:86:4b:da:
06:90:12:bc:6a:93:75:b9:32:c3:24:43:dc:cb:92:
c9:36:fa:a0:25:fd:69:cc:0e:bf:20:5e:2e:fa:5d:
3a:a3:e5:ed:21:e8:d8:c0:44:ae:3a:45:e4:f8:f4:
83:26:57:01:59:68:4a:27:d3:fc:eb:02:13:81:df:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:13:AF:D9:12:38:78:D8:18:45:30:B4:05:A9:BA:0B:AF:65:12
X509v3 Authority Key Identifier:
keyid:32:5E:E3:B2:50:B9:C6:82:BF:B0:20:B3:36:CB:A2:89:E1:BC:D2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/393C8F06A43B11F0BF194FA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.192.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:a3:28:ba:28:9c:a4:55:4d:c2:f5:fe:64:cd:0c:8c:b1:42:
5b:a1:48:17:6e:26:ab:fc:b4:32:9d:dd:e6:d3:23:d7:fa:3a:
d8:6f:38:3f:37:e8:43:e3:6d:65:57:89:bb:a6:d7:e0:4f:f7:
6b:62:02:25:4d:75:b3:2a:08:1a:20:d2:c1:08:e7:23:db:dc:
af:04:58:ff:5b:fc:2b:42:58:dd:e2:25:81:90:81:a1:58:eb:
69:1c:83:a9:09:cb:08:19:af:4a:9c:09:44:a3:75:2b:5d:fe:
30:ef:e1:23:ba:6e:1d:04:e1:06:79:d4:7f:b2:6e:39:c3:44:
fd:03:3a:ec:13:7e:3e:3e:f7:1f:6a:ef:fd:05:45:9b:35:ce:
d3:cc:7d:19:20:be:16:e9:74:5d:f8:80:4a:dc:9e:69:5a:4f:
c2:1f:e5:25:e0:bc:4c:80:df:be:8b:d8:a8:df:92:68:24:eb:
5d:bc:db:ad:7b:50:58:1f:3b:52:df:b2:eb:55:71:f5:4a:d4:
c0:e0:46:91:59:0c:09:47:cf:19:49:d3:ff:de:89:59:a0:b7:
18:1d:3c:4f:da:99:ed:ab:69:6c:23:68:cd:a1:4e:e9:a2:2d:
c8:c6:f0:79:fc:07:60:dd:f0:a4:49:62:2d:5e:42:09:c9:ae:
60:c2:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:39:24 2025 by rpki-client