Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/855C0DD29DEA11F0A905DFADDAE4EC9C.roa
File: 855C0DD29DEA11F0A905DFADDAE4EC9C.roa (raw, json)
Hash identifier: eu51l3lPqNkaKSALF/qwhtkVkxHf8s9RRR4/IFmK+CE=
Subject key identifier: 49:12:EB:7F:90:A9:71:3D:0E:3D:05:FE:E0:2D:23:F9:5B:C1:4C:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/855C0DD29DEA11F0A905DFADDAE4EC9C.roa
Signing time: Tue 30 Sep 2025 10:45:04 +0000
ROA not before: Tue 30 Sep 2025 10:44:59 +0000
ROA not after: Sat 01 Nov 2025 10:44:59 +0000
asID: 984
IP address blocks: 154.90.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106960 (0x1a1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 10:44:59 2025 GMT
Not After : Nov 1 10:44:59 2025 GMT
Subject: CN=68dbb4b0-b944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:21:ab:cd:dc:3b:5b:78:ca:1d:51:11:7f:
9d:14:4d:7b:6b:0b:cd:ae:36:08:e7:b8:fa:4e:ad:
46:e6:c6:fe:77:39:26:cd:32:1c:b9:cf:15:c9:3a:
fa:ff:f4:21:79:81:32:0e:ed:f1:05:9b:39:a8:d8:
66:6f:9b:9a:31:bd:0c:e5:d0:39:77:2a:5d:eb:75:
ab:24:9d:79:35:74:60:11:3c:fb:2b:eb:f1:36:e6:
e3:7e:f5:ee:f1:17:a7:be:a3:0f:3d:9e:13:ba:9b:
20:89:80:72:58:23:ff:41:7f:f9:7f:88:29:97:ab:
db:50:c3:5c:fb:3c:08:75:c4:f2:1c:a3:fb:e7:bb:
cb:7d:e0:90:8b:bf:92:4b:00:04:a8:7a:13:ee:77:
bf:49:6a:0c:bb:d4:b1:a0:95:e5:72:89:e1:c0:5c:
26:aa:c7:24:89:5c:9b:f6:b1:8f:7d:4d:b9:fb:7d:
11:5e:d8:9c:25:28:a8:18:0d:d4:1f:00:1e:cf:0e:
3b:d5:91:5f:bf:ff:4e:86:ab:41:51:75:d8:63:3d:
ca:f0:a8:b1:80:e9:d9:48:07:77:d9:be:a4:b6:b4:
48:b4:4a:24:89:e5:d1:bb:c1:98:6e:64:89:cd:80:
77:62:2a:85:e9:b4:97:a2:e5:74:a8:49:53:ab:15:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:EB:7F:90:A9:71:3D:0E:3D:05:FE:E0:2D:23:F9:5B:C1:4C:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/855C0DD29DEA11F0A905DFADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ac:3d:9d:47:51:4e:a9:b7:88:cd:85:96:a9:83:cd:0b:dc:
c9:91:bf:21:7b:b9:fc:7a:81:40:98:3a:bb:99:14:00:24:9f:
8a:82:30:eb:ce:49:31:3a:48:46:52:36:9c:e8:91:5e:21:59:
8d:21:61:40:2a:7f:d1:4d:24:3c:b3:fc:8d:5c:28:a4:0b:9e:
cd:64:8a:56:b1:82:d6:d1:a2:db:fd:65:17:fe:97:83:7c:67:
88:85:97:e8:3f:b7:e8:99:67:eb:ab:49:c7:73:96:45:78:d9:
ca:ae:97:06:c9:5c:99:8f:54:21:fd:2b:0d:da:fd:1d:d5:65:
a6:9e:b0:82:6c:57:c2:c7:a3:38:3c:2b:79:be:7b:71:48:f9:
04:72:8a:93:a2:c9:2e:89:59:58:52:7e:80:e7:fc:6d:95:b7:
bf:21:1f:9c:15:e8:ad:0d:f1:25:2f:80:d0:db:b4:c1:2d:fe:
08:62:46:74:b1:12:37:fa:e2:06:3c:6e:80:30:6f:38:4f:be:
02:86:4a:d1:20:0f:97:69:31:57:36:6d:21:9d:3e:4e:a0:1d:
43:19:da:10:76:b0:88:45:59:41:06:6b:d0:79:95:bd:ff:53:
e3:e2:cf:0a:a0:ee:f6:25:87:ec:04:1b:06:9a:f4:7d:48:d3:
e8:5b:d1:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaHQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTMwMTA0NDU5WhcNMjUxMTAxMTA0NDU5WjAYMRYw
FAYDVQQDEw02OGRiYjRiMC1iOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3y4hq83cO1t4yh1REX+dFE17awvNrjYI57j6Tq1G5sb+dzkmzTIcuc8V
yTr6//QheYEyDu3xBZs5qNhmb5uaMb0M5dA5dypd63WrJJ15NXRgETz7K+vxNubj
fvXu8RenvqMPPZ4TupsgiYByWCP/QX/5f4gpl6vbUMNc+zwIdcTyHKP757vLfeCQ
i7+SSwAEqHoT7ne/SWoMu9SxoJXlconhwFwmqsckiVyb9rGPfU25+30RXticJSio
GA3UHwAezw471ZFfv/9OhqtBUXXYYz3K8KixgOnZSAd32b6ktrRItEokieXRu8GY
bmSJzYB3YiqF6bSXouV0qElTqxWkGQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEkS
63+QqXE9Dj0F/uAtI/lbwUzJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NTVDMEREMjlERUExMUYwQTkwNURGQUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlqFMA0GCSqGSIb3DQEB
CwUAA4IBAQBNrD2dR1FOqbeIzYWWqYPNC9zJkb8he7n8eoFAmDq7mRQAJJ+KgjDr
zkkxOkhGUjac6JFeIVmNIWFAKn/RTSQ8s/yNXCikC57NZIpWsYLW0aLb/WUX/peD
fGeIhZfoP7fomWfrq0nHc5ZFeNnKrpcGyVyZj1Qh/SsN2v0d1WWmnrCCbFfCx6M4
PCt5vntxSPkEcoqToskuiVlYUn6A5/xtlbe/IR+cFeitDfElL4DQ27TBLf4IYkZ0
sRI3+uIGPG6AMG84T74ChkrRIA+XaTFXNm0hnT5OoB1DGdoQdrCIRVlBBmvQeZW9
/1Pj4s8KoO72JYfsBBsGmvR9SNPoW9GI
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:49 2025 by rpki-client