Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5330CFB4997111F0957702AADAE4EC9C.roa
File: 5330CFB4997111F0957702AADAE4EC9C.roa (raw, json)
Hash identifier: Y4gaBbybTb+k2aa3TL3ZLWnE1J7l3EQ606s2E43GxKU=
Subject key identifier: 63:18:9A:D5:1A:13:BB:29:FB:7B:9B:08:90:E5:0C:64:E4:4B:4E:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5330CFB4997111F0957702AADAE4EC9C.roa
Signing time: Wed 24 Sep 2025 18:07:26 +0000
ROA not before: Wed 24 Sep 2025 18:07:17 +0000
ROA not after: Thu 30 Oct 2025 18:07:17 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106664 (0x1a0a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 18:07:17 2025 GMT
Not After : Oct 30 18:07:17 2025 GMT
Subject: CN=68d4335e-f3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:92:e4:40:d7:d6:96:20:5e:31:f6:be:24:
f1:8d:b1:36:bf:51:f1:a0:3a:42:29:43:8f:8c:58:
82:e5:17:58:04:5c:14:0a:9e:94:01:9c:49:fb:16:
fa:81:38:4f:82:ed:1c:c3:f4:3f:ee:91:cd:03:74:
8b:bc:ca:37:de:0c:27:c4:90:28:ac:80:bc:46:35:
4c:9e:5a:1b:a8:3a:9b:57:b8:de:37:37:4f:8a:61:
2d:e1:49:f8:03:8c:42:5b:90:d5:d8:45:80:27:11:
b3:8b:8c:20:42:e6:e9:0f:07:af:2a:d4:81:2e:c3:
53:49:2f:53:ef:e5:77:40:16:a2:cd:7b:65:f1:79:
f0:7d:09:78:a3:5e:40:53:c5:c4:3a:0d:6e:63:fd:
2b:5b:4c:cc:75:4f:bb:1e:1d:fa:a2:81:9c:ca:5e:
5e:56:e8:38:5f:c0:75:5e:51:1c:4d:fa:5d:ad:c2:
b7:be:d9:b7:35:be:a1:3b:8d:c1:7d:b4:96:b4:43:
82:08:bb:50:16:2c:a8:db:58:f1:4b:16:e3:64:1d:
b2:46:32:55:ea:7e:67:85:89:12:f4:3e:09:d6:5b:
c7:34:ce:4b:68:0c:32:f2:75:23:1c:45:36:c4:d8:
0a:89:ee:09:8a:f5:6c:45:bc:fe:81:63:97:1f:88:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:9A:D5:1A:13:BB:29:FB:7B:9B:08:90:E5:0C:64:E4:4B:4E:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5330CFB4997111F0957702AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
62:ce:19:fd:5c:fa:97:5c:d5:35:6b:5f:3d:c7:ab:e7:11:cf:
6a:58:ad:84:32:5e:12:5d:60:bd:11:94:00:94:62:98:fa:87:
dd:91:11:93:03:9f:b7:d6:e8:3e:9d:3f:fb:60:3e:a1:d0:7b:
d6:09:dc:dc:48:76:c2:51:af:54:4c:49:09:c2:2a:ce:27:cf:
86:6b:a4:97:a1:73:44:54:21:73:4e:24:a2:51:78:a6:c6:66:
f9:6b:6d:82:ad:8f:fe:de:ed:38:fe:8a:b0:69:9a:5d:51:57:
b1:7f:20:35:4a:62:c7:d7:77:36:50:5c:e7:9d:68:1a:d9:03:
3c:61:34:74:5c:1f:4a:cc:ff:23:2d:fc:c5:7a:c6:77:80:59:
4e:ce:ff:1f:e8:99:6d:c6:9a:34:17:19:44:da:14:2c:b7:de:
87:02:60:14:91:cb:e4:14:c7:2a:55:70:b1:b4:31:b1:59:c0:
18:6d:3a:49:b5:48:f1:f3:a6:d5:26:73:ad:0c:a2:13:eb:bc:
f0:cb:42:ca:fd:2d:2c:14:70:67:c6:6d:b6:69:e2:2e:52:2b:
bb:d2:af:54:9e:cc:b7:72:6c:e6:ec:df:e7:9c:3b:4e:1e:2a:
cd:5f:28:49:a9:93:4e:76:dd:78:30:5b:0e:58:17:cb:aa:ed:
a6:27:37:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaCoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MTgwNzE3WhcNMjUxMDMwMTgwNzE3WjAYMRYw
FAYDVQQDEw02OGQ0MzM1ZS1mM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3MKS5EDX1pYgXjH2viTxjbE2v1HxoDpCKUOPjFiC5RdYBFwUCp6UAZxJ
+xb6gThPgu0cw/Q/7pHNA3SLvMo33gwnxJAorIC8RjVMnlobqDqbV7jeNzdPimEt
4Un4A4xCW5DV2EWAJxGzi4wgQubpDwevKtSBLsNTSS9T7+V3QBaizXtl8XnwfQl4
o15AU8XEOg1uY/0rW0zMdU+7Hh36ooGcyl5eVug4X8B1XlEcTfpdrcK3vtm3Nb6h
O43BfbSWtEOCCLtQFiyo21jxSxbjZB2yRjJV6n5nhYkS9D4J1lvHNM5LaAwy8nUj
HEU2xNgKie4JivVsRbz+gWOXH4ijUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGMY
mtUaE7sp+3ubCJDlDGTkS07jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzMwQ0ZCNDk5NzExMUYwOTU3NzAyQUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBizhn9XPqXXNU1a189x6vnEc9qWK2EMl4SXWC9EZQAlGKY+ofdkRGT
A5+31ug+nT/7YD6h0HvWCdzcSHbCUa9UTEkJwirOJ8+Ga6SXoXNEVCFzTiSiUXim
xmb5a22CrY/+3u04/oqwaZpdUVexfyA1SmLH13c2UFznnWga2QM8YTR0XB9KzP8j
LfzFesZ3gFlOzv8f6Jltxpo0FxlE2hQst96HAmAUkcvkFMcqVXCxtDGxWcAYbTpJ
tUjx86bVJnOtDKIT67zwy0LK/S0sFHBnxm22aeIuUiu70q9Unsy3cmzm7N/nnDtO
HirNXyhJqZNOdt14MFsOWBfLqu2mJzet
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:20 2025 by rpki-client