Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1059FCA8A5AE11F0A170208DDAE4EC9C.roa
File: 1059FCA8A5AE11F0A170208DDAE4EC9C.roa (raw, json)
Hash identifier: 8jcEfwpEFregxsa3Y7ds2b4MmeN6oz935JiDCK84ShI=
Subject key identifier: 28:D3:9E:63:CB:9E:0F:F5:0A:54:C0:58:BD:FB:A9:C3:B9:98:5E:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A323
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1059FCA8A5AE11F0A170208DDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:52:27 +0000
ROA not before: Fri 10 Oct 2025 07:52:22 +0000
ROA not after: Mon 17 Nov 2025 07:52:22 +0000
asID: 22773
IP address blocks: 154.198.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107299 (0x1a323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 07:52:22 2025 GMT
Not After : Nov 17 07:52:22 2025 GMT
Subject: CN=68e8bb3b-ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:bc:ee:0d:ca:6f:65:25:33:f8:86:15:4f:
87:f1:c5:fc:8c:bd:88:46:6b:c1:49:86:25:4b:9b:
1b:08:bd:a5:c8:24:54:32:0d:3d:07:71:0c:1c:6f:
44:2d:e5:33:18:2f:f6:07:3d:78:2d:84:6a:ca:7b:
04:07:5a:9e:fa:4f:40:d2:07:f4:af:36:02:d5:55:
93:f5:d2:97:76:ac:d0:e8:06:ac:0e:72:8a:36:6e:
9a:7b:4e:cf:2d:d8:5b:d9:18:bf:b2:bc:7a:b7:cf:
25:05:26:da:7e:39:d7:e6:16:f0:9d:2c:aa:42:8f:
5f:10:18:c6:5d:35:9f:e4:c7:1a:2d:fc:ac:73:ea:
6a:ea:e7:9c:24:4e:4f:f5:df:e7:de:33:16:e4:42:
b9:58:a7:41:53:72:14:f5:69:ff:3a:3b:a9:9b:e9:
d3:7a:ad:bb:98:88:16:f9:30:03:46:b1:9e:89:87:
73:a5:a4:89:d1:35:fd:96:fb:39:cd:df:7c:0f:38:
f7:b4:48:bd:57:cf:fb:81:70:89:ec:7d:84:78:22:
70:64:f3:de:ec:9c:b3:44:2c:20:97:a5:db:30:0b:
09:01:52:04:ed:68:ff:e0:99:a2:ee:0c:cb:06:a9:
bb:c9:8d:f6:e8:a3:2e:57:1e:ed:d8:5d:a0:ad:c2:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D3:9E:63:CB:9E:0F:F5:0A:54:C0:58:BD:FB:A9:C3:B9:98:5E:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1059FCA8A5AE11F0A170208DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f4:5b:5b:f4:70:a0:37:1b:e0:3c:5e:b2:16:47:0e:db:6e:
01:39:a4:de:ac:4f:8e:aa:c8:a2:5d:5e:7e:f5:06:a4:5f:0a:
94:02:94:f0:04:99:ef:ea:99:32:37:c6:02:9a:0f:98:7e:f3:
92:cd:1c:3f:90:8d:d3:4a:5d:a0:a4:f5:72:eb:82:fb:98:aa:
a5:1b:11:21:37:b0:18:5c:3a:88:93:98:9a:d0:25:f9:6c:a1:
05:12:72:8c:88:42:23:a0:3f:ff:a3:96:04:b0:1c:16:eb:5b:
fa:c4:fd:6d:78:e5:3c:07:1e:5b:a9:01:c8:aa:1e:17:50:9d:
fe:14:7f:0b:1d:37:0e:3e:02:1b:36:92:93:6c:96:5e:62:9e:
c7:b2:08:d4:19:6a:36:f2:e4:bc:b1:25:c5:3a:91:4c:f1:39:
ac:ce:0f:08:02:38:a1:0b:4c:2c:9f:4d:24:1e:ea:28:5b:91:
0a:a4:62:ee:14:6a:63:f2:69:5d:e8:38:2f:c5:30:d2:a6:e7:
c6:57:36:3d:62:89:d6:51:c2:e1:a3:f0:89:74:fb:cc:8a:0e:
f2:85:16:26:77:7f:9a:f5:76:c0:cf:0a:36:7f:05:1a:8f:8b:
5d:95:42:30:aa:f0:f5:ac:46:c1:ed:81:d9:c4:c3:6d:28:f6:
36:da:a2:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaMjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDEwMDc1MjIyWhcNMjUxMTE3MDc1MjIyWjAYMRYw
FAYDVQQDEw02OGU4YmIzYi1lYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoeu87g3Kb2UlM/iGFU+H8cX8jL2IRmvBSYYlS5sbCL2lyCRUMg09B3EM
HG9ELeUzGC/2Bz14LYRqynsEB1qe+k9A0gf0rzYC1VWT9dKXdqzQ6AasDnKKNm6a
e07PLdhb2Ri/srx6t88lBSbafjnX5hbwnSyqQo9fEBjGXTWf5McaLfysc+pq6uec
JE5P9d/n3jMW5EK5WKdBU3IU9Wn/Ojupm+nTeq27mIgW+TADRrGeiYdzpaSJ0TX9
lvs5zd98Dzj3tEi9V8/7gXCJ7H2EeCJwZPPe7JyzRCwgl6XbMAsJAVIE7Wj/4Jmi
7gzLBqm7yY326KMuVx7t2F2grcI/8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCjT
nmPLng/1ClTAWL37qcO5mF4jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMDU5RkNBOEE1QUUxMUYwQTE3MDIwOEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsa+MA0GCSqGSIb3DQEB
CwUAA4IBAQAl9Ftb9HCgNxvgPF6yFkcO224BOaTerE+OqsiiXV5+9QakXwqUApTw
BJnv6pkyN8YCmg+YfvOSzRw/kI3TSl2gpPVy64L7mKqlGxEhN7AYXDqIk5ia0CX5
bKEFEnKMiEIjoD//o5YEsBwW61v6xP1teOU8Bx5bqQHIqh4XUJ3+FH8LHTcOPgIb
NpKTbJZeYp7HsgjUGWo28uS8sSXFOpFM8Tmszg8IAjihC0wsn00kHuooW5EKpGLu
FGpj8mld6DgvxTDSpufGVzY9YonWUcLho/CJdPvMig7yhRYmd3+a9XbAzwo2fwUa
j4tdlUIwqvD1rEbB7YHZxMNtKPY22qJM
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:11 2025 by rpki-client