Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C25E2834186311F19930DCF5DAE4EC9C.roa
File: C25E2834186311F19930DCF5DAE4EC9C.roa (raw, json)
Hash identifier: 5Le2vTCTA9ieTTEPUWni4PKTNIrmGfuUB7pCH9YgipE=
Subject key identifier: 76:7A:3E:F9:E0:0F:AA:FD:2F:0B:13:7B:B5:C2:9A:0D:61:03:AC:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BDB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C25E2834186311F19930DCF5DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 07:20:17 +0000
ROA not before: Thu 05 Mar 2026 07:20:13 +0000
ROA not after: Mon 05 Mar 2029 07:20:13 +0000
asID: 17561
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114097 (0x1bdb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 07:20:13 2026 GMT
Not After : Mar 5 07:20:13 2029 GMT
Subject: CN=69a92eb1-52a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:93:ec:c8:e8:84:61:df:47:52:0e:58:10:
6a:75:0e:7b:ac:78:cb:5c:02:62:59:4d:1e:32:65:
34:83:69:b4:76:f4:8e:af:3c:66:9a:2f:7e:a8:c8:
d6:ed:e9:53:32:97:35:e0:78:4d:ca:ac:a6:38:55:
65:35:d2:31:74:76:72:3d:82:0a:71:e1:df:b0:c3:
90:1e:c0:0b:ac:b1:6d:27:eb:11:a6:15:fc:cf:9d:
f7:ce:96:d0:f4:45:d7:f8:c6:db:b2:72:ae:ec:63:
a8:71:f3:d9:e7:cb:d5:b7:18:65:61:d7:fd:81:e6:
df:11:e4:b3:20:0a:ee:e5:4d:ef:b4:c1:4d:95:e3:
d6:52:d5:13:e8:47:8d:fd:b6:ff:5f:1a:9b:05:16:
5c:ac:99:d8:a4:61:21:a2:91:a2:1b:0d:e1:8c:d9:
80:11:fb:4b:cb:0e:1e:da:8e:2f:72:a0:ca:b7:10:
63:e4:7b:a4:89:c1:a8:ea:e8:1d:15:a9:8e:25:27:
e7:bc:47:b0:5a:bf:3b:b9:9b:90:ea:08:a8:29:18:
bd:e3:1e:c9:fc:af:38:71:8c:ef:17:39:7d:9a:9e:
8c:d3:89:b1:b5:06:42:76:26:90:c3:93:62:80:fb:
9a:39:7b:c9:41:67:62:e5:90:cb:e2:57:09:d0:fd:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:3E:F9:E0:0F:AA:FD:2F:0B:13:7B:B5:C2:9A:0D:61:03:AC:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C25E2834186311F19930DCF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:5e:cd:ce:12:ef:c9:1c:eb:06:20:b3:78:ab:86:27:c2:a5:
c7:90:02:24:b7:00:75:43:dc:21:f9:21:e1:5e:7f:c2:68:1d:
00:8a:4a:b5:7b:5a:d0:26:b5:6a:54:24:de:4d:f0:05:df:e7:
48:48:94:57:40:4b:4d:b9:08:02:0e:4a:28:25:ee:50:d7:b4:
a1:9a:55:cf:6d:43:0b:bb:52:05:19:34:08:cd:45:87:30:47:
55:b2:77:0c:73:ee:47:60:3f:8b:29:e8:a6:f5:2c:d7:11:7e:
eb:5e:15:ac:46:1c:17:24:79:c1:c3:94:61:b0:92:f5:d6:b9:
ec:ad:fb:8e:d6:49:6e:eb:cb:b4:d4:49:64:a4:74:08:f6:a3:
ab:1a:09:1d:ef:9d:e9:c9:39:d2:67:df:71:47:6a:02:4a:86:
13:da:13:52:af:a1:e8:35:03:45:6d:9e:14:02:c8:3a:da:4b:
7d:78:85:30:64:2a:a9:29:f4:78:7b:b3:da:ea:7d:36:f0:94:
99:fe:6c:ea:c8:47:59:e5:91:f8:11:f3:f8:b3:29:66:0d:fa:
7b:c7:3f:2e:83:59:a0:87:1d:fd:a8:97:0a:83:64:44:c1:3b:
29:52:0d:97:ed:80:4d:a0:ad:e6:80:d5:bb:f1:54:1c:4f:ed:
4c:3e:70:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAb2xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMzA1MDcyMDEzWhcNMjkwMzA1MDcyMDEzWjAYMRYw
FAYDVQQDEw02OWE5MmViMS01MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyU6T7MjohGHfR1IOWBBqdQ57rHjLXAJiWU0eMmU0g2m0dvSOrzxmmi9+
qMjW7elTMpc14HhNyqymOFVlNdIxdHZyPYIKceHfsMOQHsALrLFtJ+sRphX8z533
zpbQ9EXX+MbbsnKu7GOocfPZ58vVtxhlYdf9gebfEeSzIAru5U3vtMFNlePWUtUT
6EeN/bb/XxqbBRZcrJnYpGEhopGiGw3hjNmAEftLyw4e2o4vcqDKtxBj5HukicGo
6ugdFamOJSfnvEewWr87uZuQ6gioKRi94x7J/K84cYzvFzl9mp6M04mxtQZCdiaQ
w5NigPuaOXvJQWdi5ZDL4lcJ0P14ZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHZ6
PvngD6r9LwsTe7XCmg1hA6z7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjVFMjgzNDE4NjMxMUYxOTkzMERDRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4KMA0GCSqGSIb3DQEB
CwUAA4IBAQDHXs3OEu/JHOsGILN4q4YnwqXHkAIktwB1Q9wh+SHhXn/CaB0Aikq1
e1rQJrVqVCTeTfAF3+dISJRXQEtNuQgCDkooJe5Q17ShmlXPbUMLu1IFGTQIzUWH
MEdVsncMc+5HYD+LKeim9SzXEX7rXhWsRhwXJHnBw5RhsJL11rnsrfuO1klu68u0
1ElkpHQI9qOrGgkd753pyTnSZ99xR2oCSoYT2hNSr6HoNQNFbZ4UAsg62kt9eIUw
ZCqpKfR4e7Pa6n028JSZ/mzqyEdZ5ZH4EfP4sylmDfp7xz8ug1mghx39qJcKg2RE
wTspUg2X7YBNoK3mgNW78VQcT+1MPnBQ
-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:34 2026 by rpki-client