Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E360230A1E811F0935F2291DAE4EC9C.roa
File: 3E360230A1E811F0935F2291DAE4EC9C.roa (raw, json)
Hash identifier: trpsb5twbUCFnJdT70tqAWuEmjW0ljY0fnU3+By+Vn0=
Subject key identifier: 7C:6F:C9:D3:61:4D:A8:B3:AA:0F:32:15:08:5D:70:33:47:E8:32:05
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C39
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E360230A1E811F0935F2291DAE4EC9C.roa
Signing time: Sun 05 Oct 2025 12:38:50 +0000
ROA not before: Sun 05 Oct 2025 12:38:41 +0000
ROA not after: Tue 05 Oct 2027 12:38:41 +0000
asID: 211373
IP address blocks: 154.16.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7225 (0x1c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 5 12:38:41 2025 GMT
Not After : Oct 5 12:38:41 2027 GMT
Subject: CN=68e266da-0678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:01:31:e9:ca:c6:2f:99:e6:4e:eb:04:ad:
44:6c:dd:cc:35:b7:1a:cb:f4:4f:b0:40:3b:03:3c:
25:df:dc:57:cc:fa:23:8d:ea:67:66:18:05:d8:ce:
82:b8:c3:b4:5a:36:a5:c7:bf:e8:09:da:26:a2:2d:
aa:66:db:7e:c4:27:3d:a7:86:1e:92:72:f7:62:77:
41:35:37:e3:e4:5e:7b:8b:20:69:a7:af:64:ba:35:
31:18:26:00:13:1b:b4:f6:20:32:a2:1e:1f:51:59:
b5:0c:ad:67:57:67:50:60:4a:b8:f5:e3:db:62:01:
df:9b:e6:c7:2b:63:37:b9:90:36:2a:56:d8:25:fd:
ad:fd:90:32:80:97:57:1b:37:f6:b4:f9:4c:d9:3c:
14:33:ac:97:1e:c3:05:e0:bc:c5:d5:0b:03:02:c1:
dc:ba:e4:fa:bb:dd:51:da:ca:1e:39:83:ea:e1:c0:
1e:70:5a:d6:4d:c2:de:6b:80:c8:1b:7f:78:11:7a:
79:45:af:64:8a:f1:21:4e:e0:61:a4:9a:88:08:92:
32:e2:da:61:5e:45:9f:2f:15:c4:dc:86:5e:a3:7f:
bb:cd:eb:76:4e:ad:d9:0a:0c:0a:26:78:6d:77:7d:
88:67:f7:f2:df:55:e1:83:f0:75:43:12:4c:4f:62:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:C9:D3:61:4D:A8:B3:AA:0F:32:15:08:5D:70:33:47:E8:32:05
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E360230A1E811F0935F2291DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.109.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2a:2f:d5:cf:2f:2a:71:f0:ed:84:7f:ab:d0:23:1d:86:ba:
f1:12:dc:3e:68:d1:3a:78:46:ae:d8:37:29:e3:60:90:e1:45:
f6:ac:1f:7a:9d:85:50:f9:71:5e:ab:e0:5f:8f:b4:d8:5a:d7:
2c:e3:bb:40:31:99:aa:96:81:1c:ed:bd:61:f7:8a:b6:8b:0e:
f7:5b:cf:c2:3a:b1:72:5e:87:5a:9d:4d:bb:ff:d1:2a:ca:61:
59:19:12:77:7f:3e:40:0d:23:8b:0c:88:fb:1b:41:c2:26:ae:
02:29:df:06:c4:5f:8f:5d:eb:03:bb:47:ee:6b:8c:e6:6d:cc:
c4:f6:68:53:19:94:d6:d9:6c:15:63:6f:35:01:d9:d9:0b:73:
f4:36:c8:b5:e6:c2:94:32:fc:90:49:0e:04:c0:66:fb:8d:35:
7f:2c:e5:45:3e:10:b7:9d:7c:fe:11:25:65:a3:5d:1b:fa:a2:
6c:cf:34:51:b8:f9:33:b7:74:24:3c:dd:23:ce:44:2c:6c:be:
ab:97:46:ff:7c:e8:53:55:6c:8d:dd:cb:13:a8:a6:b5:84:8b:
cc:a7:5d:0d:6a:ac:ab:33:9d:27:7b:8f:d9:92:dd:4c:f1:26:
8e:9c:cf:dc:4a:b4:cc:ca:b9:77:44:78:d0:ec:23:4a:cf:7b:
5d:e8:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:27 2025 by rpki-client