Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1587E116A29011F096D3ECD5DAE4EC9C.roa
File: 1587E116A29011F096D3ECD5DAE4EC9C.roa (raw, json)
Hash identifier: twzTTPQB7qQHHGfgxB4FXIpbBbOL9dafFUKAtViqkyM=
Subject key identifier: D6:5A:AB:8E:4E:B1:EC:F4:9A:36:8D:73:0D:B6:7B:F7:BC:CF:6C:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A263
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1587E116A29011F096D3ECD5DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:40:17 +0000
ROA not before: Mon 06 Oct 2025 08:40:12 +0000
ROA not after: Fri 10 Apr 2026 08:40:12 +0000
asID: 267834
IP address blocks: 154.198.56.0/24 maxlen: 24
154.198.57.0/24 maxlen: 24
154.198.58.0/24 maxlen: 24
154.198.59.0/24 maxlen: 24
154.198.60.0/24 maxlen: 24
154.198.61.0/24 maxlen: 24
154.198.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107107 (0x1a263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 08:40:12 2025 GMT
Not After : Apr 10 08:40:12 2026 GMT
Subject: CN=68e38071-a227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:05:44:3b:c2:67:18:81:a6:b6:38:5f:43:
37:46:61:5f:b2:00:1f:a5:09:ae:29:9c:52:bd:23:
73:c3:05:95:f5:73:7f:1c:b0:0a:9e:31:b9:97:47:
89:70:8b:cb:c3:ea:2d:87:8f:49:2a:f5:bb:cc:24:
c1:25:5d:66:5a:ac:6c:8f:ab:2a:a5:d6:89:ef:b4:
1a:98:8c:87:ec:57:fe:28:f8:9f:00:88:d1:dd:76:
7b:4d:c9:4d:8d:fd:b9:31:1a:b2:d6:ec:a6:b9:c1:
56:34:d1:21:54:9c:c6:87:1e:b1:0e:5b:6c:df:67:
15:b4:31:47:41:2f:12:32:ce:85:18:11:65:11:bb:
88:eb:21:e0:ee:08:c9:7c:df:45:4f:91:ee:9b:4d:
ee:82:02:ef:b9:9d:92:2e:8c:76:14:8d:9b:42:32:
76:79:64:51:fd:43:68:af:3d:ff:af:15:04:82:1a:
8d:e8:0a:1b:61:7b:00:73:05:4a:5d:18:85:ef:b7:
5f:8d:cf:87:db:83:8f:b9:67:12:0e:05:f5:ef:7d:
10:1d:93:e1:1e:ec:2f:32:3e:e1:a2:0e:e8:ef:a9:
74:52:8c:66:5e:d1:5b:9a:c1:67:d9:12:f7:9b:6e:
2c:c4:fd:20:47:a3:4c:8a:84:f5:26:ce:b5:b7:60:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:AB:8E:4E:B1:EC:F4:9A:36:8D:73:0D:B6:7B:F7:BC:CF:6C:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1587E116A29011F096D3ECD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.56.0-154.198.62.255
Signature Algorithm: sha256WithRSAEncryption
0a:a8:27:dd:ca:df:f3:91:23:17:07:f6:12:13:80:93:a5:86:
c6:e5:1f:17:36:32:18:51:0a:76:69:41:79:b4:5d:84:13:e1:
72:d5:9a:05:06:b4:e4:bf:28:07:fb:a7:16:35:dc:c3:b7:eb:
90:c1:24:9d:90:03:b9:b8:5f:a6:ba:ea:11:28:cc:c9:93:c1:
b1:73:9a:7c:ab:9f:cd:a0:62:1c:af:65:83:cc:22:ee:ab:69:
70:f0:43:eb:01:47:8c:de:3f:f2:08:45:82:f2:ef:be:d7:40:
b1:d1:df:7c:b0:9a:87:57:fb:75:b9:b9:1e:f0:92:3a:8d:86:
c1:68:e1:1d:3a:d2:43:ad:10:a1:41:1f:76:ba:6a:cb:93:64:
aa:af:22:f9:a4:1f:32:09:b4:23:8b:7b:25:74:09:c8:18:f5:
ab:17:f0:43:ed:03:6b:99:7a:9f:0c:4c:bd:e0:9e:7a:7e:1e:
45:fd:6a:ff:ea:0c:6f:cd:16:29:1b:7f:55:b7:53:ea:1c:fe:
a0:c1:e3:7e:e5:c1:25:26:f2:17:ee:6e:c1:8c:b2:10:63:f2:
1d:22:37:9c:88:80:ea:8d:c1:5a:d3:36:86:df:5f:e5:4c:37:
bd:ec:a8:3d:be:19:9f:de:89:71:bc:94:08:8c:51:07:d0:cb:
5f:10:db:59
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaJjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA2MDg0MDEyWhcNMjYwNDEwMDg0MDEyWjAYMRYw
FAYDVQQDEw02OGUzODA3MS1hMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxt8FRDvCZxiBprY4X0M3RmFfsgAfpQmuKZxSvSNzwwWV9XN/HLAKnjG5
l0eJcIvLw+oth49JKvW7zCTBJV1mWqxsj6sqpdaJ77QamIyH7Ff+KPifAIjR3XZ7
TclNjf25MRqy1uymucFWNNEhVJzGhx6xDlts32cVtDFHQS8SMs6FGBFlEbuI6yHg
7gjJfN9FT5Hum03uggLvuZ2SLox2FI2bQjJ2eWRR/UNorz3/rxUEghqN6AobYXsA
cwVKXRiF77dfjc+H24OPuWcSDgX1730QHZPhHuwvMj7hog7o76l0UoxmXtFbmsFn
2RL3m24sxP0gR6NMioT1Js61t2C96QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNZa
q45Osez0mjaNcw22e/e8z2zpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNTg3RTExNkEyOTAxMUYwOTZEM0VDRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOaxjgDBACaxj4wDQYJ
KoZIhvcNAQELBQADggEBAAqoJ93K3/ORIxcH9hITgJOlhsblHxc2MhhRCnZpQXm0
XYQT4XLVmgUGtOS/KAf7pxY13MO365DBJJ2QA7m4X6a66hEozMmTwbFzmnyrn82g
YhyvZYPMIu6raXDwQ+sBR4zeP/IIRYLy777XQLHR33ywmodX+3W5uR7wkjqNhsFo
4R060kOtEKFBH3a6asuTZKqvIvmkHzIJtCOLeyV0CcgY9asX8EPtA2uZep8MTL3g
nnp+HkX9av/qDG/NFikbf1W3U+oc/qDB437lwSUm8hfubsGMshBj8h0iN5yIgOqN
wVrTNobfX+VMN73sqD2+GZ/eiXG8lAiMUQfQy18Q21k=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:28 2025 by rpki-client