Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424F4934920D11F0A1B073DEDAE4EC9C.roa
File: 424F4934920D11F0A1B073DEDAE4EC9C.roa (raw, json)
Hash identifier: ByDx4/Bm1ocGveW8nvtnGdXMJiNrHLV9MoZ7um+kdXI=
Subject key identifier: DC:61:C1:95:86:69:36:B6:89:A9:31:76:C4:E1:F8:26:85:45:32:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424F4934920D11F0A1B073DEDAE4EC9C.roa
Signing time: Mon 15 Sep 2025 08:23:30 +0000
ROA not before: Mon 15 Sep 2025 08:23:24 +0000
ROA not after: Tue 21 Oct 2025 08:23:24 +0000
asID: 18779
IP address blocks: 154.205.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106412 (0x19fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:23:24 2025 GMT
Not After : Oct 21 08:23:24 2025 GMT
Subject: CN=68c7cd01-ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:15:3e:13:ea:fc:b2:8c:06:42:6e:61:77:
d2:dc:37:d9:a7:d0:32:b1:f4:1c:48:b4:1d:7f:5f:
44:cc:45:c5:48:1c:3f:b8:36:25:9d:4b:1e:cb:38:
94:65:7c:26:4c:c8:52:bf:45:d5:32:91:bf:85:cc:
a9:30:b5:17:0a:c2:6c:fe:8d:e6:92:44:27:b8:99:
a4:7b:80:d0:90:0f:c2:52:1c:88:32:03:73:fb:3e:
c1:75:ab:33:d4:63:78:34:fc:c9:a5:ea:74:51:8e:
1d:c4:d8:27:33:c3:41:4a:6e:3e:4f:6a:98:61:b9:
92:d7:8d:e3:cc:46:a4:61:93:56:d2:33:c4:52:b5:
0c:39:f9:16:2c:11:c4:e2:91:55:7d:5a:94:83:3d:
9a:72:a8:05:f3:93:f9:39:97:42:8d:f9:27:98:7a:
8d:c3:53:f0:9c:a0:01:19:a4:e9:3c:9e:67:0c:23:
0e:dc:47:73:6e:1d:59:50:08:7c:16:81:42:6f:eb:
81:b4:61:aa:22:ae:04:9a:25:fe:d7:1c:b9:b4:32:
26:08:3f:00:cf:a8:97:5b:e5:f4:ed:46:79:4e:53:
7b:b2:a8:34:17:ed:6b:b3:cc:76:02:c6:dd:59:7d:
fb:f6:d2:c8:2f:95:3a:61:e5:61:bd:41:b1:da:11:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:C1:95:86:69:36:B6:89:A9:31:76:C4:E1:F8:26:85:45:32:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/424F4934920D11F0A1B073DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:16:79:7d:16:b2:a1:09:aa:3b:94:65:f9:03:ed:eb:b8:a6:
67:a8:fd:8c:5e:b3:bc:ed:54:b2:f3:66:86:ce:35:48:9c:8d:
e2:d1:74:15:2a:3b:53:a0:72:08:8d:38:0a:73:54:0d:1b:ca:
80:5d:0b:c6:79:83:82:ba:e1:bb:fd:8c:0d:5b:c0:92:29:5c:
f8:a2:e3:55:7f:a4:25:0d:94:99:16:db:90:05:82:d6:14:18:
14:59:9a:cc:bb:b0:7b:ad:17:c4:6a:b2:98:d1:0e:b8:2e:9b:
38:d1:2a:12:70:e7:b0:29:d2:1a:98:c6:17:3c:e1:91:40:07:
45:fb:d2:1b:d6:d3:d5:40:24:95:30:d5:87:ec:81:73:04:55:
6a:37:d3:c0:6a:42:32:58:51:71:5e:9f:78:ee:9e:20:86:0a:
d5:32:bf:a6:c3:3f:86:5c:43:79:e8:8f:dc:55:5e:7d:53:23:
a0:59:45:36:08:5c:94:61:9e:9e:ac:73:a3:d0:9d:b3:07:a1:
3f:3b:29:9a:d5:81:7e:37:e6:3b:6c:9a:05:01:dc:8d:a5:f9:
ef:0a:22:e2:39:6e:ac:a8:76:c5:97:92:68:9c:75:4d:e2:4d:
2b:ce:81:94:2e:bc:be:a3:78:bb:f4:76:76:99:31:52:dd:93:
b8:2e:bc:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ+sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTE1MDgyMzI0WhcNMjUxMDIxMDgyMzI0WjAYMRYw
FAYDVQQDEw02OGM3Y2QwMS1hYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIkVPhPq/LKMBkJuYXfS3DfZp9AysfQcSLQdf19EzEXFSBw/uDYlnUse
yziUZXwmTMhSv0XVMpG/hcypMLUXCsJs/o3mkkQnuJmke4DQkA/CUhyIMgNz+z7B
dasz1GN4NPzJpep0UY4dxNgnM8NBSm4+T2qYYbmS143jzEakYZNW0jPEUrUMOfkW
LBHE4pFVfVqUgz2acqgF85P5OZdCjfknmHqNw1PwnKABGaTpPJ5nDCMO3Edzbh1Z
UAh8FoFCb+uBtGGqIq4EmiX+1xy5tDImCD8Az6iXW+X07UZ5TlN7sqg0F+1rs8x2
AsbdWX379tLIL5U6YeVhvUGx2hGcYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNxh
wZWGaTa2iakxdsTh+CaFRTJTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjRGNDkzNDkyMEQxMUYwQTFCMDczREVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0eMA0GCSqGSIb3DQEB
CwUAA4IBAQBqFnl9FrKhCao7lGX5A+3ruKZnqP2MXrO87VSy82aGzjVInI3i0XQV
KjtToHIIjTgKc1QNG8qAXQvGeYOCuuG7/YwNW8CSKVz4ouNVf6QlDZSZFtuQBYLW
FBgUWZrMu7B7rRfEarKY0Q64Lps40SoScOewKdIamMYXPOGRQAdF+9Ib1tPVQCSV
MNWH7IFzBFVqN9PAakIyWFFxXp947p4ghgrVMr+mwz+GXEN56I/cVV59UyOgWUU2
CFyUYZ6erHOj0J2zB6E/Oyma1YF+N+Y7bJoFAdyNpfnvCiLiOW6sqHbFl5JonHVN
4k0rzoGULry+o3i79HZ2mTFS3ZO4LrwN
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:48 2025 by rpki-client