Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BD9AAECAF3211F0965B5FE3DAE4EC9C.roa
File: 5BD9AAECAF3211F0965B5FE3DAE4EC9C.roa (raw, json)
Hash identifier: BLS5l4q5A3lco58pa23coTHWZaOuoZYhgGg+ZK4PRBU=
Subject key identifier: 28:DE:AE:2D:98:0D:77:7F:1B:62:33:85:85:A6:32:A3:0D:52:A6:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BD9AAECAF3211F0965B5FE3DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 10:32:08 +0000
ROA not before: Wed 22 Oct 2025 10:31:59 +0000
ROA not after: Sat 29 Nov 2025 10:31:59 +0000
asID: 401783
IP address blocks: 154.82.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107687 (0x1a4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 10:31:59 2025 GMT
Not After : Nov 29 10:31:59 2025 GMT
Subject: CN=68f8b2a7-96f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:d7:ad:3e:97:a7:0f:75:3e:2e:da:7c:3f:
22:ff:ab:14:00:15:35:72:36:af:53:76:aa:f6:9b:
e5:22:3e:67:96:a8:aa:e3:19:32:b8:e2:5b:60:98:
21:02:cf:b0:9e:be:99:c5:43:4f:f8:ce:58:1c:49:
23:91:7c:ec:1f:71:3f:d9:bd:df:51:52:55:09:04:
98:23:06:e9:cb:53:b6:b8:01:3f:62:f7:b1:4f:98:
28:43:c7:29:9b:81:0c:2a:29:23:01:fc:49:be:fe:
c3:30:91:74:80:e3:5a:44:d8:ff:39:48:5b:0c:71:
19:c3:d0:0c:d2:99:4c:dd:3f:cc:4a:27:04:14:14:
a7:cd:f3:13:95:a1:68:6d:31:42:03:7d:61:91:b8:
e1:c6:25:3c:f3:28:cb:b1:e9:f7:74:c2:38:a9:61:
be:e4:f9:a7:9a:f5:f4:52:1e:ba:90:21:99:42:42:
c3:c1:06:20:3e:d3:09:61:fb:88:0f:47:13:b1:fa:
18:06:66:12:5c:24:4f:15:76:12:2d:da:ce:a9:76:
a7:73:d6:3d:30:fb:34:96:a4:e3:b7:a4:f0:27:15:
3a:61:4f:80:e4:30:1c:de:e1:d5:90:da:d0:6b:98:
f0:09:f9:65:9a:1c:51:f0:35:84:cd:d3:df:1d:c2:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:AE:2D:98:0D:77:7F:1B:62:33:85:85:A6:32:A3:0D:52:A6:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BD9AAECAF3211F0965B5FE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.181.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3c:90:c3:0d:f2:16:21:5b:b3:00:81:92:08:0e:46:db:d1:
62:b2:a5:fc:ce:8f:45:43:f9:0f:06:df:7d:08:82:3d:0a:bc:
f0:1d:c6:df:4a:71:70:5e:4f:63:7b:10:71:d3:63:98:ae:8a:
2c:1d:8c:e5:c7:00:24:4a:66:60:30:80:70:fb:aa:88:d3:b4:
67:43:d2:ec:46:79:dc:ca:aa:49:a4:bd:ab:2a:33:a2:06:be:
ba:2f:b2:49:87:fe:12:37:5a:4f:2d:ce:a4:58:a3:f7:3f:08:
c3:51:c1:83:ee:8e:a9:ad:40:39:61:95:0a:92:c3:2a:cc:13:
a7:e9:02:c1:b9:12:63:aa:2f:de:aa:ad:a6:22:3a:63:c8:cb:
1f:32:4d:47:17:8e:f1:c1:b5:de:a6:d0:0f:cc:d4:4c:30:b6:
bf:5c:8c:e9:ee:ad:31:00:9c:92:09:40:0c:ae:85:f7:aa:2b:
ad:c0:e9:cd:2e:20:0d:da:17:55:e8:2d:e0:19:60:af:84:79:
ae:47:fc:92:98:4f:a9:63:dd:d9:a5:79:c7:bf:fd:0f:a4:4f:
51:93:d0:07:a3:27:82:56:36:a2:90:93:99:ad:0b:5d:1e:fe:
8a:2b:87:07:4f:43:59:c3:73:f6:85:47:ba:d0:45:af:f9:02:
65:f2:54:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaSnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIyMTAzMTU5WhcNMjUxMTI5MTAzMTU5WjAYMRYw
FAYDVQQDEw02OGY4YjJhNy05NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw/TXrT6Xpw91Pi7afD8i/6sUABU1cjavU3aq9pvlIj5nlqiq4xkyuOJb
YJghAs+wnr6ZxUNP+M5YHEkjkXzsH3E/2b3fUVJVCQSYIwbpy1O2uAE/YvexT5go
Q8cpm4EMKikjAfxJvv7DMJF0gONaRNj/OUhbDHEZw9AM0plM3T/MSicEFBSnzfMT
laFobTFCA31hkbjhxiU88yjLsen3dMI4qWG+5PmnmvX0Uh66kCGZQkLDwQYgPtMJ
YfuID0cTsfoYBmYSXCRPFXYSLdrOqXanc9Y9MPs0lqTjt6TwJxU6YU+A5DAc3uHV
kNrQa5jwCfllmhxR8DWEzdPfHcL+RQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCje
ri2YDXd/G2IzhYWmMqMNUqbfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QkQ5QUFFQ0FGMzIxMUYwOTY1QjVGRTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlK1MA0GCSqGSIb3DQEB
CwUAA4IBAQAFPJDDDfIWIVuzAIGSCA5G29FisqX8zo9FQ/kPBt99CII9CrzwHcbf
SnFwXk9jexBx02OYroosHYzlxwAkSmZgMIBw+6qI07RnQ9LsRnncyqpJpL2rKjOi
Br66L7JJh/4SN1pPLc6kWKP3PwjDUcGD7o6prUA5YZUKksMqzBOn6QLBuRJjqi/e
qq2mIjpjyMsfMk1HF47xwbXeptAPzNRMMLa/XIzp7q0xAJySCUAMroX3qiutwOnN
LiAN2hdV6C3gGWCvhHmuR/ySmE+pY93ZpXnHv/0PpE9Rk9AHoyeCVjaikJOZrQtd
Hv6KK4cHT0NZw3P2hUe60EWv+QJl8lRm
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:41 2025 by rpki-client