Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46462C64844911F0BB499BB6DAE4EC9C.roa
File: 46462C64844911F0BB499BB6DAE4EC9C.roa (raw, json)
Hash identifier: W6DHghaSPeNG50TwWloD/E0zIYqj9wy71IUuXPZDGwE=
Subject key identifier: 82:01:6D:80:0A:2E:AE:A5:D2:7C:0D:03:0A:07:44:F3:C8:9E:7A:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46462C64844911F0BB499BB6DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 19:57:56 +0000
ROA not before: Thu 28 Aug 2025 19:57:41 +0000
ROA not after: Fri 13 Feb 2026 19:57:41 +0000
asID: 63199
IP address blocks: 154.208.131.0/24 maxlen: 24
154.209.72.0/21 maxlen: 24
154.209.88.0/22 maxlen: 24
154.223.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105003 (0x19a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 19:57:41 2025 GMT
Not After : Feb 13 19:57:41 2026 GMT
Subject: CN=68b0b4c4-c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:c8:39:89:ed:37:76:c8:1d:56:2b:63:02:
e3:f9:6e:8f:b8:87:00:e6:5a:b7:5f:84:e3:5b:cc:
11:68:1d:3a:d2:8b:48:f0:ab:6b:bf:a1:9a:c0:50:
3e:b8:bc:00:e7:f5:47:dd:86:c7:8b:ec:02:6f:71:
76:9d:9c:b5:a6:2e:71:cf:67:31:f8:cf:59:92:01:
e7:a1:e5:8c:55:51:63:0c:a7:e3:8e:92:64:73:0c:
96:06:81:ae:cc:30:da:3e:f7:82:72:39:a4:3a:85:
4d:c0:42:97:ee:cb:a1:b9:5a:09:db:12:36:6a:26:
3a:ec:03:36:93:fa:76:18:94:81:2c:67:50:5b:e2:
b6:d0:7c:f4:36:c3:f7:a8:86:5e:d8:c5:a9:72:d9:
97:0c:61:d0:4e:25:ec:08:1c:02:de:db:d8:65:57:
04:dc:3f:d9:ca:24:12:a1:ae:c3:08:f3:e4:fc:c7:
01:d2:4e:f9:64:be:9c:30:a9:e7:16:5c:d3:a4:ad:
33:54:af:af:b4:4e:da:67:4e:99:af:96:bb:e4:f7:
53:4c:7f:88:25:92:c7:33:f8:3e:01:46:0a:6c:4e:
06:fe:75:c6:b5:d6:f0:ce:2e:1f:81:ff:ee:d9:b6:
19:bf:a1:9e:3b:cb:66:c5:17:3c:f1:82:a9:0b:ec:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:6D:80:0A:2E:AE:A5:D2:7C:0D:03:0A:07:44:F3:C8:9E:7A:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46462C64844911F0BB499BB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.131.0/24
154.209.72.0/21
154.209.88.0/22
154.223.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ec:88:b9:d4:17:2c:ca:8b:a5:f1:59:ae:a2:12:23:b3:34:
55:68:2a:14:dc:bd:2b:23:4e:f1:b6:2f:57:65:55:21:c9:17:
e2:18:d8:2b:46:64:54:68:5d:ff:b1:f3:d1:29:d3:c4:28:ae:
49:ee:8d:99:a7:1b:42:1d:dd:af:b6:fc:8b:87:d4:d9:34:d5:
f8:81:a7:77:d8:65:26:40:5d:96:9f:c7:a9:83:47:2e:f7:92:
29:b3:c5:09:a6:36:8b:51:7d:8b:a0:07:b2:4e:d0:81:b2:6b:
40:6f:63:bf:dc:53:54:ff:4f:3e:2f:b9:fb:8d:18:d4:63:97:
27:f5:9a:21:0f:93:e1:06:98:c5:89:4f:47:77:95:7d:84:2a:
06:16:a4:f1:92:d2:90:29:9e:8b:43:61:de:e4:70:60:de:aa:
85:ec:52:8b:68:59:14:f1:d2:0b:64:13:11:41:43:4b:77:67:
c4:81:66:6b:54:da:2b:c1:c5:01:bb:20:58:71:74:4d:15:f7:
96:7e:ce:32:7c:6a:e0:ce:ed:46:07:70:91:99:28:4f:b8:6a:
b9:7c:b9:aa:d3:b4:1d:a7:41:7b:b4:79:4f:f9:0d:e9:c0:63:
d4:81:1b:5c:9f:74:1b:75:98:5d:a6:22:b3:f8:e1:c9:ea:0c:
6f:84:7b:85
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAZorMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI4MTk1NzQxWhcNMjYwMjEzMTk1NzQxWjAYMRYw
FAYDVQQDEw02OGIwYjRjNC1jODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAthTIOYntN3bIHVYrYwLj+W6PuIcA5lq3X4TjW8wRaB060otI8Ktrv6Ga
wFA+uLwA5/VH3YbHi+wCb3F2nZy1pi5xz2cx+M9ZkgHnoeWMVVFjDKfjjpJkcwyW
BoGuzDDaPveCcjmkOoVNwEKX7suhuVoJ2xI2aiY67AM2k/p2GJSBLGdQW+K20Hz0
NsP3qIZe2MWpctmXDGHQTiXsCBwC3tvYZVcE3D/ZyiQSoa7DCPPk/McB0k75ZL6c
MKnnFlzTpK0zVK+vtE7aZ06Zr5a75PdTTH+IJZLHM/g+AUYKbE4G/nXGtdbwzi4f
gf/u2bYZv6GeO8tmxRc88YKpC+xN7wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFIIB
bYAKLq6l0nwNAwoHRPPInno2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NjQ2MkM2NDg0NDkxMUYwQkI0OTlCQjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmtCDAwQDmtFIAwQCmtFY
AwQCmt+kMA0GCSqGSIb3DQEBCwUAA4IBAQCM7Ii51Bcsyoul8VmuohIjszRVaCoU
3L0rI07xti9XZVUhyRfiGNgrRmRUaF3/sfPRKdPEKK5J7o2ZpxtCHd2vtvyLh9TZ
NNX4gad32GUmQF2Wn8epg0cu95Ips8UJpjaLUX2LoAeyTtCBsmtAb2O/3FNU/08+
L7n7jRjUY5cn9ZohD5PhBpjFiU9Hd5V9hCoGFqTxktKQKZ6LQ2He5HBg3qqF7FKL
aFkU8dILZBMRQUNLd2fEgWZrVNorwcUBuyBYcXRNFfeWfs4yfGrgzu1GB3CRmShP
uGq5fLmq07Qdp0F7tHlP+Q3pwGPUgRtcn3QbdZhdpiKz+OHJ6gxvhHuF
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:36 2025 by rpki-client