Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4481924A92C911F0ACFAE0A0DAE4EC9C.roa
File: 4481924A92C911F0ACFAE0A0DAE4EC9C.roa (raw, json)
Hash identifier: C2puFQOeuEWiBE4j4chAtqiiignHQrbdEqYvbSJx8LY=
Subject key identifier: 1E:2A:BF:B9:D2:D3:51:5E:EC:96:84:52:02:75:23:C8:DC:B4:76:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4481924A92C911F0ACFAE0A0DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 06:49:19 +0000
ROA not before: Tue 16 Sep 2025 06:49:13 +0000
ROA not after: Wed 17 Dec 2025 06:49:13 +0000
asID: 142002
IP address blocks: 154.198.160.0/24 maxlen: 24
154.198.161.0/24 maxlen: 24
154.198.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106431 (0x19fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 06:49:13 2025 GMT
Not After : Dec 17 06:49:13 2025 GMT
Subject: CN=68c9086f-0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:09:a7:8a:95:c2:43:0e:6b:4f:c4:b0:40:
23:08:bd:5f:2a:69:e0:88:b7:c7:29:f0:45:a3:4b:
e4:be:7c:69:72:81:08:c8:01:2c:5a:0a:2e:b2:d9:
14:42:85:93:2a:2d:21:32:a0:15:90:bb:32:89:f1:
01:73:5a:cf:22:2a:2e:20:0e:fa:38:2e:4a:a2:05:
20:a1:ca:88:97:76:31:ce:44:40:83:aa:98:11:4a:
ec:c8:cc:c0:0c:39:ed:4e:c8:fb:fe:14:20:0f:4a:
d7:1b:87:7b:6f:9f:b1:5c:f1:ac:48:89:a6:78:c1:
e6:25:7d:e4:3a:55:5a:e9:49:e0:c1:74:49:9b:f9:
f5:e8:4b:8a:30:b2:d0:5d:24:62:27:62:e2:17:ca:
5b:6f:67:3a:a6:d5:c5:e8:b2:56:e6:66:4f:e7:aa:
5a:8d:3e:94:15:6b:1c:1e:1f:df:7f:70:78:da:95:
c0:f2:28:d4:57:90:c2:d1:96:38:01:8d:91:92:a6:
4f:79:52:43:c8:be:62:00:c5:09:1a:40:94:8d:b8:
4e:02:20:18:d2:57:b1:30:71:3f:07:3a:b6:b1:b5:
81:b3:2c:f0:52:af:16:ac:62:ca:8a:19:16:21:9c:
57:1d:2f:cf:16:2f:10:17:42:ee:66:58:eb:40:14:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:BF:B9:D2:D3:51:5E:EC:96:84:52:02:75:23:C8:DC:B4:76:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4481924A92C911F0ACFAE0A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.160.0-154.198.162.255
Signature Algorithm: sha256WithRSAEncryption
bd:18:7b:d6:5e:e8:2d:6f:ed:d3:6b:d5:1e:bb:13:f4:f7:a1:
68:de:d2:6b:a0:b4:c5:bd:47:e2:50:dc:0e:27:10:48:93:d1:
e3:c4:42:d1:e8:53:4d:b7:5c:20:42:64:72:61:b3:6e:77:8a:
0e:6a:94:5a:19:b7:5e:81:bd:e2:22:8b:ef:35:69:99:64:c8:
59:db:18:34:64:99:70:58:1a:b0:77:e4:37:71:2c:f1:e7:c3:
f5:95:a8:95:51:ef:8e:ce:3a:54:77:5c:8d:29:c1:d0:3f:d0:
98:f0:e8:65:d7:40:27:1c:f2:31:d2:9b:ee:4e:f9:9c:96:67:
f6:9d:93:a1:bc:30:f6:a0:da:64:f3:81:4c:a0:67:96:71:e1:
7a:3b:70:59:75:4e:a1:c6:68:00:a6:75:23:ed:9a:e5:86:b5:
94:04:b0:05:c9:b6:09:e0:c7:b5:55:27:b1:95:9c:9a:d1:90:
47:e5:b6:c7:17:d3:a1:66:56:8f:cd:a9:61:a1:63:75:88:66:
91:dd:f5:5d:f5:18:c5:73:bb:8f:39:a0:a9:b0:15:e8:3d:77:
d1:a1:6c:a2:2a:78:e8:04:74:cd:ab:57:e7:7f:62:a4:d5:96:
38:20:91:71:e6:36:57:06:a7:d2:f5:d2:e5:77:92:ae:a7:c9:
ae:05:09:97
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAZ+/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTE2MDY0OTEzWhcNMjUxMjE3MDY0OTEzWjAYMRYw
FAYDVQQDEw02OGM5MDg2Zi0wZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu/0Jp4qVwkMOa0/EsEAjCL1fKmngiLfHKfBFo0vkvnxpcoEIyAEsWgou
stkUQoWTKi0hMqAVkLsyifEBc1rPIiouIA76OC5KogUgocqIl3YxzkRAg6qYEUrs
yMzADDntTsj7/hQgD0rXG4d7b5+xXPGsSImmeMHmJX3kOlVa6UngwXRJm/n16EuK
MLLQXSRiJ2LiF8pbb2c6ptXF6LJW5mZP56pajT6UFWscHh/ff3B42pXA8ijUV5DC
0ZY4AY2RkqZPeVJDyL5iAMUJGkCUjbhOAiAY0lexMHE/Bzq2sbWBsyzwUq8WrGLK
ihkWIZxXHS/PFi8QF0LuZljrQBRuwwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFB4q
v7nS01Fe7JaEUgJ1I8jctHaSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDgxOTI0QTkyQzkxMUYwQUNGQUUwQTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWaxqADBACaxqIwDQYJ
KoZIhvcNAQELBQADggEBAL0Ye9Ze6C1v7dNr1R67E/T3oWje0mugtMW9R+JQ3A4n
EEiT0ePEQtHoU023XCBCZHJhs253ig5qlFoZt16BveIii+81aZlkyFnbGDRkmXBY
GrB35DdxLPHnw/WVqJVR747OOlR3XI0pwdA/0Jjw6GXXQCcc8jHSm+5O+ZyWZ/ad
k6G8MPag2mTzgUygZ5Zx4Xo7cFl1TqHGaACmdSPtmuWGtZQEsAXJtgngx7VVJ7GV
nJrRkEfltscX06FmVo/NqWGhY3WIZpHd9V31GMVzu485oKmwFeg9d9GhbKIqeOgE
dM2rV+d/YqTVljggkXHmNlcGp9L10uV3kq6nya4FCZc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client