Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E33AFF8B4AA11F08BF783E9DAE4EC9C.roa
File: 1E33AFF8B4AA11F08BF783E9DAE4EC9C.roa (raw, json)
Hash identifier: lod/uCNkVYwnfI14r2tgbbZTYsQ53JyX/xfAuMVzuBg=
Subject key identifier: 45:FA:08:02:77:C4:B3:BA:BA:AD:81:EC:F1:BF:C5:01:81:A9:6B:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E33AFF8B4AA11F08BF783E9DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 09:32:00 +0000
ROA not before: Wed 29 Oct 2025 09:31:53 +0000
ROA not after: Fri 05 Dec 2025 09:31:53 +0000
asID: 20326
IP address blocks: 154.83.132.0/24 maxlen: 24
154.83.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108068 (0x1a624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:31:53 2025 GMT
Not After : Dec 5 09:31:53 2025 GMT
Subject: CN=6901df0f-276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:4c:fc:7c:17:c9:ed:0c:d5:1e:43:9b:94:
f6:4a:18:99:f0:0d:13:00:7b:c8:69:fa:b0:8a:03:
74:9a:55:b7:f6:37:0c:5a:a5:0b:84:b4:00:00:65:
bb:94:3f:dd:db:a3:78:3d:7c:92:67:5f:76:32:ba:
35:a4:48:f8:32:34:a4:66:19:be:3a:eb:bd:61:2a:
31:5c:9c:40:ae:41:c5:d2:21:7a:99:39:80:d4:5c:
fb:52:b2:07:ba:4f:eb:ba:5f:9b:64:50:2c:9f:90:
4d:5e:13:21:f5:a1:31:29:73:fe:64:f1:2b:b0:1a:
da:d0:48:1e:42:00:58:26:45:9d:9b:0a:23:74:79:
33:90:48:7a:59:f7:b2:92:11:8c:30:e6:3b:60:b3:
29:6d:9a:81:3f:14:a9:f9:6f:35:4f:dd:eb:fc:51:
c3:5e:80:3f:87:df:42:4c:32:39:24:17:67:07:37:
f3:33:b9:4d:87:2e:1e:ad:07:40:7e:99:ce:1c:ec:
4e:64:6d:5a:0a:71:dc:ac:39:44:6e:a8:a6:7a:29:
f0:8f:ea:2c:e6:29:fc:a0:7c:80:53:66:d3:47:ce:
12:ff:63:17:83:92:23:f8:1d:f7:19:3e:9c:3b:66:
c0:3f:66:de:51:55:2f:d7:31:bf:8b:68:bc:81:a8:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:08:02:77:C4:B3:BA:BA:AD:81:EC:F1:BF:C5:01:81:A9:6B:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E33AFF8B4AA11F08BF783E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
154.83.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:b1:38:7e:2a:42:10:f1:a6:f2:7d:aa:04:c8:0c:d6:12:e2:
67:a8:31:6b:d9:4c:ec:88:6b:b4:03:aa:3f:55:26:66:4b:58:
61:53:f8:d0:37:bc:c8:fa:14:ee:e2:f9:a1:1a:63:64:bd:29:
ec:c9:4b:e8:aa:21:bc:cf:58:d7:ed:dd:01:b2:2d:1b:6a:bd:
9f:cf:1f:70:19:5e:7f:13:9d:54:94:dd:14:45:47:45:de:a7:
9f:2e:3a:42:39:55:19:6a:ed:e6:76:47:e3:c3:51:04:d7:45:
b0:8d:26:c7:0b:1e:c2:4b:c8:fc:a7:04:80:25:ed:ec:64:70:
22:9d:21:42:da:e5:1f:97:7f:3c:06:a5:ad:db:e8:b2:2a:b8:
1f:b8:35:4d:62:7e:40:1d:06:90:7c:b8:69:21:48:9a:b0:28:
ff:fb:46:c5:96:9b:de:d0:90:38:61:ca:02:1e:75:c4:0d:dc:
d2:9c:cb:af:5e:65:55:e2:ef:56:60:28:20:f0:7c:5b:d7:07:
43:10:e4:9d:95:62:68:5b:94:47:98:d4:a1:91:1e:d9:81:40:
86:64:f3:31:d4:58:4e:40:80:c4:4b:05:b7:90:4b:7e:6e:91:
34:1d:a6:da:d6:5e:56:d1:90:8d:00:50:8d:bf:a7:a3:44:36:
f7:ff:51:02
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAaYkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MDkzMTUzWhcNMjUxMjA1MDkzMTUzWjAYMRYw
FAYDVQQDEw02OTAxZGYwZi0yNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5d9M/HwXye0M1R5Dm5T2ShiZ8A0TAHvIafqwigN0mlW39jcMWqULhLQA
AGW7lD/d26N4PXySZ192Mro1pEj4MjSkZhm+Ouu9YSoxXJxArkHF0iF6mTmA1Fz7
UrIHuk/rul+bZFAsn5BNXhMh9aExKXP+ZPErsBra0EgeQgBYJkWdmwojdHkzkEh6
WfeykhGMMOY7YLMpbZqBPxSp+W81T93r/FHDXoA/h99CTDI5JBdnBzfzM7lNhy4e
rQdAfpnOHOxOZG1aCnHcrDlEbqimeinwj+os5in8oHyAU2bTR84S/2MXg5Ij+B33
GT6cO2bAP2beUVUv1zG/i2i8gagFDQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEX6
CAJ3xLO6uq2B7PG/xQGBqWu/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTMzQUZGOEI0QUExMUYwOEJGNzgzRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlOEAwQBmlOKMA0GCSqG
SIb3DQEBCwUAA4IBAQAdsTh+KkIQ8abyfaoEyAzWEuJnqDFr2UzsiGu0A6o/VSZm
S1hhU/jQN7zI+hTu4vmhGmNkvSnsyUvoqiG8z1jX7d0Bsi0bar2fzx9wGV5/E51U
lN0URUdF3qefLjpCOVUZau3mdkfjw1EE10WwjSbHCx7CS8j8pwSAJe3sZHAinSFC
2uUfl388BqWt2+iyKrgfuDVNYn5AHQaQfLhpIUiasCj/+0bFlpve0JA4YcoCHnXE
DdzSnMuvXmVV4u9WYCgg8Hxb1wdDEOSdlWJoW5RHmNShkR7ZgUCGZPMx1FhOQIDE
SwW3kEt+bpE0Haba1l5W0ZCNAFCNv6ejRDb3/1EC
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:29 2025 by rpki-client