Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AE8584991D11F084753A90DAE4EC9C.roa
File: 08AE8584991D11F084753A90DAE4EC9C.roa (raw, json)
Hash identifier: LTJsvDOO6z7PkZEklJ3tXA/0mZJ+ZrSFW3PJLs8NLDM=
Subject key identifier: 08:A4:EF:1A:FC:B1:89:30:08:B5:1D:A0:EC:9F:B7:7A:89:2C:BA:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A044
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AE8584991D11F084753A90DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 08:04:03 +0000
ROA not before: Wed 24 Sep 2025 08:03:58 +0000
ROA not after: Thu 30 Oct 2025 08:03:58 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106564 (0x1a044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 08:03:58 2025 GMT
Not After : Oct 30 08:03:58 2025 GMT
Subject: CN=68d3a5f3-8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:99:a7:99:e5:11:56:22:89:86:07:01:88:
23:2e:5f:45:66:43:bc:47:bd:91:31:4d:ff:3e:64:
da:8e:ec:d3:ac:dc:05:d8:7e:e2:b8:9d:e2:90:32:
c8:02:c8:fc:c7:af:f7:df:a8:48:bc:16:30:36:a9:
ae:cc:10:e4:79:68:79:7b:7e:b9:eb:bb:6c:7f:23:
d7:f8:cf:d0:64:6a:76:f7:6c:53:16:2f:54:98:9f:
92:ae:54:24:08:05:a8:08:38:03:a7:f7:8b:9a:b8:
3c:f2:11:c7:0e:24:b1:69:47:82:65:7a:2b:49:4d:
53:19:99:45:00:37:ab:e2:27:70:67:69:75:e7:e3:
3f:2e:a1:8c:a1:c7:32:82:56:ea:7e:65:44:2f:f8:
ea:5d:7f:d1:c5:bd:af:e9:66:d0:f7:04:44:11:e2:
36:4f:d1:41:dd:cb:d3:58:00:ca:d9:94:d1:61:71:
3a:82:f0:b8:b3:2d:98:7d:e1:67:31:d0:11:4c:7d:
7d:74:6d:af:13:a7:24:a8:75:c0:04:64:ae:a9:3e:
87:21:fd:78:ee:66:46:46:ca:10:d6:b6:47:65:ea:
c3:d0:ca:da:24:04:2b:3a:57:31:08:40:ac:35:ad:
e0:c7:d7:cb:3e:d7:f1:94:92:0e:74:97:0b:b4:d0:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:EF:1A:FC:B1:89:30:08:B5:1D:A0:EC:9F:B7:7A:89:2C:BA:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AE8584991D11F084753A90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:58:88:6e:69:20:aa:d7:3d:2c:0a:49:14:45:04:87:68:80:
a5:61:34:33:06:a8:57:78:5b:f5:4f:cc:41:06:20:8e:87:37:
bd:64:ce:70:ce:c5:17:03:13:74:da:48:9e:6b:d0:ce:04:7c:
1c:af:23:68:65:c6:d6:6f:db:54:fd:25:16:02:d9:4e:5b:8f:
71:41:75:14:ce:c0:c6:c0:67:92:08:24:fc:20:5f:e1:e1:98:
b0:93:29:58:2d:79:36:f5:cf:70:9b:f7:8e:95:27:d7:89:24:
7b:f2:c2:fa:5b:25:81:10:94:be:ef:24:12:e7:05:d8:b0:41:
4f:fd:02:eb:25:df:23:73:b4:dc:19:b2:01:fe:94:92:28:ed:
58:33:fb:5b:c4:f7:1a:54:3d:04:02:0a:5f:b3:b8:a9:d0:10:
7a:f4:22:df:e2:9b:17:7d:c1:89:42:db:8b:d2:66:51:c4:fb:
b7:92:06:3a:78:59:d4:fa:1e:95:fd:5c:49:a1:3b:51:95:df:
3e:54:b8:45:03:1e:cb:43:7d:63:7e:ab:4e:c2:ea:51:e4:6e:
e4:8d:f9:61:06:d1:4f:3b:c2:eb:d9:68:4f:bf:5e:27:82:a6:
d4:eb:bc:79:2b:f8:06:cf:e1:e0:de:ce:02:d3:55:ce:91:1b:
48:64:f0:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaBEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MDgwMzU4WhcNMjUxMDMwMDgwMzU4WjAYMRYw
FAYDVQQDEw02OGQzYTVmMy04NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoISZp5nlEVYiiYYHAYgjLl9FZkO8R72RMU3/PmTajuzTrNwF2H7iuJ3i
kDLIAsj8x6/336hIvBYwNqmuzBDkeWh5e36567tsfyPX+M/QZGp292xTFi9UmJ+S
rlQkCAWoCDgDp/eLmrg88hHHDiSxaUeCZXorSU1TGZlFADer4idwZ2l15+M/LqGM
occyglbqfmVEL/jqXX/Rxb2v6WbQ9wREEeI2T9FB3cvTWADK2ZTRYXE6gvC4sy2Y
feFnMdARTH19dG2vE6ckqHXABGSuqT6HIf147mZGRsoQ1rZHZerD0MraJAQrOlcx
CECsNa3gx9fLPtfxlJIOdJcLtNAyfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAik
7xr8sYkwCLUdoOyft3qJLLogMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOEFFODU4NDk5MUQxMUYwODQ3NTNBOTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlqHMA0GCSqGSIb3DQEB
CwUAA4IBAQCMWIhuaSCq1z0sCkkURQSHaIClYTQzBqhXeFv1T8xBBiCOhze9ZM5w
zsUXAxN02kiea9DOBHwcryNoZcbWb9tU/SUWAtlOW49xQXUUzsDGwGeSCCT8IF/h
4ZiwkylYLXk29c9wm/eOlSfXiSR78sL6WyWBEJS+7yQS5wXYsEFP/QLrJd8jc7Tc
GbIB/pSSKO1YM/tbxPcaVD0EAgpfs7ip0BB69CLf4psXfcGJQtuL0mZRxPu3kgY6
eFnU+h6V/VxJoTtRld8+VLhFAx7LQ31jfqtOwupR5G7kjflhBtFPO8Lr2WhPv14n
gqbU67x5K/gGz+Hg3s4C01XOkRtIZPBj
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:42 2025 by rpki-client