Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C562AAA5611F095D85DF3DAE4EC9C.roa
File: 0A3C562AAA5611F095D85DF3DAE4EC9C.roa (raw, json)
Hash identifier: abz+fUN8deVRg9/pgUHIb0LWnAU+6b3MyN0AmWE24P4=
Subject key identifier: 48:66:D3:3D:90:9F:9B:6D:BD:89:83:EA:19:17:73:8A:DB:E9:F3:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C562AAA5611F095D85DF3DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 06:04:57 +0000
ROA not before: Thu 16 Oct 2025 06:04:49 +0000
ROA not after: Mon 17 Nov 2025 06:04:49 +0000
asID: 203020
IP address blocks: 154.204.96.0/19 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107449 (0x1a3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 06:04:49 2025 GMT
Not After : Nov 17 06:04:49 2025 GMT
Subject: CN=68f08b09-fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:b3:b5:8e:18:04:f6:f4:75:d8:b7:2c:9d:
6a:93:ea:e8:83:1c:3a:41:62:13:bf:db:8a:a9:f6:
47:5a:41:0f:0f:fa:54:ac:a1:73:5c:05:1d:59:73:
23:0a:f5:2b:be:f8:2f:fb:89:ec:02:2d:c2:b9:33:
78:ba:f4:6a:7d:87:6c:4b:ca:3f:8f:60:35:a3:fd:
89:02:bc:b3:d4:3e:48:78:ba:39:72:e1:e1:ca:25:
c9:6f:fb:47:6d:06:d6:da:ac:02:04:3c:3d:bb:0f:
af:e9:73:36:e7:dd:7c:c4:da:d5:cd:f7:6c:1c:a6:
b8:d4:be:bd:d2:8a:cc:64:68:77:08:ad:46:3e:a8:
a4:72:b9:83:26:8b:2e:92:cc:0a:11:9c:e0:86:69:
c7:0c:d7:e8:9c:09:ae:e3:71:8b:4e:7d:4a:ba:55:
6e:6a:a6:97:f0:55:e9:2b:09:f7:82:4a:f9:c3:45:
39:94:41:aa:4e:7b:3d:bc:cd:d9:72:fc:19:95:6b:
d6:81:fd:38:d7:7e:d0:de:81:35:09:5f:eb:e7:41:
1b:9c:e0:19:82:6f:b0:a2:aa:da:e9:04:1c:c9:66:
32:26:ee:43:a3:ee:28:59:12:91:19:90:99:38:f0:
cf:16:8b:8c:2f:d7:f9:f2:5a:7d:5c:9c:47:4b:77:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:D3:3D:90:9F:9B:6D:BD:89:83:EA:19:17:73:8A:DB:E9:F3:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C562AAA5611F095D85DF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.96.0/19
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:60:2d:1e:15:25:88:4b:36:c7:06:4d:a1:82:a2:43:f1:ed:
a8:9d:4a:70:b3:17:d5:4c:4b:a0:eb:a4:a0:3c:53:56:21:96:
02:74:63:b5:a1:2b:55:8f:a6:d0:18:a0:8d:23:c5:2b:b8:8f:
08:34:d1:e2:5b:f2:78:fd:ee:4c:1b:f6:76:fc:73:ef:f7:4b:
4e:45:71:b0:ba:bc:3c:37:02:60:aa:ab:7e:ec:45:07:6e:3d:
a0:2f:e1:92:84:cf:b1:fa:35:5f:2a:3b:d7:cb:5e:83:63:cf:
7f:a3:65:73:e4:af:d8:58:f7:02:ec:01:4a:bc:cb:b2:be:c2:
5e:97:4b:b6:63:ca:ae:01:86:f4:eb:b2:5f:5c:94:ea:9d:91:
78:bb:5f:0b:9e:35:61:44:14:c7:b8:e0:40:bc:9b:af:a7:71:
84:a0:4c:4c:37:c8:98:c5:be:22:23:f4:14:78:09:fa:06:52:
ff:be:aa:99:2c:82:5c:af:20:c9:50:ad:9e:4a:72:5d:8b:be:
7f:cc:cb:e9:4f:08:8c:c7:67:89:8d:5e:86:c4:d3:a7:78:32:
c1:ab:ab:ca:99:d8:22:09:64:24:ad:13:fe:4a:22:02:c0:ec:
0f:e8:ec:7c:10:54:b3:6e:47:a4:e3:eb:e0:47:cb:ae:f4:9f:
6a:10:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:32 2025 by rpki-client