Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC15C644946611F0A8D34F95DAE4EC9C.roa
File: AC15C644946611F0A8D34F95DAE4EC9C.roa (raw, json)
Hash identifier: c6Joc6aAdKzrujnG1e7aCovQ4AfxV3TSbMPOKF8Sbk4=
Subject key identifier: DD:B2:97:8A:F1:65:B9:E0:63:D3:A4:30:A7:F9:4B:6D:7A:65:6B:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC15C644946611F0A8D34F95DAE4EC9C.roa
Signing time: Thu 18 Sep 2025 08:08:35 +0000
ROA not before: Thu 18 Sep 2025 08:08:30 +0000
ROA not after: Fri 24 Oct 2025 08:08:30 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106497 (0x1a001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 18 08:08:30 2025 GMT
Not After : Oct 24 08:08:30 2025 GMT
Subject: CN=68cbbe03-cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:89:11:26:61:e3:d6:46:40:cc:a2:a6:82:
1b:e1:3c:f5:ad:55:74:57:27:72:97:dd:c8:72:ba:
03:1b:85:37:5a:77:1b:99:2f:47:ca:df:c0:3f:c6:
94:15:dd:7b:23:50:ab:e5:1b:20:fd:91:21:98:4d:
36:cd:bf:56:16:e3:54:e1:03:e6:fe:40:19:b4:f0:
1b:cc:51:e1:d8:ee:e8:04:0d:0a:61:82:bf:63:2e:
40:50:4e:66:8f:49:34:fc:5e:30:7d:31:a0:8a:af:
bd:01:84:09:e3:1c:ed:ed:ea:93:58:f2:80:0d:2f:
d4:25:fc:4a:34:14:71:a4:ba:ca:f0:4a:2f:d5:c9:
45:a1:cb:ca:86:ee:7e:c9:24:4a:40:f8:5f:43:16:
83:64:b1:f2:c0:c0:b4:e5:b9:01:39:6d:aa:17:04:
51:00:27:16:fa:78:fa:b2:61:28:33:fe:db:54:f6:
91:b8:67:46:5c:b2:27:09:73:2c:55:79:88:fd:ac:
9b:8b:8d:58:f3:ed:82:26:8b:f5:98:01:bc:87:57:
23:25:fd:2b:a6:71:dc:8b:0e:f8:14:1a:ed:9d:d4:
63:27:2b:ee:d8:bf:af:8c:d5:77:e4:85:e6:c6:b9:
15:33:13:74:e7:ff:d1:f8:a2:6c:d0:5b:2c:22:3a:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B2:97:8A:F1:65:B9:E0:63:D3:A4:30:A7:F9:4B:6D:7A:65:6B:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC15C644946611F0A8D34F95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b9:2d:56:a3:8e:67:f4:51:7e:67:45:ed:29:b3:e9:c2:7e:
bc:d2:38:df:9b:a0:f9:08:46:28:ed:2a:93:b0:a3:74:ce:1c:
2a:5f:06:9b:eb:6c:2a:aa:49:11:88:5f:2a:03:04:31:9c:1c:
76:dc:58:3c:11:21:62:a6:bb:db:d1:71:cc:1e:b8:5e:a6:25:
2d:05:f4:05:b3:75:6d:6a:70:21:d3:13:72:0d:6e:08:85:7d:
0a:4c:ae:d7:a4:5a:26:6b:b5:d8:62:06:e5:17:a3:f7:80:69:
16:ad:81:53:01:53:58:6e:a8:f3:79:63:bc:d7:19:0e:7e:59:
e3:fb:df:a9:e7:e2:95:d8:b4:29:29:2c:bc:18:42:4d:51:86:
71:78:d3:18:cb:1a:a5:4e:a1:ad:29:85:10:15:fd:19:74:b9:
05:8f:a9:5e:40:07:a2:3b:ae:49:68:94:15:3f:3e:ac:70:23:
bc:40:ea:c6:29:f9:f0:b9:3c:f1:7a:4c:02:96:58:e2:63:8e:
33:a4:dc:bb:17:a9:d7:ee:71:ac:54:da:79:c0:65:c9:9c:9e:
db:27:0a:72:b5:d2:ac:48:89:85:88:f0:a2:5f:a9:1f:63:16:
22:38:fe:03:4d:6f:65:21:97:16:03:e8:2e:3f:ab:26:24:d6:
86:bc:1d:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaABMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTE4MDgwODMwWhcNMjUxMDI0MDgwODMwWjAYMRYw
FAYDVQQDEw02OGNiYmUwMy1jYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6eqJESZh49ZGQMyipoIb4Tz1rVV0Vydyl93IcroDG4U3WncbmS9Hyt/A
P8aUFd17I1Cr5Rsg/ZEhmE02zb9WFuNU4QPm/kAZtPAbzFHh2O7oBA0KYYK/Yy5A
UE5mj0k0/F4wfTGgiq+9AYQJ4xzt7eqTWPKADS/UJfxKNBRxpLrK8Eov1clFocvK
hu5+ySRKQPhfQxaDZLHywMC05bkBOW2qFwRRACcW+nj6smEoM/7bVPaRuGdGXLIn
CXMsVXmI/aybi41Y8+2CJov1mAG8h1cjJf0rpnHciw74FBrtndRjJyvu2L+vjNV3
5IXmxrkVMxN05//R+KJs0FssIjo+fwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN2y
l4rxZbngY9OkMKf5S216ZWsVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQzE1QzY0NDk0NjYxMUYwQThEMzRGOTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQCFuS1Wo45n9FF+Z0XtKbPpwn680jjfm6D5CEYo7SqTsKN0zhwqXwab
62wqqkkRiF8qAwQxnBx23Fg8ESFiprvb0XHMHrhepiUtBfQFs3VtanAh0xNyDW4I
hX0KTK7XpFoma7XYYgblF6P3gGkWrYFTAVNYbqjzeWO81xkOflnj+9+p5+KV2LQp
KSy8GEJNUYZxeNMYyxqlTqGtKYUQFf0ZdLkFj6leQAeiO65JaJQVPz6scCO8QOrG
KfnwuTzxekwClljiY44zpNy7F6nX7nGsVNp5wGXJnJ7bJwpytdKsSImFiPCiX6kf
YxYiOP4DTW9lIZcWA+guP6smJNaGvB2/
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:01 2025 by rpki-client