Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C8B534A69611F08A5EBAE6DAE4EC9C.roa
File: 37C8B534A69611F08A5EBAE6DAE4EC9C.roa (raw, json)
Hash identifier: +NlZdwckXmQj3JbxWlsj0JK5Jb2/UdGfwcGVsI2PyXM=
Subject key identifier: F4:F6:BE:5C:58:46:A9:F9:1E:71:58:8E:DD:2C:1F:C3:FE:E7:54:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A34E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C8B534A69611F08A5EBAE6DAE4EC9C.roa
Signing time: Sat 11 Oct 2025 11:34:16 +0000
ROA not before: Sat 11 Oct 2025 11:34:09 +0000
ROA not after: Fri 28 Nov 2025 11:34:09 +0000
asID: 46071
IP address blocks: 154.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107342 (0x1a34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 11 11:34:09 2025 GMT
Not After : Nov 28 11:34:09 2025 GMT
Subject: CN=68ea40b8-a338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:d8:c1:6c:7e:3f:93:7c:ec:b2:91:c4:f5:
bb:9f:06:d2:fe:7a:c9:e2:bb:34:79:70:cb:4e:62:
ad:7e:d2:03:2d:29:56:22:21:3d:21:96:fa:dd:fa:
2d:1c:27:a2:b4:48:5b:6c:2f:4b:a0:f2:bd:c8:17:
e9:62:82:8d:a9:cf:3c:19:11:ec:cc:8a:32:8b:e1:
45:44:92:1a:63:e7:20:9f:36:c9:76:d7:a5:55:ae:
34:9c:b5:21:a9:d0:92:34:fb:16:01:b2:e0:f7:c1:
13:c6:f1:bf:f4:04:08:79:af:86:ea:3e:45:ef:6a:
3f:2e:35:35:25:9e:19:c9:91:7c:f2:ca:df:88:07:
5b:97:27:46:d5:00:cb:b8:36:84:c4:a5:cd:93:f9:
e0:58:ce:18:1c:6b:64:7b:73:6a:d9:54:36:e0:c4:
1c:b1:89:b4:62:90:01:5f:d5:15:c8:95:0d:2e:94:
ac:83:4d:38:8f:25:24:ec:11:1f:d2:44:7d:fa:72:
26:95:00:04:7e:bd:67:48:02:9a:ae:70:9e:be:05:
09:34:90:e1:35:0a:1f:1f:07:fb:15:91:86:5b:53:
e5:b3:73:8f:43:b7:d6:28:ed:3b:8d:8f:07:be:33:
c2:a2:81:34:34:b9:7b:39:65:f9:d5:fe:f0:90:8e:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:BE:5C:58:46:A9:F9:1E:71:58:8E:DD:2C:1F:C3:FE:E7:54:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C8B534A69611F08A5EBAE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e2:ed:24:7c:64:5f:9d:55:bd:f6:92:b9:77:6a:52:82:00:
dc:e7:14:dd:02:36:6e:bc:57:7f:42:ae:4d:a1:ca:de:dc:8e:
ed:5f:89:52:19:a9:89:fa:6b:1a:78:28:18:e2:ed:3e:4c:6f:
4d:44:36:af:38:d3:15:4c:88:b6:29:33:9f:fc:0c:f9:23:fa:
f3:32:90:bb:31:42:f4:d8:c6:e9:ef:4d:56:14:91:52:f4:38:
11:cd:3d:38:c5:60:15:32:c4:69:b2:56:47:ee:51:72:f9:3e:
6c:90:62:31:e3:f1:f8:83:ec:20:43:16:b3:44:93:f6:0b:f7:
f5:0c:c0:40:c3:72:3c:59:c7:86:66:ac:ef:5b:68:25:17:66:
01:3c:27:08:31:c0:2c:87:f6:f6:e4:76:46:f7:9d:b5:65:a5:
a2:12:d9:e7:66:40:bc:6e:f6:76:6b:40:ea:5a:22:50:08:3b:
32:d1:a9:4a:d2:da:fd:0c:a7:5c:c9:bf:47:5c:d9:a5:4c:60:
b2:da:d4:fc:89:b3:95:1b:63:e4:ac:0d:3e:cc:b4:bc:9c:79:
d5:00:eb:b0:78:aa:19:8b:66:5d:10:98:43:53:d7:f4:7c:ba:
86:97:31:74:fa:e9:d9:cf:83:e2:00:ea:30:56:53:06:d3:be:
fc:fa:2f:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaNOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDExMTEzNDA5WhcNMjUxMTI4MTEzNDA5WjAYMRYw
FAYDVQQDEw02OGVhNDBiOC1hMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsKnYwWx+P5N87LKRxPW7nwbS/nrJ4rs0eXDLTmKtftIDLSlWIiE9IZb6
3fotHCeitEhbbC9LoPK9yBfpYoKNqc88GRHszIoyi+FFRJIaY+cgnzbJdtelVa40
nLUhqdCSNPsWAbLg98ETxvG/9AQIea+G6j5F72o/LjU1JZ4ZyZF88srfiAdblydG
1QDLuDaExKXNk/ngWM4YHGtke3Nq2VQ24MQcsYm0YpABX9UVyJUNLpSsg004jyUk
7BEf0kR9+nImlQAEfr1nSAKarnCevgUJNJDhNQofHwf7FZGGW1Pls3OPQ7fWKO07
jY8HvjPCooE0NLl7OWX51f7wkI4C1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPT2
vlxYRqn5HnFYjt0sH8P+51QgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0M4QjUzNEE2OTYxMUYwOEE1RUJBRTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKyMA0GCSqGSIb3DQEB
CwUAA4IBAQC34u0kfGRfnVW99pK5d2pSggDc5xTdAjZuvFd/Qq5Nocre3I7tX4lS
GamJ+msaeCgY4u0+TG9NRDavONMVTIi2KTOf/Az5I/rzMpC7MUL02Mbp701WFJFS
9DgRzT04xWAVMsRpslZH7lFy+T5skGIx4/H4g+wgQxazRJP2C/f1DMBAw3I8WceG
ZqzvW2glF2YBPCcIMcAsh/b25HZG9521ZaWiEtnnZkC8bvZ2a0DqWiJQCDsy0alK
0tr9DKdcyb9HXNmlTGCy2tT8ibOVG2PkrA0+zLS8nHnVAOuweKoZi2ZdEJhDU9f0
fLqGlzF0+unZz4PiAOowVlMG0778+i9x
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:00 2025 by rpki-client