Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43D3694EB00C11F0904A55E8DAE4EC9C.roa
File: 43D3694EB00C11F0904A55E8DAE4EC9C.roa (raw, json)
Hash identifier: z6aCOtI1109HIZc3o71RamF+eTZ0+o2MZun/lcKla70=
Subject key identifier: F9:19:E7:0C:34:F9:C6:19:0D:66:0B:5E:EE:5E:6D:C1:FD:88:24:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43D3694EB00C11F0904A55E8DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 12:31:57 +0000
ROA not before: Thu 23 Oct 2025 12:31:53 +0000
ROA not after: Fri 28 Nov 2025 12:31:53 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107708 (0x1a4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 12:31:53 2025 GMT
Not After : Nov 28 12:31:53 2025 GMT
Subject: CN=68fa203d-156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:ac:f5:07:9c:03:05:fb:96:e4:63:3f:a8:
56:18:45:4e:9c:50:f6:30:5a:79:eb:c3:3b:a3:bf:
44:27:75:fc:c2:5d:56:b9:7c:e5:4d:98:2d:4e:ec:
6c:9b:ed:75:f8:72:7f:6c:f5:da:1b:1f:03:75:50:
11:21:64:9d:a7:e7:90:e8:5f:6f:fe:a9:69:e9:ea:
79:44:c2:94:41:87:30:2d:90:6b:fd:5b:9f:a0:58:
da:ef:d7:82:68:eb:f8:c6:1f:a1:61:02:7c:bb:53:
9f:c8:4c:25:63:90:2a:ef:a5:d8:3a:55:27:c1:a0:
03:74:24:e1:be:d9:82:7b:a1:3f:40:28:67:c2:83:
88:fc:f9:c7:a0:83:64:f9:0e:d8:7a:d6:0f:7e:25:
46:8c:cf:f9:63:47:4e:51:b4:63:5c:65:39:94:e8:
99:31:d3:7d:23:2d:03:bb:51:7a:d8:8b:fb:62:e1:
22:13:c3:05:48:ff:2c:01:0f:a6:75:5d:68:ad:65:
99:e7:ea:79:6a:cf:1a:9f:9f:da:ee:c6:54:bc:bf:
e0:7f:2c:d5:27:21:5a:70:be:40:7a:91:26:7a:a7:
81:b0:2b:0a:c5:b7:3b:d0:a3:d4:a5:85:eb:8d:7e:
77:fe:bf:f0:42:82:7e:4f:2e:65:14:02:62:bf:4d:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:E7:0C:34:F9:C6:19:0D:66:0B:5E:EE:5E:6D:C1:FD:88:24:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43D3694EB00C11F0904A55E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
00:78:33:6f:2c:03:3b:70:57:41:ab:35:97:8e:e7:55:17:cd:
ae:f0:94:04:e8:3f:1c:16:3b:40:cf:15:23:13:c4:c3:1b:7e:
c2:45:20:4d:90:8e:ef:a9:2b:1f:f6:89:1d:eb:0f:f3:80:da:
73:5f:8d:64:e6:84:eb:a4:c7:9c:9c:d4:36:67:4a:10:35:49:
10:2b:0e:5d:97:b0:bf:8c:9b:1a:df:04:b4:ef:6a:4e:f8:32:
16:4c:f6:c3:cf:6e:b4:c1:8e:5e:e6:a2:9f:42:63:60:db:5b:
81:e0:88:32:50:6f:43:6e:34:2f:64:8b:20:ce:da:2a:17:62:
7b:63:97:c2:b9:16:5c:1f:4c:8b:12:3a:7c:3e:5e:fa:d7:93:
a7:8d:57:2f:fa:91:68:46:ee:75:13:be:9c:7b:8a:36:7b:ed:
b8:7b:80:d8:b3:3f:a7:b4:00:70:77:a9:10:42:0d:1c:e3:8c:
21:9c:b0:c6:ca:cc:63:2a:90:da:65:2c:d6:7d:51:c7:42:21:
00:7d:b4:d2:02:d8:36:aa:79:5c:29:6d:90:01:6d:4a:f2:9c:
f5:aa:bf:11:bf:c6:7a:e6:88:a1:ca:0c:05:7e:0f:3f:cc:2e:
32:76:60:ca:43:1d:9e:13:72:aa:83:dd:9b:77:0c:a7:81:a1:
24:50:b3:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaS8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIzMTIzMTUzWhcNMjUxMTI4MTIzMTUzWjAYMRYw
FAYDVQQDEw02OGZhMjAzZC0xNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmyGs9QecAwX7luRjP6hWGEVOnFD2MFp568M7o79EJ3X8wl1WuXzlTZgt
Tuxsm+11+HJ/bPXaGx8DdVARIWSdp+eQ6F9v/qlp6ep5RMKUQYcwLZBr/VufoFja
79eCaOv4xh+hYQJ8u1OfyEwlY5Aq76XYOlUnwaADdCThvtmCe6E/QChnwoOI/PnH
oINk+Q7YetYPfiVGjM/5Y0dOUbRjXGU5lOiZMdN9Iy0Du1F62Iv7YuEiE8MFSP8s
AQ+mdV1orWWZ5+p5as8an5/a7sZUvL/gfyzVJyFacL5AepEmeqeBsCsKxbc70KPU
pYXrjX53/r/wQoJ+Ty5lFAJiv01pPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPkZ
5ww0+cYZDWYLXu5ebcH9iCSKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80M0QzNjk0RUIwMEMxMUYwOTA0QTU1RThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJFMA0GCSqGSIb3DQEB
CwUAA4IBAQAAeDNvLAM7cFdBqzWXjudVF82u8JQE6D8cFjtAzxUjE8TDG37CRSBN
kI7vqSsf9okd6w/zgNpzX41k5oTrpMecnNQ2Z0oQNUkQKw5dl7C/jJsa3wS072pO
+DIWTPbDz260wY5e5qKfQmNg21uB4IgyUG9DbjQvZIsgztoqF2J7Y5fCuRZcH0yL
Ejp8Pl7615OnjVcv+pFoRu51E76ce4o2e+24e4DYsz+ntABwd6kQQg0c44whnLDG
ysxjKpDaZSzWfVHHQiEAfbTSAtg2qnlcKW2QAW1K8pz1qr8Rv8Z65oihygwFfg8/
zC4ydmDKQx2eE3Kqg92bdwyngaEkULNT
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:18 2025 by rpki-client