Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D6E2E29AAA11F0A6C9C3A3DAE4EC9C.roa
File: 45D6E2E29AAA11F0A6C9C3A3DAE4EC9C.roa (raw, json)
Hash identifier: 6jnC0dp/IA245jCP5bKsVv5g7IPSvGofKi5J46LwPEM=
Subject key identifier: DE:5F:A4:5A:6E:C6:C9:B9:F3:7D:2C:FE:4F:23:01:59:7C:4E:A0:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A10C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D6E2E29AAA11F0A6C9C3A3DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:27:36 +0000
ROA not before: Fri 26 Sep 2025 07:27:31 +0000
ROA not after: Tue 28 Oct 2025 07:27:31 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106764 (0x1a10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 07:27:31 2025 GMT
Not After : Oct 28 07:27:31 2025 GMT
Subject: CN=68d64068-4221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:59:52:f5:c2:70:87:f4:a6:ba:67:48:5c:
e7:f8:77:e7:c6:19:32:d8:0a:48:06:d0:7d:fd:cc:
91:84:e3:9d:3d:74:4d:1b:e8:96:e4:af:7c:b5:33:
39:91:aa:82:ba:7f:12:f2:97:50:10:37:b4:f4:27:
81:95:73:4d:a5:b8:d9:db:57:d1:39:cd:7d:4d:bd:
52:8c:aa:f3:d2:52:28:86:a2:8d:85:72:22:1a:ae:
90:83:4a:8d:c3:6a:5c:fc:9e:42:a3:fd:37:91:fb:
d1:5e:f1:42:b5:21:8d:e2:15:13:53:10:4f:7c:c7:
c9:61:ec:33:6c:5e:8f:c1:a3:ec:22:01:24:01:4c:
c1:46:2e:9d:e7:a7:c3:0c:61:15:e4:8f:8b:06:cd:
c1:9c:7c:c6:44:8c:86:58:1e:91:d8:1a:0a:14:e0:
d5:c1:9e:51:fb:d6:84:cc:64:dd:04:eb:1d:75:7d:
44:af:38:6b:6e:14:37:62:10:1e:ed:21:aa:aa:b7:
2c:f1:eb:0b:dc:7f:00:80:25:96:79:f1:34:07:56:
09:3d:c7:9f:ec:d2:f0:89:34:37:42:76:6c:bb:5d:
86:9b:12:97:44:bb:d0:27:a4:27:2b:cb:90:fa:e6:
53:84:3f:ac:55:3a:09:b1:df:00:09:45:c6:d3:7a:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:A4:5A:6E:C6:C9:B9:F3:7D:2C:FE:4F:23:01:59:7C:4E:A0:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45D6E2E29AAA11F0A6C9C3A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2b:97:70:d3:49:c5:57:86:30:15:7f:3b:61:e1:0b:62:5f:
ec:de:a3:cc:2e:df:d1:09:f4:78:6a:1b:c3:5e:dc:56:98:64:
25:8c:2e:70:89:a1:7a:56:cb:3c:18:26:c9:55:37:45:e9:2b:
7f:1f:22:a1:e1:08:e2:a7:72:97:a9:07:98:35:e5:a6:b2:d7:
de:8d:ab:b7:a0:ac:cd:83:da:e5:ef:26:0b:bb:bb:bd:73:54:
92:eb:51:08:46:60:71:20:93:69:f9:86:cf:bb:e0:e8:53:93:
09:26:b5:3a:de:14:50:ae:d2:c8:ea:2c:7d:5e:1b:67:f9:0b:
49:66:3b:3f:91:62:0f:be:c2:ed:19:ad:c0:69:94:a3:e2:cb:
00:7f:72:f0:d1:ab:56:d6:5b:95:6f:0e:97:99:fb:01:a6:f3:
b8:b0:02:9c:26:9c:7e:77:ed:ac:2a:09:d4:5d:20:7e:53:3b:
0b:af:b8:34:e3:0b:9a:e1:1b:83:48:2f:89:9f:38:bc:d5:ee:
4c:ad:73:e6:35:2a:be:fa:e5:c7:9b:63:84:bf:ea:12:3f:f1:
80:b7:ea:e2:2f:74:c1:29:fc:b7:4d:e9:21:e4:09:d7:bc:ad:
9f:69:e6:51:05:21:66:2c:dc:2b:69:8c:86:71:3e:95:cb:3c:
de:b0:61:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaEMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI2MDcyNzMxWhcNMjUxMDI4MDcyNzMxWjAYMRYw
FAYDVQQDEw02OGQ2NDA2OC00MjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqYRZUvXCcIf0prpnSFzn+Hfnxhky2ApIBtB9/cyRhOOdPXRNG+iW5K98
tTM5kaqCun8S8pdQEDe09CeBlXNNpbjZ21fROc19Tb1SjKrz0lIohqKNhXIiGq6Q
g0qNw2pc/J5Co/03kfvRXvFCtSGN4hUTUxBPfMfJYewzbF6PwaPsIgEkAUzBRi6d
56fDDGEV5I+LBs3BnHzGRIyGWB6R2BoKFODVwZ5R+9aEzGTdBOsddX1ErzhrbhQ3
YhAe7SGqqrcs8esL3H8AgCWWefE0B1YJPcef7NLwiTQ3QnZsu12GmxKXRLvQJ6Qn
K8uQ+uZThD+sVToJsd8ACUXG03qZywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN5f
pFpuxsm5830s/k8jAVl8TqAyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NUQ2RTJFMjlBQUExMUYwQTZDOUMzQTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJFMA0GCSqGSIb3DQEB
CwUAA4IBAQA+K5dw00nFV4YwFX87YeELYl/s3qPMLt/RCfR4ahvDXtxWmGQljC5w
iaF6Vss8GCbJVTdF6St/HyKh4Qjip3KXqQeYNeWmstfejau3oKzNg9rl7yYLu7u9
c1SS61EIRmBxIJNp+YbPu+DoU5MJJrU63hRQrtLI6ix9Xhtn+QtJZjs/kWIPvsLt
Ga3AaZSj4ssAf3Lw0atW1luVbw6XmfsBpvO4sAKcJpx+d+2sKgnUXSB+UzsLr7g0
4wua4RuDSC+Jnzi81e5MrXPmNSq++uXHm2OEv+oSP/GAt+riL3TBKfy3Tekh5AnX
vK2faeZRBSFmLNwraYyGcT6VyzzesGFd
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:04 2025 by rpki-client