Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/183EBA969AB711F0946F49F3DAE4EC9C.roa
File: 183EBA969AB711F0946F49F3DAE4EC9C.roa (raw, json)
Hash identifier: Wf8ilwsrMjzLb+v7T4rEnyzcVb+59un3luec7ziomo0=
Subject key identifier: 1D:EA:C4:E5:EC:3D:8C:A7:8A:35:DF:E0:D7:13:30:8E:E5:DF:BE:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/183EBA969AB711F0946F49F3DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 08:59:23 +0000
ROA not before: Fri 26 Sep 2025 08:59:16 +0000
ROA not after: Fri 02 Jan 2026 08:59:16 +0000
asID: 174
IP address blocks: 154.194.46.0/23 maxlen: 24
154.194.48.0/23 maxlen: 24
154.194.216.0/21 maxlen: 24
154.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Oct 2025 10:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106777 (0x1a119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:59:16 2025 GMT
Not After : Jan 2 08:59:16 2026 GMT
Subject: CN=68d655eb-cf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:29:e7:46:a7:76:c9:9f:c7:e6:9f:be:0f:
ef:25:a8:9e:4f:6b:82:80:84:5c:56:e6:be:bf:5c:
1e:a9:18:24:f2:70:4e:2a:0c:cd:e9:78:b0:73:55:
0b:6b:e9:0b:04:73:69:f7:d2:3a:7f:30:e4:6b:df:
29:ff:6c:38:aa:0b:93:03:3d:2d:c6:49:93:95:6f:
eb:78:ec:69:e7:4d:d2:2e:70:3d:7c:1a:eb:e7:f5:
95:01:92:cf:1a:bc:a4:85:46:bb:ff:ed:b3:bc:02:
b7:cd:bb:7f:48:83:f9:ba:22:f4:99:37:cf:33:28:
07:9c:5d:cb:2e:23:0f:cc:d7:75:46:74:f0:aa:4d:
07:93:50:91:32:70:04:46:77:b5:7f:20:e5:df:7a:
74:4f:00:a8:cf:cd:5d:02:cc:95:86:c2:6e:26:fc:
9e:66:cc:65:86:a6:8b:2b:d5:18:e4:05:4c:4c:02:
f7:0b:63:7b:80:3d:bb:fa:66:a6:45:ac:df:aa:0b:
0e:d2:9d:15:f2:ae:f1:4c:7a:78:8c:6a:bd:3c:4f:
f8:cf:6d:9c:99:c5:aa:4b:f0:23:7b:ca:eb:55:31:
d1:f7:b0:8e:f9:8c:4e:26:bd:3c:ca:55:7c:1b:0b:
4f:5e:ca:56:60:d0:85:8f:00:20:f5:d7:9b:3f:71:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:C4:E5:EC:3D:8C:A7:8A:35:DF:E0:D7:13:30:8E:E5:DF:BE:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/183EBA969AB711F0946F49F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.46.0-154.194.49.255
154.194.216.0/21
154.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
29:42:61:60:bb:5d:6d:c9:52:3e:4e:6f:63:a6:06:75:7e:25:
97:26:6b:55:2f:19:6a:02:82:a7:c4:8d:39:c2:e6:45:c2:76:
c4:da:45:87:36:74:f6:66:d7:ec:37:24:03:3a:b2:4e:56:e5:
66:18:18:15:4e:52:46:c4:40:e7:d0:9f:28:19:69:cc:cc:93:
02:5f:7b:c8:85:42:5a:bb:83:ff:ea:dc:b1:fe:5a:0e:bb:33:
1a:ea:5e:1c:e0:b2:42:a5:ea:0f:b8:27:35:ef:6b:1a:7c:6d:
c6:64:2e:96:9b:5b:e0:f7:cb:45:06:ed:7a:0b:91:03:7f:a9:
17:b5:50:0e:4a:17:5c:90:1b:fc:87:0c:42:48:eb:c2:ff:07:
10:9d:d6:80:a0:57:51:78:a2:78:12:43:c1:21:a8:8c:16:4c:
cf:e6:77:c5:58:38:13:db:eb:f9:e3:ea:2b:8c:cd:e0:a6:0b:
86:b2:a1:e1:45:71:0f:1f:99:27:50:a9:ea:fc:cb:bc:62:58:
35:59:a7:9c:1a:f3:0f:84:aa:1c:b2:a8:3e:cf:27:45:ce:7b:
c9:18:7f:4d:33:d0:22:21:9e:ec:7e:11:d4:81:f7:a4:29:aa:
84:1c:3e:c5:5e:49:ad:85:90:85:7a:e9:3a:51:c4:12:24:a1:
ec:0d:d2:15
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAaEZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI2MDg1OTE2WhcNMjYwMTAyMDg1OTE2WjAYMRYw
FAYDVQQDEw02OGQ2NTVlYi1jZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0y4p50andsmfx+afvg/vJaieT2uCgIRcVua+v1weqRgk8nBOKgzN6Xiw
c1ULa+kLBHNp99I6fzDka98p/2w4qguTAz0txkmTlW/reOxp503SLnA9fBrr5/WV
AZLPGrykhUa7/+2zvAK3zbt/SIP5uiL0mTfPMygHnF3LLiMPzNd1RnTwqk0Hk1CR
MnAERne1fyDl33p0TwCoz81dAsyVhsJuJvyeZsxlhqaLK9UY5AVMTAL3C2N7gD27
+mamRazfqgsO0p0V8q7xTHp4jGq9PE/4z22cmcWqS/Aje8rrVTHR97CO+YxOJr08
ylV8GwtPXspWYNCFjwAg9debP3FfwQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFB3q
xOXsPYynijXf4NcTMI7l375VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xODNFQkE5NjlBQjcxMUYwOTQ2RjQ5RjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAGawi4DBAGawjADBAOa
wtgDBAKawvQwDQYJKoZIhvcNAQELBQADggEBAClCYWC7XW3JUj5Ob2OmBnV+JZcm
a1UvGWoCgqfEjTnC5kXCdsTaRYc2dPZm1+w3JAM6sk5W5WYYGBVOUkbEQOfQnygZ
aczMkwJfe8iFQlq7g//q3LH+Wg67MxrqXhzgskKl6g+4JzXvaxp8bcZkLpabW+D3
y0UG7XoLkQN/qRe1UA5KF1yQG/yHDEJI68L/BxCd1oCgV1F4ongSQ8EhqIwWTM/m
d8VYOBPb6/nj6iuMzeCmC4ayoeFFcQ8fmSdQqer8y7xiWDVZp5wa8w+EqhyyqD7P
J0XOe8kYf00z0CIhnux+EdSB96QpqoQcPsVeSa2FkIV66TpRxBIkoewN0hU=
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:49 2025 by rpki-client