Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C3A42AB73411F0A477FAD2DAE4EC9C.roa
File: 12C3A42AB73411F0A477FAD2DAE4EC9C.roa (raw, json)
Hash identifier: NGMLslNxv+qSIIueH1h61AEBUaCaSo5XZxqfBG0vBio=
Subject key identifier: A4:DE:E2:EC:AE:DD:BA:1F:E7:BB:F4:47:37:26:95:74:95:5E:E8:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C3A42AB73411F0A477FAD2DAE4EC9C.roa
Signing time: Sat 01 Nov 2025 15:04:33 +0000
ROA not before: Sat 01 Nov 2025 15:04:28 +0000
ROA not after: Fri 07 Nov 2025 15:04:28 +0000
asID: 395793
IP address blocks: 154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108246 (0x1a6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:04:28 2025 GMT
Not After : Nov 7 15:04:28 2025 GMT
Subject: CN=69062181-a683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b6:91:99:69:52:66:b8:fb:c5:87:6d:fe:4e:
64:5e:e5:3e:0c:b0:3b:8d:ca:32:b3:ec:7a:e6:19:
e8:7b:48:98:1f:62:c6:d0:3e:e2:95:65:79:14:63:
90:da:09:42:ed:dd:80:b3:fc:09:0b:63:9b:dc:ab:
33:20:bc:10:78:9d:30:57:ed:53:f8:92:a3:84:2e:
f7:50:25:ca:a6:67:b2:e1:16:93:a7:ca:9d:35:ac:
46:46:de:d2:82:f3:85:6f:f2:f2:63:24:c7:cc:71:
db:3e:15:62:b7:31:6c:ef:62:b4:61:e4:df:1e:45:
7a:68:6f:c5:92:83:e3:00:7f:10:ec:6d:fa:07:25:
3f:91:56:f5:51:ea:60:6f:8f:47:87:de:09:85:9a:
d6:35:7c:32:69:09:56:ec:2d:03:45:45:75:d9:38:
cf:3c:61:4b:42:ed:e4:f4:59:aa:99:d4:e0:28:a3:
63:8b:b2:55:c7:7e:24:f1:6c:65:db:dd:e0:b1:5c:
ba:46:d3:e1:61:cc:25:14:8e:cf:6a:90:3c:cf:a4:
f4:0a:1f:71:f1:74:a6:13:2b:14:a1:f8:92:ec:31:
d7:b3:22:93:ad:37:1e:16:98:31:bb:e0:4e:a6:09:
a9:a9:23:ee:be:b6:81:24:18:dc:a1:13:7a:cc:8c:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:E2:EC:AE:DD:BA:1F:E7:BB:F4:47:37:26:95:74:95:5E:E8:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12C3A42AB73411F0A477FAD2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0-154.82.167.255
154.194.208.0-154.194.213.255
Signature Algorithm: sha256WithRSAEncryption
61:87:7b:e8:66:fe:a5:81:9e:b6:43:b3:e6:87:40:d2:e6:ca:
59:7b:1d:37:6d:37:0f:8d:3a:55:c4:c2:96:ec:8b:c5:75:8d:
bd:22:a2:0d:5b:94:6c:e9:7a:76:1d:c9:35:41:48:b3:e2:4f:
4e:dd:d0:9e:ef:be:ba:12:2c:d9:46:9a:b2:56:ec:3a:34:85:
03:02:fb:1f:90:05:cc:60:78:2c:36:50:6f:8b:dc:58:7d:d3:
6a:b1:2d:a0:52:53:56:6a:c1:a3:81:92:ca:95:1b:26:73:89:
fa:97:49:4a:ae:00:94:f2:cf:a8:9a:d0:e9:d5:e8:b1:3d:17:
c4:f5:a2:86:72:d3:1d:73:90:b0:f3:12:51:a3:18:1f:0d:47:
e3:3d:fd:fb:c3:05:55:fb:21:a1:d3:fa:f0:86:ad:53:cc:a2:
b0:97:1e:c2:37:28:65:9d:98:fc:e0:f2:af:f0:8e:c0:52:c9:
e6:7d:a2:39:f1:a4:c2:13:20:d5:ed:2a:a1:0d:b5:bf:b4:08:
52:03:3c:46:2c:94:fa:f6:81:41:e4:fe:7d:f8:82:e5:f0:5f:
e9:4a:28:a2:84:e7:3c:cb:05:b6:80:1e:55:8a:aa:73:bc:c9:
7e:34:0e:0d:f7:92:a1:1c:d8:2e:d1:db:d5:10:fc:a4:c9:ba:
ff:a8:31:86
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAabWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTAxMTUwNDI4WhcNMjUxMTA3MTUwNDI4WjAYMRYw
FAYDVQQDEw02OTA2MjE4MS1hNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9baRmWlSZrj7xYdt/k5kXuU+DLA7jcoys+x65hnoe0iYH2LG0D7ilWV5
FGOQ2glC7d2As/wJC2Ob3KszILwQeJ0wV+1T+JKjhC73UCXKpmey4RaTp8qdNaxG
Rt7SgvOFb/LyYyTHzHHbPhVitzFs72K0YeTfHkV6aG/FkoPjAH8Q7G36ByU/kVb1
Uepgb49Hh94JhZrWNXwyaQlW7C0DRUV12TjPPGFLQu3k9FmqmdTgKKNji7JVx34k
8Wxl293gsVy6RtPhYcwlFI7PapA8z6T0Ch9x8XSmEysUofiS7DHXsyKTrTceFpgx
u+BOpgmpqSPuvraBJBjcoRN6zIz+tQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKTe
4uyu3bof57v0RzcmlXSVXujwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkMzQTQyQUI3MzQxMUYwQTQ3N0ZBRDJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGaUqIDBAOaUqAwDAME
BJrC0AMEAZrC1DANBgkqhkiG9w0BAQsFAAOCAQEAYYd76Gb+pYGetkOz5odA0ubK
WXsdN203D406VcTCluyLxXWNvSKiDVuUbOl6dh3JNUFIs+JPTt3Qnu++uhIs2Uaa
slbsOjSFAwL7H5AFzGB4LDZQb4vcWH3TarEtoFJTVmrBo4GSypUbJnOJ+pdJSq4A
lPLPqJrQ6dXosT0XxPWihnLTHXOQsPMSUaMYHw1H4z39+8MFVfshodP68IatU8yi
sJcewjcoZZ2Y/ODyr/COwFLJ5n2iOfGkwhMg1e0qoQ21v7QIUgM8RiyU+vaBQeT+
ffiC5fBf6UooooTnPMsFtoAeVYqqc7zJfjQODfeSoRzYLtHb1RD8pMm6/6gxhg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:17 2025 by rpki-client