Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/285AF4F49DDB11F09759AECBDAE4EC9C.roa
File: 285AF4F49DDB11F09759AECBDAE4EC9C.roa (raw, json)
Hash identifier: wxo0M62TYgewex29BJD5XVltGhBetS7dI8c1YrJwj5c=
Subject key identifier: 1E:AE:09:17:70:E7:49:FA:89:54:FB:AA:D8:EB:72:67:78:AB:40:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/285AF4F49DDB11F09759AECBDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 08:55:05 +0000
ROA not before: Tue 30 Sep 2025 08:54:59 +0000
ROA not after: Wed 05 Nov 2025 08:54:59 +0000
asID: 205380
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106948 (0x1a1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 08:54:59 2025 GMT
Not After : Nov 5 08:54:59 2025 GMT
Subject: CN=68db9ae9-a602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:c3:e5:dc:01:3b:2b:30:2f:c2:7f:04:11:
4a:ba:94:5b:f4:b2:9b:f2:9a:29:68:76:7b:58:26:
47:ef:d5:78:12:23:3e:80:ea:05:05:6b:c3:64:05:
2d:f1:5d:16:e4:b1:01:b8:6e:e1:21:d2:de:07:aa:
46:34:2b:25:7f:6e:fb:d9:eb:39:27:a4:bb:80:f4:
77:8e:97:01:ec:ad:34:ae:b1:73:bb:19:22:16:d7:
08:4a:5b:1a:99:39:78:75:47:6f:a8:2c:35:13:1c:
82:2c:c4:a9:e4:b9:ac:82:8e:a4:e6:7c:ec:8a:e0:
cd:17:e2:22:e6:8c:94:6b:37:f3:52:f9:d6:72:ff:
9f:1e:61:bd:2b:53:d3:01:83:4c:21:2d:ad:b9:84:
e8:bf:cf:65:59:2e:2f:e7:49:5d:cb:1a:4d:27:f7:
b6:2d:09:e4:b4:6d:55:b9:04:d2:26:5e:2b:36:3d:
15:eb:f0:d7:28:8d:16:0c:28:41:ae:c0:47:20:58:
0f:82:fc:18:be:85:b0:b7:a3:6b:05:96:b5:64:05:
0a:44:52:b6:06:ef:f7:47:bd:87:2e:f3:57:3f:4f:
c8:bb:72:bc:2a:2c:48:49:92:9e:e7:78:0d:bc:0e:
c8:9f:07:03:6f:a0:c3:9a:cc:c3:61:b7:e9:ab:01:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:09:17:70:E7:49:FA:89:54:FB:AA:D8:EB:72:67:78:AB:40:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/285AF4F49DDB11F09759AECBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1d:35:e1:8e:12:29:3f:6b:3c:06:37:92:69:03:78:04:ed:
1f:1f:52:02:c1:bf:bb:cf:99:41:5b:0c:3b:78:39:05:62:d1:
96:63:47:ec:10:7d:50:b8:e5:4f:5a:d3:ca:2f:07:ef:e7:d0:
65:d9:d9:28:54:1b:60:d7:7c:ca:75:f3:db:ad:72:31:48:a3:
28:11:77:10:d9:75:d8:74:34:91:74:f1:e2:ba:9e:0e:72:ce:
1c:fb:74:71:54:23:4b:33:ef:fd:e2:29:1c:7f:10:17:68:66:
d5:ce:f2:dc:1a:42:0f:84:e9:db:10:42:8d:0a:15:e4:21:7b:
ae:b7:aa:25:ca:ac:d8:30:f3:10:dd:fb:da:53:8a:0a:1a:1a:
da:17:b4:94:6a:89:39:3a:92:0d:e8:db:7a:b1:21:bd:c7:2c:
c7:f5:2e:0f:ca:c3:62:eb:5b:98:9b:49:a5:72:b4:dd:a5:c2:
b2:ad:47:bd:d9:02:d1:54:f8:5e:3d:2a:6a:0d:4a:85:6c:26:
1b:ea:5f:9b:45:07:ae:22:90:16:72:ab:8e:47:b9:63:d1:78:
85:8f:86:40:b3:1b:9f:c3:84:2d:d2:5a:76:0f:40:76:b8:ca:
1e:72:0b:db:40:b8:a8:cb:e3:f1:26:1f:78:6a:78:d4:4d:1a:
4b:f0:70:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaHEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTMwMDg1NDU5WhcNMjUxMTA1MDg1NDU5WjAYMRYw
FAYDVQQDEw02OGRiOWFlOS1hNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqefD5dwBOyswL8J/BBFKupRb9LKb8popaHZ7WCZH79V4EiM+gOoFBWvD
ZAUt8V0W5LEBuG7hIdLeB6pGNCslf2772es5J6S7gPR3jpcB7K00rrFzuxkiFtcI
SlsamTl4dUdvqCw1ExyCLMSp5Lmsgo6k5nzsiuDNF+Ii5oyUazfzUvnWcv+fHmG9
K1PTAYNMIS2tuYTov89lWS4v50ldyxpNJ/e2LQnktG1VuQTSJl4rNj0V6/DXKI0W
DChBrsBHIFgPgvwYvoWwt6NrBZa1ZAUKRFK2Bu/3R72HLvNXP0/Iu3K8KixISZKe
53gNvA7InwcDb6DDmszDYbfpqwEFyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB6u
CRdw50n6iVT7qtjrcmd4q0DyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yODVBRjRGNDlEREIxMUYwOTc1OUFFQ0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6FMA0GCSqGSIb3DQEB
CwUAA4IBAQAaHTXhjhIpP2s8BjeSaQN4BO0fH1ICwb+7z5lBWww7eDkFYtGWY0fs
EH1QuOVPWtPKLwfv59Bl2dkoVBtg13zKdfPbrXIxSKMoEXcQ2XXYdDSRdPHiup4O
cs4c+3RxVCNLM+/94ikcfxAXaGbVzvLcGkIPhOnbEEKNChXkIXuut6olyqzYMPMQ
3fvaU4oKGhraF7SUaok5OpIN6Nt6sSG9xyzH9S4PysNi61uYm0mlcrTdpcKyrUe9
2QLRVPhePSpqDUqFbCYb6l+bRQeuIpAWcquOR7lj0XiFj4ZAsxufw4Qt0lp2D0B2
uMoecgvbQLioy+PxJh94anjUTRpL8HBw
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:03 2025 by rpki-client