Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558442468A8011F098B431B6DAE4EC9C.roa
File: 558442468A8011F098B431B6DAE4EC9C.roa (raw, json)
Hash identifier: 44Yeia1Os8SfQMHOWNDGsIkGhgkQf3g1AMzVfX/t9sM=
Subject key identifier: C4:9A:93:CA:B5:AF:03:58:1E:58:D8:C8:F0:F3:2E:A3:B8:DA:77:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558442468A8011F098B431B6DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 17:47:05 +0000
ROA not before: Fri 05 Sep 2025 17:46:58 +0000
ROA not after: Fri 28 Nov 2025 17:46:58 +0000
asID: 18229
IP address blocks: 154.210.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106048 (0x19e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 17:46:58 2025 GMT
Not After : Nov 28 17:46:58 2025 GMT
Subject: CN=68bb2219-5d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:3c:94:b0:a3:97:e5:7b:3c:ed:a6:c7:81:
18:f5:a4:a8:51:bf:48:e9:be:36:1f:c2:81:a8:9a:
34:f0:5a:00:71:41:9d:db:d0:92:10:7b:07:36:33:
43:62:61:32:8a:26:d4:31:8f:5a:04:b4:23:54:9d:
e0:4e:e3:58:a3:5b:a3:b1:be:32:ff:1b:ea:81:92:
f4:6a:a3:86:38:df:3d:90:25:9b:24:62:ec:d4:25:
72:f0:f4:45:f5:86:cb:6b:c3:86:35:4b:1a:98:39:
a9:4e:22:43:16:51:3c:11:dc:70:54:e3:97:46:a5:
29:a9:59:42:65:09:0b:55:ef:2c:ef:3c:0c:bf:5d:
3f:82:ad:3d:42:c0:87:ee:85:22:f0:36:72:4d:b6:
5a:9e:2e:90:5d:ed:f9:da:4f:d0:26:e7:e3:4e:48:
8c:72:55:c2:bc:1e:b4:e9:c2:65:39:89:e6:48:41:
51:6b:04:e5:f2:a2:39:b3:15:f2:04:79:02:af:a5:
95:72:ed:1c:75:41:f8:ed:c6:48:4b:16:30:6a:0e:
5b:aa:0f:f9:52:5c:bd:d2:8a:63:9a:b2:94:99:2f:
7e:82:bb:5a:b1:d4:9b:54:95:8b:dc:25:29:9f:af:
c3:c5:c8:42:d4:fc:35:e0:a8:ea:8c:23:17:a0:c1:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:93:CA:B5:AF:03:58:1E:58:D8:C8:F0:F3:2E:A3:B8:DA:77:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/558442468A8011F098B431B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f6:f2:7f:ba:b2:5d:8b:00:db:b4:43:f4:e2:29:34:0a:f5:
aa:76:0a:e6:4e:29:b8:9a:f8:5a:7f:25:b0:62:98:55:cc:c7:
d7:95:27:5f:e9:a4:35:19:e6:f0:b2:9d:51:05:f4:01:77:c6:
e5:8b:1c:ec:de:b5:86:35:3b:0c:5f:fd:0c:c5:3c:8d:d4:12:
6d:3d:58:59:9d:96:18:03:29:7d:5e:4a:be:ef:99:a2:9d:09:
d1:9f:09:9a:3f:4f:c9:da:92:b5:b5:7d:eb:3f:a7:d9:ea:d1:
7c:c4:f9:82:99:fc:18:d7:22:98:40:99:c9:2a:c8:a4:41:0a:
52:32:78:d6:db:90:da:7f:a4:e1:30:29:c7:cc:17:c3:8d:1c:
56:50:00:73:1a:20:a7:0d:6b:ec:db:36:bd:77:21:51:db:ab:
15:12:29:c0:b2:2d:2a:45:61:2d:fe:eb:0c:2b:3f:52:4e:ce:
f8:84:f7:29:ef:7b:e6:19:6b:c5:fd:3f:0a:62:ad:6c:dc:ad:
fc:68:4e:a9:79:6a:66:e4:98:0e:cb:15:60:e2:8d:a3:50:ff:
70:d0:d6:9c:3f:28:2f:3a:35:46:3b:39:4c:06:66:85:54:06:
08:68:78:29:76:5c:7a:ed:a6:42:cb:01:7e:22:90:54:d4:af:
27:df:31:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ5AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA1MTc0NjU4WhcNMjUxMTI4MTc0NjU4WjAYMRYw
FAYDVQQDEw02OGJiMjIxOS01ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyP08lLCjl+V7PO2mx4EY9aSoUb9I6b42H8KBqJo08FoAcUGd29CSEHsH
NjNDYmEyiibUMY9aBLQjVJ3gTuNYo1ujsb4y/xvqgZL0aqOGON89kCWbJGLs1CVy
8PRF9YbLa8OGNUsamDmpTiJDFlE8EdxwVOOXRqUpqVlCZQkLVe8s7zwMv10/gq09
QsCH7oUi8DZyTbZani6QXe352k/QJufjTkiMclXCvB606cJlOYnmSEFRawTl8qI5
sxXyBHkCr6WVcu0cdUH47cZISxYwag5bqg/5Uly90opjmrKUmS9+grtasdSbVJWL
3CUpn6/DxchC1Pw14KjqjCMXoMFWDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMSa
k8q1rwNYHljYyPDzLqO42nc/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NTg0NDI0NjhBODAxMUYwOThCNDMxQjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLqMA0GCSqGSIb3DQEB
CwUAA4IBAQCC9vJ/urJdiwDbtEP04ik0CvWqdgrmTim4mvhafyWwYphVzMfXlSdf
6aQ1Gebwsp1RBfQBd8blixzs3rWGNTsMX/0MxTyN1BJtPVhZnZYYAyl9Xkq+75mi
nQnRnwmaP0/J2pK1tX3rP6fZ6tF8xPmCmfwY1yKYQJnJKsikQQpSMnjW25Daf6Th
MCnHzBfDjRxWUABzGiCnDWvs2za9dyFR26sVEinAsi0qRWEt/usMKz9STs74hPcp
73vmGWvF/T8KYq1s3K38aE6peWpm5JgOyxVg4o2jUP9w0NacPygvOjVGOzlMBmaF
VAYIaHgpdlx67aZCywF+IpBU1K8n3zGU
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:09 2025 by rpki-client