Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8473089D4011F08A8CD1DADAE4EC9C.roa
File: 6C8473089D4011F08A8CD1DADAE4EC9C.roa (raw, json)
Hash identifier: DTLwe+88+qiCGflL+ti4DayBuP/a2pYQi/FITFrmS4A=
Subject key identifier: 4F:0A:3C:F5:F8:D5:C3:ED:AF:61:7D:4E:48:56:66:D1:0F:35:74:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A149
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8473089D4011F08A8CD1DADAE4EC9C.roa
Signing time: Mon 29 Sep 2025 14:27:27 +0000
ROA not before: Mon 29 Sep 2025 14:27:23 +0000
ROA not after: Tue 28 Oct 2025 14:27:23 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106825 (0x1a149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 14:27:23 2025 GMT
Not After : Oct 28 14:27:23 2025 GMT
Subject: CN=68da974f-269f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:5b:71:43:72:9b:91:b6:61:a5:1a:55:46:
8b:3f:8b:f3:17:24:73:b7:f0:1d:e9:cb:71:db:e5:
56:a1:20:26:3a:e8:34:3c:78:f9:01:d5:cc:f2:d8:
d1:11:bf:89:32:64:29:53:e8:6e:05:8e:8b:33:88:
74:0c:76:eb:86:3f:0f:f6:86:64:ea:b8:ee:3a:d8:
b1:5a:4d:ca:5b:16:d9:fc:a7:bf:d1:fe:df:bd:c4:
3d:e2:fe:ff:07:4c:bd:40:18:4a:74:46:44:6b:d6:
6a:63:df:9e:b0:3e:43:4f:7e:2b:66:ff:90:2e:94:
31:1f:88:78:8c:b2:8c:63:ae:a6:e6:42:90:68:ba:
fa:72:e2:5e:ae:1a:40:76:31:53:35:00:c5:96:e3:
f8:7b:3c:1f:1c:62:73:24:3d:f7:3f:0c:8a:78:a0:
95:c4:17:57:af:d4:61:b4:68:5b:13:d0:61:72:5b:
0d:80:46:cc:16:19:67:e0:25:3b:44:16:7c:a1:2b:
ba:8f:56:63:85:ed:1e:3b:c6:58:d4:60:f6:1b:e6:
d8:ca:6f:21:4b:0e:65:9b:c6:5a:ad:bc:97:d8:1e:
47:08:c2:22:f2:da:a7:eb:fb:b9:79:77:82:b5:94:
4f:97:b1:71:ff:95:d1:b9:ea:e5:df:df:f9:be:80:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0A:3C:F5:F8:D5:C3:ED:AF:61:7D:4E:48:56:66:D1:0F:35:74:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8473089D4011F08A8CD1DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
61:2e:4c:f0:7d:f9:d2:95:ba:80:ed:e8:9d:d0:94:c6:ad:39:
3d:3f:d3:f0:4d:52:74:92:14:52:f2:b3:93:00:0b:0e:04:1d:
d2:22:91:47:87:ef:80:e3:f9:84:a2:8d:16:3f:f4:07:5a:58:
87:5e:c3:a7:2b:a1:20:e0:18:93:13:1f:b7:22:44:41:08:75:
f9:1e:f6:33:31:67:ee:20:90:05:a1:69:81:81:49:76:16:9c:
ed:ff:8e:65:fb:d8:c9:51:f3:63:15:a8:e7:42:db:59:e7:99:
17:2e:bb:73:27:3f:0c:40:38:74:7f:35:ca:10:1f:62:b6:f8:
90:5b:47:3e:5e:45:81:e0:b4:f7:f9:09:51:e4:8c:0d:13:5c:
e1:aa:d3:10:64:79:78:32:69:b6:3a:7e:99:b1:bb:96:d2:4d:
92:e8:19:33:53:03:28:87:d6:84:de:cc:3e:00:c1:03:eb:27:
9b:06:9a:81:63:cf:e5:3b:67:e1:5b:cd:53:1a:3b:42:19:90:
72:4d:e0:7b:83:68:3f:46:be:6b:57:2e:2a:13:93:43:a4:2f:
01:56:5a:2b:34:de:5b:56:ee:7b:81:9b:e6:df:5c:f9:c1:fe:
c7:fe:50:47:ee:b2:20:70:47:16:c4:50:aa:31:8d:12:24:2c:
93:f6:d8:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaFJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MTQyNzIzWhcNMjUxMDI4MTQyNzIzWjAYMRYw
FAYDVQQDEw02OGRhOTc0Zi0yNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0blbcUNym5G2YaUaVUaLP4vzFyRzt/Ad6ctx2+VWoSAmOug0PHj5AdXM
8tjREb+JMmQpU+huBY6LM4h0DHbrhj8P9oZk6rjuOtixWk3KWxbZ/Ke/0f7fvcQ9
4v7/B0y9QBhKdEZEa9ZqY9+esD5DT34rZv+QLpQxH4h4jLKMY66m5kKQaLr6cuJe
rhpAdjFTNQDFluP4ezwfHGJzJD33PwyKeKCVxBdXr9RhtGhbE9BhclsNgEbMFhln
4CU7RBZ8oSu6j1Zjhe0eO8ZY1GD2G+bYym8hSw5lm8ZarbyX2B5HCMIi8tqn6/u5
eXeCtZRPl7Fx/5XRuerl39/5voA/FQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE8K
PPX41cPtr2F9TkhWZtEPNXToMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Qzg0NzMwODlENDAxMUYwOEE4Q0QxREFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwMMA0GCSqGSIb3DQEB
CwUAA4IBAQBhLkzwffnSlbqA7eid0JTGrTk9P9PwTVJ0khRS8rOTAAsOBB3SIpFH
h++A4/mEoo0WP/QHWliHXsOnK6Eg4BiTEx+3IkRBCHX5HvYzMWfuIJAFoWmBgUl2
Fpzt/45l+9jJUfNjFajnQttZ55kXLrtzJz8MQDh0fzXKEB9itviQW0c+XkWB4LT3
+QlR5IwNE1zhqtMQZHl4Mmm2On6ZsbuW0k2S6BkzUwMoh9aE3sw+AMED6yebBpqB
Y8/lO2fhW81TGjtCGZByTeB7g2g/Rr5rVy4qE5NDpC8BVlorNN5bVu57gZvm31z5
wf7H/lBH7rIgcEcWxFCqMY0SJCyT9tgn
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:01 2025 by rpki-client