Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB28C8DCAA1A11F0AF83D2E1DAE4EC9C.roa
File: CB28C8DCAA1A11F0AF83D2E1DAE4EC9C.roa (raw, json)
Hash identifier: G7HXA7zhJv04wIvI0JM3BULG0SjaaAApv75Q4admgso=
Subject key identifier: 12:2A:EA:A8:8A:46:85:51:7D:74:8F:76:44:19:AA:67:78:C7:33:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB28C8DCAA1A11F0AF83D2E1DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 23:00:51 +0000
ROA not before: Thu 16 Oct 2025 23:00:44 +0000
ROA not after: Mon 17 Nov 2025 23:00:44 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107439 (0x1a3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 23:00:44 2025 GMT
Not After : Nov 17 23:00:44 2025 GMT
Subject: CN=68f027a3-1bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:0e:f2:56:ea:c7:ef:86:b3:10:f2:b1:34:
d5:90:fd:4e:4e:c2:e9:ed:0e:2a:95:09:72:d1:8c:
9b:a8:f9:1a:7f:59:59:0a:73:85:b3:c9:5a:44:de:
c1:0c:e2:de:01:42:c8:d4:07:10:59:c2:21:6f:d6:
6a:e0:b0:ff:37:61:25:c8:df:3d:1b:00:62:6e:db:
cb:d5:bc:83:cb:02:9c:12:2a:d0:dc:8f:37:a6:e0:
5a:90:dd:08:ed:19:ab:9b:7f:c0:83:76:2b:58:99:
dc:e3:76:f5:82:12:3d:68:82:04:6f:a9:a7:cd:25:
07:c7:8c:59:46:a7:c4:22:28:17:89:b5:4a:b1:ef:
5a:01:8a:66:13:a4:36:f7:b9:56:0d:c2:fd:ed:df:
41:bc:8e:71:77:8a:e8:85:29:51:f2:7c:af:0d:54:
23:05:84:e4:e0:a6:dd:89:00:7f:83:36:17:3d:9e:
cc:b8:17:92:97:a3:94:80:d1:e0:95:c1:81:47:33:
00:a7:b8:90:af:e9:29:69:b4:55:5c:10:81:a3:1d:
57:50:55:d5:68:56:39:8e:aa:26:aa:27:23:fe:d5:
ce:3f:38:4b:10:2a:e2:68:d9:be:5d:9d:5b:1a:e3:
92:c9:95:3b:ea:19:88:da:b6:4a:0e:34:e5:64:c3:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:EA:A8:8A:46:85:51:7D:74:8F:76:44:19:AA:67:78:C7:33:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB28C8DCAA1A11F0AF83D2E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
18:1d:21:6f:6a:c2:0f:c7:56:8a:a1:9d:f2:c5:f3:a7:3e:3b:
55:e8:35:91:05:a3:0c:cc:5c:2d:54:ef:19:fe:01:da:4d:2b:
d8:7d:02:4a:2d:88:aa:bb:3f:40:1b:6a:6b:fe:0e:fb:a7:e1:
34:b0:45:22:62:8b:6e:07:58:7f:6b:95:a9:9b:3d:ad:81:a0:
0a:bf:34:2a:dc:a5:3e:04:06:ea:e2:b0:c2:70:8b:c5:89:fc:
6d:2a:8f:03:a5:d1:4b:70:67:a2:1f:33:20:36:90:0e:4d:9e:
99:91:ec:60:e4:e3:b3:d1:1a:90:24:fd:4a:91:ca:12:56:a3:
26:4e:be:ba:15:01:2d:46:0c:ac:d3:e5:15:0f:1b:dc:d1:d2:
77:46:9b:81:12:f2:14:e2:8e:07:ae:8d:9e:6f:db:73:e4:8e:
cb:3b:a1:7a:bf:31:b4:6a:8a:18:e7:51:6a:93:98:e8:d2:24:
2b:15:a0:01:ee:7d:5b:72:ad:8f:3c:b6:93:43:44:96:9e:44:
1a:32:b0:2e:1c:a4:61:bc:e1:5f:c1:02:29:8c:7e:9d:a6:5f:
8f:bb:ec:01:2c:08:eb:33:00:ac:04:67:44:5b:77:5c:69:a2:
65:53:8e:72:85:20:49:44:6e:fe:94:71:29:8e:3d:49:ab:05:
20:a5:fa:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaOvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDE2MjMwMDQ0WhcNMjUxMTE3MjMwMDQ0WjAYMRYw
FAYDVQQDEw02OGYwMjdhMy0xYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8Y0O8lbqx++GsxDysTTVkP1OTsLp7Q4qlQly0YybqPkaf1lZCnOFs8la
RN7BDOLeAULI1AcQWcIhb9Zq4LD/N2ElyN89GwBibtvL1byDywKcEirQ3I83puBa
kN0I7Rmrm3/Ag3YrWJnc43b1ghI9aIIEb6mnzSUHx4xZRqfEIigXibVKse9aAYpm
E6Q297lWDcL97d9BvI5xd4rohSlR8nyvDVQjBYTk4KbdiQB/gzYXPZ7MuBeSl6OU
gNHglcGBRzMAp7iQr+kpabRVXBCBox1XUFXVaFY5jqomqicj/tXOPzhLECriaNm+
XZ1bGuOSyZU76hmI2rZKDjTlZMMMEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBIq
6qiKRoVRfXSPdkQZqmd4xzOxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjI4QzhEQ0FBMUExMUYwQUY4M0QyRTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtJgMA0GCSqGSIb3DQEB
CwUAA4IBAQAYHSFvasIPx1aKoZ3yxfOnPjtV6DWRBaMMzFwtVO8Z/gHaTSvYfQJK
LYiquz9AG2pr/g77p+E0sEUiYotuB1h/a5Wpmz2tgaAKvzQq3KU+BAbq4rDCcIvF
ifxtKo8DpdFLcGeiHzMgNpAOTZ6Zkexg5OOz0RqQJP1KkcoSVqMmTr66FQEtRgys
0+UVDxvc0dJ3RpuBEvIU4o4Hro2eb9tz5I7LO6F6vzG0aooY51Fqk5jo0iQrFaAB
7n1bcq2PPLaTQ0SWnkQaMrAuHKRhvOFfwQIpjH6dpl+Pu+wBLAjrMwCsBGdEW3dc
aaJlU45yhSBJRG7+lHEpjj1JqwUgpfqz
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:57 2025 by rpki-client