Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC68C8CA4E211F0B12D95E2DAE4EC9C.roa
File: 3DC68C8CA4E211F0B12D95E2DAE4EC9C.roa (raw, json)
Hash identifier: l63OiuKpUHgUU0c7IzaoN1ySDKHH0QXTyVfsjN2fyaQ=
Subject key identifier: 35:D6:44:61:3E:46:D2:D5:67:5E:31:6D:95:E5:E5:9B:47:67:AC:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC68C8CA4E211F0B12D95E2DAE4EC9C.roa
Signing time: Thu 09 Oct 2025 07:33:26 +0000
ROA not before: Thu 09 Oct 2025 07:33:18 +0000
ROA not after: Wed 05 Nov 2025 07:33:18 +0000
asID: 271988
IP address blocks: 154.88.160.0/20 maxlen: 24
154.88.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107238 (0x1a2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 07:33:18 2025 GMT
Not After : Nov 5 07:33:18 2025 GMT
Subject: CN=68e76546-329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:29:9a:96:85:e9:50:14:3c:03:7f:e7:03:
51:36:df:e2:5c:19:45:5b:a4:ec:02:e3:1c:3a:c2:
b4:d7:f9:38:f8:cc:1b:8a:36:2d:06:3f:03:71:ce:
4b:63:63:46:0b:45:ec:aa:e6:0d:9e:55:63:bf:f7:
c3:05:68:93:27:9e:be:a2:79:0f:d0:f1:a1:83:01:
dd:f7:13:7b:49:1f:1f:0d:e8:66:e4:86:e7:11:ab:
98:2e:63:46:9b:23:8f:91:e4:16:cb:1d:21:18:b4:
25:57:03:9d:48:42:af:84:0e:57:a0:29:c4:5c:25:
b4:db:84:d2:13:3e:29:c8:de:df:04:1e:61:e3:3f:
50:f8:64:ef:78:6c:0e:fa:9c:33:b0:6f:23:38:9b:
cc:1e:e2:c7:5e:96:3b:98:c7:bb:6c:21:1e:e8:05:
38:12:6f:4c:3b:62:4c:da:36:bc:6d:ad:96:8e:03:
02:6f:6e:96:69:86:dd:bd:87:78:2d:a5:fd:4b:6e:
ed:63:b6:28:af:9e:6e:dd:8d:fe:67:f0:5e:a6:d0:
c7:2e:38:95:1d:e2:78:7a:33:74:84:96:be:62:b9:
a7:01:b4:24:bf:2b:80:03:35:ba:3f:35:06:46:c5:
fc:d3:59:85:f3:94:21:35:e1:a1:44:52:07:ef:da:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D6:44:61:3E:46:D2:D5:67:5E:31:6D:95:E5:E5:9B:47:67:AC:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DC68C8CA4E211F0B12D95E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.160.0-154.88.179.255
Signature Algorithm: sha256WithRSAEncryption
59:eb:69:14:07:d4:27:a6:40:0f:57:ca:b4:db:47:64:56:42:
5d:c6:6e:49:83:6a:8e:c9:ce:15:12:d3:03:b0:0c:91:c4:4c:
ca:14:de:6c:e8:7b:0f:8f:82:a8:9c:1a:80:c3:82:96:af:b1:
99:e7:ce:d2:72:fa:d3:6a:e3:d8:55:d1:d9:d3:1a:73:e1:c2:
30:dd:5a:5f:ad:c3:fb:8e:46:62:93:e1:a9:a6:a3:a7:50:1d:
6b:ee:fe:12:86:ff:e1:0a:0b:a9:97:55:33:f8:60:02:f9:7a:
d6:f8:5b:f0:6e:6a:f5:8a:44:1f:84:c0:28:81:5e:2c:63:0b:
95:62:90:7c:46:e8:72:84:9b:8b:3b:9b:d5:37:ce:92:0e:b0:
b1:d8:59:18:6c:a0:64:65:21:88:de:bf:c7:f4:6b:21:a8:a4:
a6:06:c6:25:f2:39:d3:8e:de:6d:af:f3:c6:ae:f5:3c:5e:dc:
f3:60:dc:7a:20:71:85:a3:0b:41:5d:22:7e:91:e9:e6:22:a5:
3c:cc:0a:91:c4:8a:57:50:c2:61:b4:27:2a:ab:ef:7a:2e:4b:
c5:18:d3:0e:ae:b3:ff:ac:82:24:72:eb:04:b5:fb:b1:f4:e8:
0a:2c:35:24:b4:09:bd:f3:1d:2c:5d:a4:89:c0:96:c3:5c:03:
2a:cc:06:02
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaLmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA5MDczMzE4WhcNMjUxMTA1MDczMzE4WjAYMRYw
FAYDVQQDEw02OGU3NjU0Ni0zMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuLgpmpaF6VAUPAN/5wNRNt/iXBlFW6TsAuMcOsK01/k4+MwbijYtBj8D
cc5LY2NGC0XsquYNnlVjv/fDBWiTJ56+onkP0PGhgwHd9xN7SR8fDehm5IbnEauY
LmNGmyOPkeQWyx0hGLQlVwOdSEKvhA5XoCnEXCW024TSEz4pyN7fBB5h4z9Q+GTv
eGwO+pwzsG8jOJvMHuLHXpY7mMe7bCEe6AU4Em9MO2JM2ja8ba2WjgMCb26WaYbd
vYd4LaX9S27tY7Yor55u3Y3+Z/BeptDHLjiVHeJ4ejN0hJa+YrmnAbQkvyuAAzW6
PzUGRsX801mF85QhNeGhRFIH79o0ZwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDXW
RGE+RtLVZ14xbZXl5ZtHZ6wQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zREM2OEM4Q0E0RTIxMUYwQjEyRDk1RTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWaWKADBAKaWLAwDQYJ
KoZIhvcNAQELBQADggEBAFnraRQH1CemQA9XyrTbR2RWQl3GbkmDao7JzhUS0wOw
DJHETMoU3mzoew+PgqicGoDDgpavsZnnztJy+tNq49hV0dnTGnPhwjDdWl+tw/uO
RmKT4ammo6dQHWvu/hKG/+EKC6mXVTP4YAL5etb4W/BuavWKRB+EwCiBXixjC5Vi
kHxG6HKEm4s7m9U3zpIOsLHYWRhsoGRlIYjev8f0ayGopKYGxiXyOdOO3m2v88au
9Txe3PNg3HogcYWjC0FdIn6R6eYipTzMCpHEildQwmG0Jyqr73ouS8UY0w6us/+s
giRy6wS1+7H06AosNSS0Cb3zHSxdpInAlsNcAyrMBgI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:15 2025 by rpki-client