Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06B7E8EAAF3111F0B6F2C2DADAE4EC9C.roa
File: 06B7E8EAAF3111F0B6F2C2DADAE4EC9C.roa (raw, json)
Hash identifier: n2KsTg6Gx1Q/IXSZz9qi6hqsO92bVx0F5VEuUEHtb9s=
Subject key identifier: A0:0C:01:BF:1F:6A:1E:C6:DB:A7:B6:CC:3E:9F:F3:F0:DC:9F:A2:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06B7E8EAAF3111F0B6F2C2DADAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:22:35 +0000
ROA not before: Wed 22 Oct 2025 10:22:31 +0000
ROA not after: Mon 26 Oct 2026 10:22:31 +0000
asID: 29802
IP address blocks: 154.81.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Nov 2025 20:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107683 (0x1a4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 10:22:31 2025 GMT
Not After : Oct 26 10:22:31 2026 GMT
Subject: CN=68f8b06b-8072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:cc:b4:ef:6e:07:77:0e:b4:96:57:74:9f:
e2:0f:62:1e:fc:8a:74:03:aa:2e:44:71:98:b7:99:
03:18:77:84:35:02:34:c7:cd:8a:2e:91:d2:83:79:
53:ef:7b:75:3b:8c:0f:fc:c0:26:61:18:99:cd:1f:
a6:80:16:4a:a3:0e:36:35:44:fa:cb:1d:63:c8:5a:
87:3f:63:d2:ba:09:8c:52:b7:d2:f3:01:7d:c3:54:
29:b5:55:fe:12:22:3d:57:1f:65:f0:f3:95:be:f0:
f4:63:0e:5d:d4:c9:a0:40:21:ba:99:d3:12:08:8d:
fd:14:10:b1:bf:5d:ba:72:1d:72:d1:95:9c:87:1f:
16:c4:dc:e5:30:2b:41:a9:d1:1d:dc:86:cd:dd:4e:
1d:6b:93:d7:28:f9:5e:c2:6f:89:26:64:47:59:5a:
34:29:02:4b:99:f9:38:1e:6f:00:76:bc:3e:2a:fe:
9f:ec:de:1a:68:76:67:af:0c:69:b9:61:77:5a:a4:
b8:4e:d4:6b:d2:f9:5d:2a:5b:8e:17:a4:46:35:81:
99:5c:0d:e0:ec:03:08:0d:c8:8e:b5:5a:ed:3c:6a:
67:dc:62:0b:97:e0:a6:6e:1a:e0:65:e9:bc:26:26:
19:f5:81:74:11:4c:af:03:70:ce:dd:f3:56:3e:74:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:01:BF:1F:6A:1E:C6:DB:A7:B6:CC:3E:9F:F3:F0:DC:9F:A2:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06B7E8EAAF3111F0B6F2C2DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.56.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f2:59:d9:05:3d:dd:08:0d:3a:56:14:0f:ae:68:cb:5d:3b:
bc:66:41:41:89:c4:1d:6d:15:92:b9:f0:64:60:39:ac:69:f2:
e6:11:9c:0f:ac:35:49:a3:31:47:e3:8e:2c:79:38:f6:e6:d4:
56:9b:d1:dc:70:f7:47:07:1d:8d:3a:b5:20:3e:ff:96:16:55:
92:77:98:3d:10:4a:07:95:d6:f4:70:25:51:ef:a6:89:5a:02:
1b:ed:1e:05:4d:84:d4:ac:d3:95:08:24:3b:17:2b:30:7a:36:
34:2a:ea:b7:cc:5a:c6:2e:b6:55:bd:da:9b:2d:33:0f:d8:94:
db:1c:1a:ee:0d:0a:46:7f:71:3f:d7:bb:52:27:09:02:8d:be:
89:a9:b6:ae:12:d1:56:02:e5:24:a0:bf:25:f4:ef:52:25:a3:
1a:f2:6b:28:77:c0:98:3d:c6:df:16:f2:8d:f1:3e:c6:2b:86:
a4:8f:ce:34:e2:d9:17:ac:5a:0c:62:d6:4e:7d:e6:b9:35:a4:
05:3b:1b:8a:04:b1:69:ec:aa:9d:22:1b:96:f2:e5:2c:32:c0:
c4:d6:6d:b2:a7:1f:bd:86:58:0e:1a:e4:5d:4f:4e:5b:4d:bc:
a5:61:37:e5:d8:a7:28:0b:bd:70:d7:a9:9b:96:12:8e:b9:59:
41:a3:71:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaSjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIyMTAyMjMxWhcNMjYxMDI2MTAyMjMxWjAYMRYw
FAYDVQQDEw02OGY4YjA2Yi04MDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvQnMtO9uB3cOtJZXdJ/iD2Ie/Ip0A6ouRHGYt5kDGHeENQI0x82KLpHS
g3lT73t1O4wP/MAmYRiZzR+mgBZKow42NUT6yx1jyFqHP2PSugmMUrfS8wF9w1Qp
tVX+EiI9Vx9l8POVvvD0Yw5d1MmgQCG6mdMSCI39FBCxv126ch1y0ZWchx8WxNzl
MCtBqdEd3IbN3U4da5PXKPlewm+JJmRHWVo0KQJLmfk4Hm8Adrw+Kv6f7N4aaHZn
rwxpuWF3WqS4TtRr0vldKluOF6RGNYGZXA3g7AMIDciOtVrtPGpn3GILl+Cmbhrg
Zem8JiYZ9YF0EUyvA3DO3fNWPnQjaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKAM
Ab8fah7G26e2zD6f8/Dcn6LAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNkI3RThFQUFGMzExMUYwQjZGMkMyREFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlE4MA0GCSqGSIb3DQEB
CwUAA4IBAQAl8lnZBT3dCA06VhQPrmjLXTu8ZkFBicQdbRWSufBkYDmsafLmEZwP
rDVJozFH444seTj25tRWm9HccPdHBx2NOrUgPv+WFlWSd5g9EEoHldb0cCVR76aJ
WgIb7R4FTYTUrNOVCCQ7FyswejY0Kuq3zFrGLrZVvdqbLTMP2JTbHBruDQpGf3E/
17tSJwkCjb6JqbauEtFWAuUkoL8l9O9SJaMa8msod8CYPcbfFvKN8T7GK4akj840
4tkXrFoMYtZOfea5NaQFOxuKBLFp7KqdIhuW8uUsMsDE1m2ypx+9hlgOGuRdT05b
TbylYTfl2KcoC71w16mblhKOuVlBo3GE
-----END CERTIFICATE-----
Generated at Sun Nov 2 00:41:30 2025 by rpki-client