Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/344114F0B4C511F085A91B8BDAE4EC9C.roa
File: 344114F0B4C511F085A91B8BDAE4EC9C.roa (raw, json)
Hash identifier: +vuD0srRY1r2k/ceEZOMEUWkI+J0fEjdlfcjlTnUYvw=
Subject key identifier: CF:FD:BF:B9:1F:E9:79:46:8B:00:7F:D2:47:54:C7:04:4B:1E:34:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A62C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/344114F0B4C511F085A91B8BDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 12:45:53 +0000
ROA not before: Wed 29 Oct 2025 12:45:48 +0000
ROA not after: Fri 05 Dec 2025 12:45:48 +0000
asID: 151407
IP address blocks: 154.88.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108076 (0x1a62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 12:45:48 2025 GMT
Not After : Dec 5 12:45:48 2025 GMT
Subject: CN=69020c81-bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:d8:a6:f2:a3:c1:07:27:a5:06:95:60:9b:
1b:83:f2:2d:50:ce:cd:25:4a:de:69:4f:94:2e:3e:
33:97:05:ba:49:9b:ea:fd:b8:f0:aa:88:c1:7d:ff:
31:19:f0:49:82:e3:d2:39:4b:91:0f:86:53:3b:54:
a7:c8:63:e0:00:43:8a:e4:9e:37:c0:e8:29:c8:fb:
75:2e:12:bb:cc:88:a6:e1:ad:90:c0:05:b2:68:f2:
b0:ef:0e:51:d0:66:3a:83:78:d3:17:09:ab:47:53:
b9:4d:5e:05:d6:31:b7:54:bb:f8:fd:b8:f3:59:0f:
0a:d3:2c:df:cf:21:f2:8b:f1:53:fb:73:63:b4:13:
e0:8c:97:d1:53:8b:65:5d:48:a9:54:f5:56:13:d4:
97:65:44:9e:78:b7:5d:9e:0a:e3:c6:52:10:a5:cb:
6d:23:c8:25:21:f5:a2:f6:e9:c0:3d:4c:41:02:2a:
61:c1:93:9f:08:40:db:7e:72:4c:e2:39:2b:85:8d:
8b:e9:d9:67:a6:bd:46:fe:6e:bc:bf:1d:a2:3f:9f:
22:e8:b2:27:47:ef:f9:4f:ab:86:a4:9f:e1:61:43:
dd:46:5b:6f:64:20:d3:6b:23:13:f0:c1:58:45:99:
96:2f:f9:af:ab:89:66:ce:90:1b:b2:1c:34:b6:8f:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:BF:B9:1F:E9:79:46:8B:00:7F:D2:47:54:C7:04:4B:1E:34:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/344114F0B4C511F085A91B8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:04:d2:f7:5a:7a:73:ba:55:29:e6:7d:09:ad:eb:5d:3d:5e:
98:f7:06:0b:63:ac:3a:60:ad:0d:10:ca:67:f4:bd:99:dc:29:
77:f6:ba:0b:fc:04:36:bb:9f:5c:43:39:b7:66:bb:68:22:91:
4b:1c:b5:fe:80:29:89:b4:f7:56:78:27:c7:73:48:f5:5c:c8:
a2:d1:c1:b1:11:7a:e0:d8:c6:58:43:04:c8:2c:ff:7c:95:65:
7a:ad:de:af:72:ea:a9:5a:46:fe:f9:4f:09:dd:02:7b:54:d2:
99:af:58:f4:67:7b:16:50:5c:5e:3b:29:17:26:e4:6d:e5:32:
32:29:62:e3:30:e2:cb:76:5e:25:62:99:d6:d5:f0:9b:5a:e5:
80:24:3c:e6:12:8c:c3:9f:a0:51:17:30:2f:7c:a8:a5:fb:0b:
3c:81:ee:af:e1:f1:36:90:d9:3d:f0:f4:9d:74:53:2f:d1:98:
72:d2:cf:7a:99:41:e0:97:a0:06:b2:3d:45:57:d6:8b:14:41:
b5:2d:ff:4a:64:75:2b:72:eb:49:55:e8:f1:f6:57:b3:f0:2e:
1d:86:c7:30:58:b2:2f:2a:2d:6b:35:12:9a:56:30:71:06:0e:
8a:3a:c9:2b:a0:a6:c2:80:2d:4c:1f:62:4e:1e:fc:f1:e7:bf:
9c:86:f1:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaYsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTI0NTQ4WhcNMjUxMjA1MTI0NTQ4WjAYMRYw
FAYDVQQDEw02OTAyMGM4MS1iYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyorYpvKjwQcnpQaVYJsbg/ItUM7NJUreaU+ULj4zlwW6SZvq/bjwqojB
ff8xGfBJguPSOUuRD4ZTO1SnyGPgAEOK5J43wOgpyPt1LhK7zIim4a2QwAWyaPKw
7w5R0GY6g3jTFwmrR1O5TV4F1jG3VLv4/bjzWQ8K0yzfzyHyi/FT+3NjtBPgjJfR
U4tlXUipVPVWE9SXZUSeeLddngrjxlIQpcttI8glIfWi9unAPUxBAiphwZOfCEDb
fnJM4jkrhY2L6dlnpr1G/m68vx2iP58i6LInR+/5T6uGpJ/hYUPdRltvZCDTayMT
8MFYRZmWL/mvq4lmzpAbshw0to/mYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM/9
v7kf6XlGiwB/0kdUxwRLHjRbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDQxMTRGMEI0QzUxMUYwODVBOTFCOEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlhAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLBNL3WnpzulUp5n0JretdPV6Y9wYLY6w6YK0NEMpn9L2Z3Cl39roL
/AQ2u59cQzm3ZrtoIpFLHLX+gCmJtPdWeCfHc0j1XMii0cGxEXrg2MZYQwTILP98
lWV6rd6vcuqpWkb++U8J3QJ7VNKZr1j0Z3sWUFxeOykXJuRt5TIyKWLjMOLLdl4l
YpnW1fCbWuWAJDzmEozDn6BRFzAvfKil+ws8ge6v4fE2kNk98PSddFMv0Zhy0s96
mUHgl6AGsj1FV9aLFEG1Lf9KZHUrcutJVejx9lez8C4dhscwWLIvKi1rNRKaVjBx
Bg6KOskroKbCgC1MH2JOHvzx57+chvHd
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:06 2025 by rpki-client