Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCD12AACB38F11F0A0EC5BE6DAE4EC9C.roa
File: CCD12AACB38F11F0A0EC5BE6DAE4EC9C.roa (raw, json)
Hash identifier: OMzbGBw2pJB0a7BhBWnWPrsYR/8K8ZcoKlgPqv0t3T0=
Subject key identifier: D5:A2:21:53:25:49:B8:F6:EB:A9:C7:F2:C3:1B:59:5D:5B:7F:F0:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCD12AACB38F11F0A0EC5BE6DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 23:51:05 +0000
ROA not before: Mon 27 Oct 2025 23:50:59 +0000
ROA not after: Sat 03 Jan 2026 23:50:59 +0000
asID: 63139
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.75.0/24 maxlen: 24
154.93.76.0/24 maxlen: 24
154.93.77.0/24 maxlen: 24
154.93.78.0/24 maxlen: 24
154.93.79.0/24 maxlen: 24
154.93.80.0/24 maxlen: 24
154.93.81.0/24 maxlen: 24
154.93.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107964 (0x1a5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 23:50:59 2025 GMT
Not After : Jan 3 23:50:59 2026 GMT
Subject: CN=69000569-51f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:a0:6d:02:5e:5f:69:34:3d:24:9c:cb:95:
2c:20:41:31:93:c0:14:ef:83:1b:9f:0c:b3:d0:2d:
bf:91:a8:57:1e:df:15:7b:b4:66:0d:1a:23:97:6a:
e7:d6:8f:c3:81:2d:e5:83:7d:52:37:d6:b2:36:7f:
fa:e6:5f:72:7f:cd:c7:da:f2:d3:ee:ec:f4:e9:18:
54:62:f8:ec:7a:cc:8c:60:df:5e:cf:62:7a:39:4f:
6e:97:b0:f2:d7:45:d3:e3:29:15:f4:6c:b2:aa:7e:
9d:64:2f:d9:49:37:92:49:80:14:fc:95:84:04:9e:
c0:e1:63:6b:f5:18:b8:d6:a6:3c:d6:49:f0:8e:d1:
61:ff:aa:f5:2e:df:24:a1:3c:29:5f:9f:07:00:b7:
68:a5:89:67:61:28:5f:20:d6:76:47:a7:f8:dd:d7:
34:74:4a:b8:10:46:b8:45:46:c0:99:c5:24:79:bc:
7e:b7:77:07:92:54:76:cb:eb:16:96:c3:5d:da:01:
bf:d7:e3:3e:e2:9c:33:d3:03:92:91:21:31:6e:09:
b6:e0:99:a1:66:b7:a7:75:6c:5f:44:14:4f:c1:57:
b7:27:9d:75:9a:dd:bf:6e:28:2a:9c:08:8b:c1:56:
e4:b4:1e:4c:5a:5d:fc:4d:d4:35:94:ad:1b:74:19:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:21:53:25:49:B8:F6:EB:A9:C7:F2:C3:1B:59:5D:5B:7F:F0:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCD12AACB38F11F0A0EC5BE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0-154.93.82.255
Signature Algorithm: sha256WithRSAEncryption
06:84:7d:5d:6c:28:39:5c:26:f6:aa:bf:08:e6:51:cb:bc:54:
4d:c4:ef:ac:03:c5:3f:04:af:5f:12:98:ef:84:bc:5c:22:8e:
0e:5d:3b:ac:dc:48:3d:3c:36:63:c0:27:67:d0:f5:47:24:e7:
0d:a9:dd:87:c3:c8:9a:65:73:eb:ed:b6:f5:42:b0:ef:e4:48:
dc:6a:38:ba:60:48:24:9b:71:8c:83:a0:96:52:88:c0:0a:cb:
5b:50:68:46:2d:80:d1:4e:41:68:46:ba:f3:9f:6f:81:cd:2e:
3e:6d:74:79:f9:ca:30:8e:15:53:f9:20:16:6a:7e:f8:3b:bd:
0e:6e:b1:85:19:e5:64:4e:a5:d4:a7:c0:e8:18:d0:fa:44:43:
d1:c1:9f:c8:a9:6c:69:ef:8b:d6:be:ef:2d:73:83:dd:1b:2f:
7f:e6:94:24:2f:03:d8:bb:a6:58:67:0a:0e:7d:9b:a8:b3:b7:
cd:85:81:9e:55:c4:a0:56:7e:75:bd:15:a2:c7:bc:30:02:98:
d4:d6:ed:4e:27:80:de:c4:ad:23:0a:00:26:aa:43:6b:97:4e:
26:58:f3:a0:37:ff:83:d9:e0:1b:13:de:bd:e0:bb:19:b7:66:
62:64:a8:9e:b8:d4:e4:0b:18:7e:9b:e2:ae:02:f7:e9:33:7d:
9c:75:b2:fa
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaW8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MjM1MDU5WhcNMjYwMTAzMjM1MDU5WjAYMRYw
FAYDVQQDEw02OTAwMDU2OS01MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwXqgbQJeX2k0PSScy5UsIEExk8AU74Mbnwyz0C2/kahXHt8Ve7RmDRoj
l2rn1o/DgS3lg31SN9ayNn/65l9yf83H2vLT7uz06RhUYvjsesyMYN9ez2J6OU9u
l7Dy10XT4ykV9Gyyqn6dZC/ZSTeSSYAU/JWEBJ7A4WNr9Ri41qY81knwjtFh/6r1
Lt8koTwpX58HALdopYlnYShfINZ2R6f43dc0dEq4EEa4RUbAmcUkebx+t3cHklR2
y+sWlsNd2gG/1+M+4pwz0wOSkSExbgm24JmhZrendWxfRBRPwVe3J511mt2/bigq
nAiLwVbktB5MWl38TdQ1lK0bdBlyfQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNWi
IVMlSbj266nH8sMbWV1bf/CEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQ0QxMkFBQ0IzOEYxMUYwQTBFQzVCRTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaXUkDBACaXVIwDQYJ
KoZIhvcNAQELBQADggEBAAaEfV1sKDlcJvaqvwjmUcu8VE3E76wDxT8Er18SmO+E
vFwijg5dO6zcSD08NmPAJ2fQ9Uck5w2p3YfDyJplc+vttvVCsO/kSNxqOLpgSCSb
cYyDoJZSiMAKy1tQaEYtgNFOQWhGuvOfb4HNLj5tdHn5yjCOFVP5IBZqfvg7vQ5u
sYUZ5WROpdSnwOgY0PpEQ9HBn8ipbGnvi9a+7y1zg90bL3/mlCQvA9i7plhnCg59
m6izt82FgZ5VxKBWfnW9FaLHvDACmNTW7U4ngN7ErSMKACaqQ2uXTiZY86A3/4PZ
4BsT3r3guxm3ZmJkqJ641OQLGH6b4q4C9+kzfZx1svo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:34:36 2025 by rpki-client