Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD69B5A2A90211F09874E48DDAE4EC9C.roa
File: CD69B5A2A90211F09874E48DDAE4EC9C.roa (raw, json)
Hash identifier: 7c9RpbA0gBgTlNOl6jfRKCzfWxN6YgZG9RjxVAXQiIA=
Subject key identifier: 09:3D:8B:4B:89:E8:E7:A1:B3:9C:95:D8:7E:CF:BA:29:34:FA:E4:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A375
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD69B5A2A90211F09874E48DDAE4EC9C.roa
Signing time: Tue 14 Oct 2025 13:36:35 +0000
ROA not before: Tue 14 Oct 2025 13:36:27 +0000
ROA not after: Wed 29 Oct 2025 13:36:27 +0000
asID: 2914
IP address blocks: 154.222.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107381 (0x1a375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 14 13:36:27 2025 GMT
Not After : Oct 29 13:36:27 2025 GMT
Subject: CN=68ee51e3-7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:cf:77:eb:35:91:ac:19:43:90:24:2b:c6:
c1:94:35:18:d7:47:07:9e:51:59:cf:ae:e3:a0:c6:
0a:fc:a6:92:81:16:2b:83:d6:0c:b7:09:64:b9:05:
0e:5e:8a:67:b4:f5:2e:a0:d3:07:4e:54:c0:0c:a8:
45:21:7b:65:3d:7e:32:01:49:c3:be:94:a5:a0:03:
58:46:86:5b:dc:72:d1:26:7c:f4:ff:16:4e:46:78:
a7:c6:af:08:01:01:e7:34:06:d0:4b:6b:d7:30:bc:
c7:01:6c:06:00:cb:1b:6c:13:52:a8:8b:15:f3:eb:
0e:14:47:7c:f1:c0:e3:6a:4d:85:04:78:be:53:78:
4b:e7:4b:37:55:1e:df:cb:5a:c7:be:04:e2:b6:5d:
70:6e:dd:3b:be:36:7f:bd:63:62:95:e9:14:0b:16:
ce:31:23:80:27:65:17:d5:50:68:33:11:64:ec:70:
14:e7:90:80:ab:95:be:8a:87:09:a1:41:1c:a0:ef:
b1:ab:ed:ca:34:eb:43:fe:16:f0:59:94:d5:21:dd:
8f:92:2d:71:e1:e7:96:e9:6d:b3:1b:fe:4d:f5:f2:
95:f8:6f:14:44:75:31:26:3e:7d:c9:c2:c4:1a:6a:
ca:0d:ac:b3:d8:21:06:92:09:8f:27:c2:58:63:47:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:8B:4B:89:E8:E7:A1:B3:9C:95:D8:7E:CF:BA:29:34:FA:E4:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD69B5A2A90211F09874E48DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.74.0/23
Signature Algorithm: sha256WithRSAEncryption
14:e4:66:ae:ae:7f:90:fa:6d:05:a5:b2:aa:91:16:bf:dd:c6:
30:a1:fd:6e:98:42:87:39:d7:ad:0c:62:97:b0:dc:7a:73:64:
25:d8:a7:06:33:d5:53:99:02:36:ca:70:e2:8c:07:1e:7c:87:
88:b8:52:e9:6b:d9:9c:0a:5f:ed:e5:8d:ce:80:f8:04:91:25:
78:d3:a5:3c:c7:1a:31:e5:76:57:05:6e:61:91:de:a1:31:0f:
f1:05:32:97:ba:78:c9:4c:56:8d:eb:ca:1d:53:22:dd:93:0c:
39:19:1c:e5:a2:7d:03:2d:49:ba:f3:62:6f:97:7a:4e:47:b2:
5c:11:d5:58:87:a7:bc:80:58:98:b4:ec:29:4b:c0:67:56:b3:
36:8f:71:95:cb:2c:72:24:6d:32:77:da:3b:ae:7a:6b:57:12:
9a:4b:5e:2e:d2:85:a7:11:83:b9:a9:04:ee:01:4b:3d:d2:22:
37:06:7f:76:bd:b5:e4:43:93:6f:67:5b:4a:6f:5f:8e:d8:54:
57:55:0c:bd:9f:29:ce:4f:65:d3:e7:f0:08:a2:a5:f2:f8:70:
b8:43:5e:ab:5c:a8:94:25:3c:e1:98:80:31:90:7a:b4:0f:cb:
7f:28:f3:46:f2:78:3c:07:38:5f:69:bc:28:7b:0f:97:01:f3:
05:2e:69:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaN1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDE0MTMzNjI3WhcNMjUxMDI5MTMzNjI3WjAYMRYw
FAYDVQQDEw02OGVlNTFlMy03ZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1m3Pd+s1kawZQ5AkK8bBlDUY10cHnlFZz67joMYK/KaSgRYrg9YMtwlk
uQUOXopntPUuoNMHTlTADKhFIXtlPX4yAUnDvpSloANYRoZb3HLRJnz0/xZORnin
xq8IAQHnNAbQS2vXMLzHAWwGAMsbbBNSqIsV8+sOFEd88cDjak2FBHi+U3hL50s3
VR7fy1rHvgTitl1wbt07vjZ/vWNilekUCxbOMSOAJ2UX1VBoMxFk7HAU55CAq5W+
iocJoUEcoO+xq+3KNOtD/hbwWZTVId2Pki1x4eeW6W2zG/5N9fKV+G8URHUxJj59
ycLEGmrKDayz2CEGkgmPJ8JYY0cONwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAk9
i0uJ6Oehs5yV2H7Puik0+uRBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDY5QjVBMkE5MDIxMUYwOTg3NEU0OEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt5KMA0GCSqGSIb3DQEB
CwUAA4IBAQAU5Gaurn+Q+m0FpbKqkRa/3cYwof1umEKHOdetDGKXsNx6c2Ql2KcG
M9VTmQI2ynDijAcefIeIuFLpa9mcCl/t5Y3OgPgEkSV406U8xxox5XZXBW5hkd6h
MQ/xBTKXunjJTFaN68odUyLdkww5GRzlon0DLUm682Jvl3pOR7JcEdVYh6e8gFiY
tOwpS8BnVrM2j3GVyyxyJG0yd9o7rnprVxKaS14u0oWnEYO5qQTuAUs90iI3Bn92
vbXkQ5NvZ1tKb1+O2FRXVQy9nynOT2XT5/AIoqXy+HC4Q16rXKiUJTzhmIAxkHq0
D8t/KPNG8ng8Bzhfabwoew+XAfMFLmke
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:50 2025 by rpki-client