Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18579389D0911F0AE4FE281DAE4EC9C.roa
File: C18579389D0911F0AE4FE281DAE4EC9C.roa (raw, json)
Hash identifier: QQWNM+cTXfdavFQwbyFDTACVxVP5K2ujM3Zz5rvESWY=
Subject key identifier: 0A:08:92:7C:EB:7C:EA:D7:A3:28:AA:44:4D:9F:6D:78:E9:05:C8:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A144
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18579389D0911F0AE4FE281DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 07:56:08 +0000
ROA not before: Mon 29 Sep 2025 07:56:02 +0000
ROA not after: Tue 04 Nov 2025 07:56:02 +0000
asID: 20326
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106820 (0x1a144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 07:56:02 2025 GMT
Not After : Nov 4 07:56:02 2025 GMT
Subject: CN=68da3b98-e8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:20:75:45:a9:58:24:8f:52:89:d6:65:77:
45:47:8f:a1:8e:d5:01:db:1a:41:1d:40:5d:d3:ae:
a9:1f:7b:ec:c0:bb:e6:78:0d:80:8a:7d:ab:23:f2:
f9:c5:45:59:8b:b7:ae:f0:c8:7e:3e:41:26:39:e4:
9c:21:8a:ce:15:b5:26:a2:60:5b:8a:83:5c:6a:bb:
4b:b7:f6:19:97:67:dc:e2:06:6e:8d:c8:d5:36:1f:
7f:41:b2:c3:9a:22:23:d2:d1:b9:b0:b9:89:29:7f:
7d:15:64:5a:56:2c:c9:e1:6c:12:7d:18:f1:de:b0:
77:04:50:06:2b:f8:ec:52:52:f0:ab:96:6e:42:6a:
e4:8a:5a:ca:4c:75:a8:a9:c7:29:95:24:6d:d8:2f:
c7:e0:87:08:ca:ef:a8:91:95:65:5d:4f:f5:e7:8f:
72:c9:62:bb:22:27:cd:16:d1:e3:9e:2e:74:09:18:
7f:96:1a:e0:a1:bb:95:14:68:88:f1:72:1c:a5:ce:
44:61:a0:61:d6:5e:ec:cf:07:ac:cd:48:20:60:d7:
54:7f:c9:91:85:05:d6:65:9e:99:ee:53:3e:ab:a2:
69:3a:89:78:d9:9b:d0:af:7b:cc:15:70:d8:ca:67:
bd:ef:8b:a5:11:89:ff:c6:d5:3e:6e:8d:a9:87:a7:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:92:7C:EB:7C:EA:D7:A3:28:AA:44:4D:9F:6D:78:E9:05:C8:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18579389D0911F0AE4FE281DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b3:01:0b:46:c3:47:7b:88:ab:c3:21:2e:61:ed:ff:3d:5e:
dd:eb:8d:8b:3c:4c:7b:cc:e2:2d:87:e8:99:1d:23:2a:56:05:
54:0c:48:4f:af:22:30:54:42:9e:a0:c4:f5:35:4f:65:aa:c5:
b1:ef:09:dd:4b:01:01:5b:32:10:94:3a:64:a3:a5:fc:1e:35:
5c:14:08:a9:b0:14:95:08:3c:34:d2:dd:e5:2b:2d:93:3d:b7:
56:2a:e7:3b:14:8c:a5:61:27:f1:02:87:d6:94:5c:53:c7:8a:
4e:22:aa:ca:bb:f0:a0:14:d3:42:38:97:84:7a:67:2e:cc:6e:
ee:c4:3d:0b:79:4f:71:bb:b4:c8:8c:29:36:59:85:f5:d1:85:
8e:9c:f9:32:59:2c:7d:11:98:07:cb:69:40:c5:2b:0a:ea:a4:
2e:ec:3e:00:b0:83:33:49:ca:e8:c1:b9:41:0c:47:44:7c:5a:
14:06:d5:a2:5f:9c:d2:a0:2e:a7:99:8a:23:d3:5a:0e:72:35:
ef:9f:2f:ae:0e:47:0d:c5:f3:a6:f3:26:40:1c:84:00:e7:2b:
99:29:dd:21:d4:5b:66:ef:fd:39:3c:77:f6:34:b4:4e:da:8a:
af:d3:89:d5:2c:db:06:99:b8:1a:27:b3:8e:5c:3d:db:dc:ca:
a7:3e:ee:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaFEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MDc1NjAyWhcNMjUxMTA0MDc1NjAyWjAYMRYw
FAYDVQQDEw02OGRhM2I5OC1lOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmc8gdUWpWCSPUonWZXdFR4+hjtUB2xpBHUBd066pH3vswLvmeA2Ain2r
I/L5xUVZi7eu8Mh+PkEmOeScIYrOFbUmomBbioNcartLt/YZl2fc4gZujcjVNh9/
QbLDmiIj0tG5sLmJKX99FWRaVizJ4WwSfRjx3rB3BFAGK/jsUlLwq5ZuQmrkilrK
THWoqccplSRt2C/H4IcIyu+okZVlXU/1549yyWK7IifNFtHjni50CRh/lhrgobuV
FGiI8XIcpc5EYaBh1l7szweszUggYNdUf8mRhQXWZZ6Z7lM+q6JpOol42ZvQr3vM
FXDYyme974ulEYn/xtU+bo2ph6eNjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAoI
knzrfOrXoyiqRE2fbXjpBciZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTg1NzkzODlEMDkxMUYwQUU0RkUyODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOEMA0GCSqGSIb3DQEB
CwUAA4IBAQB6swELRsNHe4irwyEuYe3/PV7d642LPEx7zOIth+iZHSMqVgVUDEhP
ryIwVEKeoMT1NU9lqsWx7wndSwEBWzIQlDpko6X8HjVcFAipsBSVCDw00t3lKy2T
PbdWKuc7FIylYSfxAofWlFxTx4pOIqrKu/CgFNNCOJeEemcuzG7uxD0LeU9xu7TI
jCk2WYX10YWOnPkyWSx9EZgHy2lAxSsK6qQu7D4AsIMzScrowblBDEdEfFoUBtWi
X5zSoC6nmYoj01oOcjXvny+uDkcNxfOm8yZAHIQA5yuZKd0h1Ftm7/05PHf2NLRO
2oqv04nVLNsGmbgaJ7OOXD3b3MqnPu4/
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:55 2025 by rpki-client