Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61401CA4B89D11F08E1E75BBDAE4EC9C.roa
File: 61401CA4B89D11F08E1E75BBDAE4EC9C.roa (raw, json)
Hash identifier: 0k6nxGJP35eaC3EUOlpXUcTqKnZpY/owElhF6DEWIiw=
Subject key identifier: 34:3C:D8:23:10:B1:8E:44:85:A5:C1:3A:10:EF:0C:FE:DF:A9:96:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A720
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61401CA4B89D11F08E1E75BBDAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:10:53 +0000
ROA not before: Mon 03 Nov 2025 10:10:48 +0000
ROA not after: Mon 09 Feb 2026 10:10:48 +0000
asID: 20473
IP address blocks: 154.196.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108320 (0x1a720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 10:10:48 2025 GMT
Not After : Feb 9 10:10:48 2026 GMT
Subject: CN=69087fad-ae27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:17:78:48:23:96:15:38:51:ae:20:a9:4e:
e8:84:78:7b:20:d7:0b:1a:d5:20:1b:c7:7e:d0:3d:
76:db:41:97:b6:a9:48:60:fc:23:ec:87:5e:8e:ca:
60:3c:03:44:0b:70:92:a9:fd:0f:af:31:94:1b:42:
a7:cd:e5:81:e3:25:7a:51:3a:e6:64:81:51:60:6c:
9a:0c:88:be:37:eb:b0:35:63:7a:d9:d6:e0:db:f1:
ac:3d:e7:6d:38:89:f2:71:54:3f:d1:e8:74:32:1e:
51:0f:69:61:34:cf:d3:6a:56:27:20:ff:dd:37:e1:
94:e9:c9:fa:9d:fe:76:89:41:5f:db:30:e3:22:08:
22:60:0d:7e:db:73:4d:82:9b:7d:03:0f:0a:77:79:
c9:46:1b:dd:c1:2e:ca:a7:28:24:2a:27:4e:d9:54:
e4:af:3c:d1:c5:c9:f3:bb:c4:d0:67:ef:52:38:d1:
e1:63:45:a5:7f:ff:cf:e4:8e:47:1b:41:5f:c8:19:
1c:53:ea:44:34:bf:61:e2:9b:d5:e3:1f:cc:ae:62:
fa:ee:59:23:64:0e:b5:b8:63:ec:38:4a:67:fb:e8:
0d:a5:2e:5e:65:c6:4d:7c:cd:49:3b:13:51:30:59:
f6:ac:48:06:b9:36:9c:d3:57:7e:37:b8:86:60:95:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:D8:23:10:B1:8E:44:85:A5:C1:3A:10:EF:0C:FE:DF:A9:96:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61401CA4B89D11F08E1E75BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9f:cc:f4:e9:74:64:2a:8f:26:5c:48:5d:32:ca:91:cc:17:
92:39:29:bb:16:4f:9c:94:88:9e:de:46:bc:4b:17:c8:3f:3d:
c3:6a:08:25:8e:7c:ab:ff:60:94:34:a0:1c:32:df:85:66:27:
c3:7f:d6:3b:73:81:e6:9b:a6:0a:e8:9a:c2:46:a3:8f:3c:b7:
f1:43:91:fd:f1:bc:ed:6b:91:2a:0b:e8:a1:25:5c:6b:77:44:
17:24:f0:64:33:84:d9:63:6b:7e:2d:73:6c:70:c7:25:82:cc:
10:19:87:7c:15:cc:6b:b9:09:a9:93:88:ef:df:c8:2c:dd:a8:
ca:e2:56:00:53:84:a1:87:ca:8d:5b:6a:10:9a:14:a6:9a:3a:
ec:f6:c8:8d:45:41:a6:ca:d1:d9:65:c3:29:12:1c:27:4f:d4:
c5:45:4e:f3:7e:13:11:bb:c2:18:ee:5c:85:b0:9b:73:74:ac:
1f:f4:d7:d7:7e:a0:60:46:67:87:81:32:51:66:fb:bf:01:ea:
65:4c:5b:89:d8:71:95:ce:b5:3a:48:c1:db:89:16:bd:05:4b:
5d:a6:e1:71:8c:f2:02:9a:a5:5a:84:de:7d:ff:a7:86:ab:15:
b2:3a:75:61:eb:94:4d:b5:8e:e2:d4:43:d9:2d:08:0a:92:1b:
47:79:8e:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAacgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTAzMTAxMDQ4WhcNMjYwMjA5MTAxMDQ4WjAYMRYw
FAYDVQQDEw02OTA4N2ZhZC1hZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9M0XeEgjlhU4Ua4gqU7ohHh7INcLGtUgG8d+0D1220GXtqlIYPwj7Ide
jspgPANEC3CSqf0PrzGUG0KnzeWB4yV6UTrmZIFRYGyaDIi+N+uwNWN62dbg2/Gs
PedtOInycVQ/0eh0Mh5RD2lhNM/TalYnIP/dN+GU6cn6nf52iUFf2zDjIggiYA1+
23NNgpt9Aw8Kd3nJRhvdwS7KpygkKidO2VTkrzzRxcnzu8TQZ+9SONHhY0Wlf//P
5I5HG0FfyBkcU+pENL9h4pvV4x/MrmL67lkjZA61uGPsOEpn++gNpS5eZcZNfM1J
OxNRMFn2rEgGuTac01d+N7iGYJVHMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDQ8
2CMQsY5EhaXBOhDvDP7fqZZUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTQwMUNBNEI4OUQxMUYwOEUxRTc1QkJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsSDMA0GCSqGSIb3DQEB
CwUAA4IBAQCqn8z06XRkKo8mXEhdMsqRzBeSOSm7Fk+clIie3ka8SxfIPz3Daggl
jnyr/2CUNKAcMt+FZifDf9Y7c4Hmm6YK6JrCRqOPPLfxQ5H98bzta5EqC+ihJVxr
d0QXJPBkM4TZY2t+LXNscMclgswQGYd8FcxruQmpk4jv38gs3ajK4lYAU4Shh8qN
W2oQmhSmmjrs9siNRUGmytHZZcMpEhwnT9TFRU7zfhMRu8IY7lyFsJtzdKwf9NfX
fqBgRmeHgTJRZvu/AeplTFuJ2HGVzrU6SMHbiRa9BUtdpuFxjPICmqVahN59/6eG
qxWyOnVh65RNtY7i1EPZLQgKkhtHeY6m
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:16 2025 by rpki-client