Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/585053BA993B11F094A468D2DAE4EC9C.roa
File: 585053BA993B11F094A468D2DAE4EC9C.roa (raw, json)
Hash identifier: XiHmJkMS1tjT0McDufpwDfm2ly7nChFqLWVwKzr67e4=
Subject key identifier: F5:63:D4:4A:84:40:F6:84:10:23:C7:67:04:02:96:52:A4:01:EB:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A058
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/585053BA993B11F094A468D2DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 11:41:02 +0000
ROA not before: Wed 24 Sep 2025 11:40:57 +0000
ROA not after: Fri 24 Oct 2025 11:40:57 +0000
asID: 214413
IP address blocks: 154.82.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106584 (0x1a058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 11:40:57 2025 GMT
Not After : Oct 24 11:40:57 2025 GMT
Subject: CN=68d3d8cd-787e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:ad:b0:3c:76:68:c4:ad:64:45:86:a0:c9:
47:c4:09:b4:d4:df:95:4d:65:0a:83:f2:17:1e:ca:
01:c4:2a:ef:d7:77:e1:21:ff:e4:d1:6d:82:39:e3:
04:65:22:c3:6d:77:7e:5d:eb:ca:6f:36:94:e0:24:
42:d4:f6:05:8f:76:3e:c1:35:6e:5f:a4:46:ee:e8:
d5:ac:98:c3:f9:1c:32:90:a9:af:c8:ab:6e:a8:04:
e2:e8:ed:a9:79:73:1d:9d:e2:f9:c1:1b:96:a1:33:
a9:fc:a3:9d:3c:a5:46:f6:a2:15:16:ca:14:1e:07:
26:a9:39:35:94:7e:50:01:a0:e4:b2:a5:ee:98:47:
12:d3:83:bb:5f:30:af:12:10:49:93:14:8d:1c:ea:
55:67:9d:be:e0:47:d3:5f:12:2b:57:0a:ae:fa:30:
da:94:d3:04:bf:8e:50:79:a1:a3:0a:a3:87:05:f2:
e2:d4:c1:a8:15:0b:70:0b:df:05:ae:7f:06:cd:96:
89:7d:2c:f1:cb:8a:22:ad:ac:f9:cf:e0:e1:0b:00:
78:22:c2:85:48:27:c1:69:c4:5a:58:4c:1f:13:7a:
3f:8a:a7:cb:dd:d6:64:44:5e:c6:44:9a:38:9a:f4:
cd:06:d7:0c:5e:62:b8:d8:ba:c4:56:31:f6:59:17:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:D4:4A:84:40:F6:84:10:23:C7:67:04:02:96:52:A4:01:EB:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/585053BA993B11F094A468D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:10:48:6e:9a:c3:d2:1b:89:50:2f:15:0d:90:92:3b:76:c7:
4f:5f:99:af:3d:66:cd:6a:99:cc:23:da:f7:8e:a9:e9:a4:ba:
72:8d:ab:78:6d:52:c9:3a:0e:d9:4d:94:dc:d5:df:c9:e6:7f:
11:2e:5a:ef:35:93:06:bf:8d:c2:52:9f:f7:41:20:3b:e9:a0:
aa:12:53:75:13:ce:46:26:c9:31:12:7a:0a:78:e4:33:c3:ec:
06:58:c6:f1:3c:b1:22:84:0c:a2:b5:7b:a9:df:f0:77:e0:82:
5d:4e:11:f1:51:e8:b9:29:f1:fd:7e:a9:8b:fc:b6:f5:a3:67:
a3:82:a0:57:12:55:c6:dd:62:77:14:4d:10:3a:11:f5:e3:b4:
1e:2a:e0:c4:fe:35:6b:4b:d5:f6:fb:21:ed:60:ec:ff:91:14:
f8:c5:de:83:10:46:27:08:c0:af:1f:ae:3a:cf:eb:ae:ff:74:
d5:c6:52:7d:5d:cb:d3:ff:8f:ad:90:f1:0b:64:c2:94:27:f7:
5a:b9:7d:39:ac:3a:91:1a:ff:9e:44:29:b2:18:f5:59:6e:9d:
f3:85:7d:e8:c2:17:4c:53:b3:ce:c5:04:c4:46:93:a4:c2:3c:
aa:82:8c:46:f7:87:c5:fd:5a:ee:31:f4:99:d3:3c:8c:b7:29:
2a:8f:f1:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaBYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MTE0MDU3WhcNMjUxMDI0MTE0MDU3WjAYMRYw
FAYDVQQDEw02OGQzZDhjZC03ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmO6tsDx2aMStZEWGoMlHxAm01N+VTWUKg/IXHsoBxCrv13fhIf/k0W2C
OeMEZSLDbXd+XevKbzaU4CRC1PYFj3Y+wTVuX6RG7ujVrJjD+RwykKmvyKtuqATi
6O2peXMdneL5wRuWoTOp/KOdPKVG9qIVFsoUHgcmqTk1lH5QAaDksqXumEcS04O7
XzCvEhBJkxSNHOpVZ52+4EfTXxIrVwqu+jDalNMEv45QeaGjCqOHBfLi1MGoFQtw
C98Frn8GzZaJfSzxy4oiraz5z+DhCwB4IsKFSCfBacRaWEwfE3o/iqfL3dZkRF7G
RJo4mvTNBtcMXmK42LrEVjH2WRegEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPVj
1EqEQPaEECPHZwQCllKkAetkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODUwNTNCQTk5M0IxMUYwOTRBNDY4RDJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlIAMA0GCSqGSIb3DQEB
CwUAA4IBAQDYEEhumsPSG4lQLxUNkJI7dsdPX5mvPWbNapnMI9r3jqnppLpyjat4
bVLJOg7ZTZTc1d/J5n8RLlrvNZMGv43CUp/3QSA76aCqElN1E85GJskxEnoKeOQz
w+wGWMbxPLEihAyitXup3/B34IJdThHxUei5KfH9fqmL/Lb1o2ejgqBXElXG3WJ3
FE0QOhH147QeKuDE/jVrS9X2+yHtYOz/kRT4xd6DEEYnCMCvH646z+uu/3TVxlJ9
XcvT/4+tkPELZMKUJ/dauX05rDqRGv+eRCmyGPVZbp3zhX3owhdMU7POxQTERpOk
wjyqgoxG94fF/VruMfSZ0zyMtykqj/Fh
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:23 2025 by rpki-client