Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CB7DE78B4C611F0BA889293DAE4EC9C.roa
File: 9CB7DE78B4C611F0BA889293DAE4EC9C.roa (raw, json)
Hash identifier: WS3r4rIz3/RSw1MYscfezpTrpaTnpP6L+vTjzUEGlgI=
Subject key identifier: F7:D6:96:16:B6:F7:C2:2C:15:9B:97:82:93:AB:18:3D:78:DF:C9:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A62E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CB7DE78B4C611F0BA889293DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 12:55:58 +0000
ROA not before: Wed 29 Oct 2025 12:55:53 +0000
ROA not after: Fri 05 Dec 2025 12:55:53 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108078 (0x1a62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 12:55:53 2025 GMT
Not After : Dec 5 12:55:53 2025 GMT
Subject: CN=69020ede-d14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:8d:86:04:99:cf:0e:9a:fa:c1:0e:7f:f2:
71:2a:15:2d:a1:91:4b:97:0d:e6:8a:57:a9:d1:43:
b3:09:d9:45:28:71:2e:63:90:ff:5f:18:39:7b:d3:
3a:d3:da:ba:58:74:db:9e:aa:0f:27:cd:64:26:ba:
c2:24:dd:61:bd:2a:98:c8:ab:e5:93:14:f1:6f:2e:
b6:69:fa:7a:a4:6b:0b:5c:28:39:43:c1:12:6b:c1:
f1:04:0c:75:6f:88:19:36:ed:c5:ef:fc:0b:9f:f2:
07:dd:8f:5e:e6:f9:cc:c3:07:1c:25:e9:1e:d3:96:
6a:b6:91:cc:c8:ef:a3:fc:a0:97:3c:0e:13:25:47:
fb:77:5e:0b:bc:a2:a9:c3:56:f4:c4:aa:55:7e:77:
85:c8:0a:53:34:22:90:3e:43:32:7a:66:8f:a7:cd:
a8:86:fe:36:ce:97:34:80:8c:4b:34:37:f1:bc:ce:
a0:17:62:b9:f8:89:d5:27:3b:70:f3:51:7c:de:84:
0e:d6:74:63:12:68:8a:9b:36:07:ed:71:6b:41:d7:
c4:c0:68:4d:35:78:4c:f2:e6:52:1f:2d:8d:38:e2:
b6:7d:5f:e8:8b:b4:ba:4f:f3:30:b2:e2:e3:68:42:
ce:1d:c1:51:53:48:ad:be:06:7b:33:63:23:a7:82:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D6:96:16:B6:F7:C2:2C:15:9B:97:82:93:AB:18:3D:78:DF:C9:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CB7DE78B4C611F0BA889293DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:77:3b:6a:a9:7b:cb:62:fa:43:2a:f5:6f:25:ed:13:12:0e:
76:c8:23:b4:1d:03:86:08:83:0e:a6:07:7b:1d:e1:42:e3:a1:
50:97:63:99:90:cd:fe:a7:55:ce:84:52:2a:46:2a:9a:65:a9:
27:12:ee:bc:a1:68:e6:0a:97:ad:75:64:23:51:8b:50:d0:59:
14:f0:db:07:86:dc:09:d8:de:5d:75:e0:2f:42:ea:ce:5c:b6:
dc:e0:1b:d9:17:0b:24:6d:d6:f7:fd:5d:8d:d5:7c:c5:b6:d3:
70:b5:c0:97:9f:2a:ee:ae:0a:13:a8:db:12:fd:1a:7f:22:88:
04:a1:08:a7:ca:2f:4c:c3:18:6d:f1:a5:4d:66:cc:83:5c:54:
0b:3b:d2:3b:cb:b7:9e:7d:a1:85:d9:52:a6:d3:c0:7d:34:e0:
3c:91:57:8e:bf:53:e0:45:57:58:19:4f:85:75:66:7e:13:98:
7f:21:a7:bf:39:b7:50:db:42:d0:15:62:40:29:e1:21:cc:d9:
6e:b7:f3:02:83:a2:48:0a:be:40:ce:f8:ae:17:64:2d:c4:8c:
d3:b3:6b:7e:7e:d7:15:ad:e3:9a:f8:b9:4f:3d:55:9d:34:ac:
cd:45:f1:7f:4f:17:6b:04:98:3b:a9:b1:f6:8c:08:37:c3:49:
0c:e4:b3:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaYuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTI1NTUzWhcNMjUxMjA1MTI1NTUzWjAYMRYw
FAYDVQQDEw02OTAyMGVkZS1kMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwhiNhgSZzw6a+sEOf/JxKhUtoZFLlw3milep0UOzCdlFKHEuY5D/Xxg5
e9M609q6WHTbnqoPJ81kJrrCJN1hvSqYyKvlkxTxby62afp6pGsLXCg5Q8ESa8Hx
BAx1b4gZNu3F7/wLn/IH3Y9e5vnMwwccJeke05ZqtpHMyO+j/KCXPA4TJUf7d14L
vKKpw1b0xKpVfneFyApTNCKQPkMyemaPp82ohv42zpc0gIxLNDfxvM6gF2K5+InV
Jztw81F83oQO1nRjEmiKmzYH7XFrQdfEwGhNNXhM8uZSHy2NOOK2fV/oi7S6T/Mw
suLjaELOHcFRU0itvgZ7M2Mjp4IiwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPfW
lha298IsFZuXgpOrGD1438mQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0I3REU3OEI0QzYxMUYwQkE4ODkyOTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQCqdztqqXvLYvpDKvVvJe0TEg52yCO0HQOGCIMOpgd7HeFC46FQl2OZ
kM3+p1XOhFIqRiqaZaknEu68oWjmCpetdWQjUYtQ0FkU8NsHhtwJ2N5ddeAvQurO
XLbc4BvZFwskbdb3/V2N1XzFttNwtcCXnyrurgoTqNsS/Rp/IogEoQinyi9Mwxht
8aVNZsyDXFQLO9I7y7eefaGF2VKm08B9NOA8kVeOv1PgRVdYGU+FdWZ+E5h/Iae/
ObdQ20LQFWJAKeEhzNlut/MCg6JICr5AzviuF2QtxIzTs2t+ftcVreOa+LlPPVWd
NKzNRfF/TxdrBJg7qbH2jAg3w0kM5LOx
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:52 2025 by rpki-client