Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06A2B3229D8811F0A607A0A1DAE4EC9C.roa
File: 06A2B3229D8811F0A607A0A1DAE4EC9C.roa (raw, json)
Hash identifier: nGUIosF5CQl9BCbGs9ctjaO7n81NpT0vMSaSfKaGzKY=
Subject key identifier: FB:9A:55:24:6F:4D:90:8C:3F:AF:D8:48:F7:71:7C:21:FB:D5:48:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06A2B3229D8811F0A607A0A1DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 23:00:00 +0000
ROA not before: Mon 29 Sep 2025 22:59:52 +0000
ROA not after: Wed 05 Nov 2025 22:59:52 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106925 (0x1a1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 22:59:52 2025 GMT
Not After : Nov 5 22:59:52 2025 GMT
Subject: CN=68db0f70-4616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:28:c8:ea:99:46:2a:19:7a:4b:02:60:0b:
68:71:72:7f:d1:ba:87:41:d1:c7:dd:3d:f1:d2:4a:
f4:c2:a6:f5:06:a6:28:ce:6f:b6:32:b6:fc:55:33:
ee:40:33:ba:a2:0e:21:4a:1d:11:24:c4:dd:36:ac:
13:42:e0:0c:2d:d6:a5:35:2e:6b:71:cf:08:6e:f9:
ce:a7:7c:6b:10:a4:c2:b0:26:be:e1:96:70:32:36:
a6:ca:8f:7b:c6:e1:0a:eb:e0:76:5f:5d:d6:a0:54:
d3:01:b7:61:93:f8:cc:29:2a:3e:0b:38:b3:8d:dc:
44:c9:45:d7:9b:50:d2:b4:15:e5:75:10:43:04:1d:
89:cc:0e:a0:8c:e7:d9:54:f9:23:44:6a:0c:db:53:
24:ec:07:7d:29:62:08:67:7d:fc:c9:04:70:4f:fa:
98:fa:88:1a:41:fd:68:64:43:49:d5:77:af:bd:57:
1b:57:f8:9e:58:d0:7b:d9:17:cf:23:a2:e1:a7:2a:
4f:8f:1a:08:6c:f1:4b:64:72:1d:71:d2:ab:ff:0a:
26:b2:2c:e4:9a:7e:e3:cb:1f:64:ae:63:0f:93:30:
2c:f2:d8:5f:21:13:57:54:16:86:e6:29:84:37:fa:
6a:a8:e5:5e:bf:d6:70:6c:41:7d:52:97:29:a8:f2:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:55:24:6F:4D:90:8C:3F:AF:D8:48:F7:71:7C:21:FB:D5:48:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06A2B3229D8811F0A607A0A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
61:33:06:24:c6:92:ea:eb:61:92:90:43:ed:22:bf:71:05:8c:
f0:99:ab:a7:b0:6d:ac:92:b2:5d:28:b5:43:9b:b3:1d:12:f4:
2b:56:c1:e6:e0:90:bb:f8:4d:3d:5a:b4:7f:6f:8c:c0:25:64:
a7:bf:71:cf:39:9b:bf:33:f6:a1:df:27:8b:6c:3b:3e:65:1a:
bf:0e:84:aa:87:c9:a9:9f:02:e8:85:22:d0:50:90:51:a0:91:
94:7d:fb:a7:a1:f2:58:4e:6f:66:6c:3f:a8:63:2a:83:8a:19:
6c:63:0d:c8:16:34:10:a7:0b:02:5e:ac:9b:47:06:96:54:91:
cb:f3:41:17:36:2e:67:78:c8:bd:4a:35:68:ae:71:38:23:a4:
57:06:87:ec:86:fa:bb:c9:ce:bb:4e:98:a9:a3:98:5e:b3:fb:
e5:6c:6d:46:11:b6:bf:c5:4e:26:50:db:34:d1:32:7a:7c:e5:
f5:cf:81:31:46:c9:09:89:46:68:05:1f:95:4f:72:fe:72:bc:
9d:fc:6d:d0:0b:81:bd:36:8a:82:ea:6b:8d:59:d9:97:dc:de:
73:c4:57:d8:80:f1:29:10:76:39:10:3b:47:89:0b:c0:87:af:
ff:ae:8c:68:5c:87:0d:6e:de:d2:00:75:9d:f0:5d:3b:7a:87:
2d:57:57:92
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIDAaGtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MjI1OTUyWhcNMjUxMTA1MjI1OTUyWjAYMRYw
FAYDVQQDEw02OGRiMGY3MC00NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7Z4oyOqZRioZeksCYAtocXJ/0bqHQdHH3T3x0kr0wqb1BqYozm+2Mrb8
VTPuQDO6og4hSh0RJMTdNqwTQuAMLdalNS5rcc8IbvnOp3xrEKTCsCa+4ZZwMjam
yo97xuEK6+B2X13WoFTTAbdhk/jMKSo+CzizjdxEyUXXm1DStBXldRBDBB2JzA6g
jOfZVPkjRGoM21Mk7Ad9KWIIZ338yQRwT/qY+ogaQf1oZENJ1XevvVcbV/ieWNB7
2RfPI6LhpypPjxoIbPFLZHIdcdKr/womsizkmn7jyx9krmMPkzAs8thfIRNXVBaG
5imEN/pqqOVev9ZwbEF9UpcpqPJIDwIDAQABo4IC9TCCAvEwHQYDVR0OBBYEFPua
VSRvTZCMP6/YSPdxfCH71Uj6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNkEyQjMyMjlEODgxMUYwQTYwN0EwQTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAmtvAAwQAmtvDMAwDBACa
28kDBAKa28gwDAMEBJrb0AMEAJrb0jAMAwQCmtvUAwQAmtvYAwQAmtwBAwQAmt0B
MAwDBACa3TUDBAOa3TADBAGa3T4wDQYJKoZIhvcNAQELBQADggEBAGEzBiTGkurr
YZKQQ+0iv3EFjPCZq6ewbaySsl0otUObsx0S9CtWwebgkLv4TT1atH9vjMAlZKe/
cc85m78z9qHfJ4tsOz5lGr8OhKqHyamfAuiFItBQkFGgkZR9+6eh8lhOb2ZsP6hj
KoOKGWxjDcgWNBCnCwJerJtHBpZUkcvzQRc2Lmd4yL1KNWiucTgjpFcGh+yG+rvJ
zrtOmKmjmF6z++VsbUYRtr/FTiZQ2zTRMnp85fXPgTFGyQmJRmgFH5VPcv5yvJ38
bdALgb02ioLqa41Z2Zfc3nPEV9iA8SkQdjkQO0eJC8CHr/+ujGhchw1u3tIAdZ3w
XTt6hy1XV5I=
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:16 2025 by rpki-client