Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160B285E994511F0839D698FDAE4EC9C.roa
File: 160B285E994511F0839D698FDAE4EC9C.roa (raw, json)
Hash identifier: I56Gx6AQCsK5Sbq6AJn+XvRN8h3mh9LmCK/AdLTz6Ww=
Subject key identifier: 7C:49:22:0F:2A:73:5D:4C:4A:F6:0B:56:7B:4D:2D:DC:8E:16:9E:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A076
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160B285E994511F0839D698FDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 12:50:45 +0000
ROA not before: Wed 24 Sep 2025 12:50:39 +0000
ROA not after: Sun 19 Oct 2025 12:50:39 +0000
asID: 11404
IP address blocks: 154.83.160.0/20 maxlen: 24
154.89.240.0/20 maxlen: 24
154.90.80.0/20 maxlen: 24
154.90.96.0/19 maxlen: 24
154.92.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 12:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106614 (0x1a076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 12:50:39 2025 GMT
Not After : Oct 19 12:50:39 2025 GMT
Subject: CN=68d3e925-717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:0c:32:fa:41:4e:9c:f5:ac:5a:b7:49:74:
c7:31:2f:b6:81:02:05:18:c5:fb:14:0a:df:e0:c5:
ce:ec:0b:20:ea:09:e3:4c:37:3e:e9:4c:44:a6:6f:
9c:c0:e8:80:1d:09:4b:fe:cb:9b:58:81:06:42:90:
c4:8d:c5:f6:28:cc:fc:85:c3:03:ea:f4:ea:7c:7d:
5f:4a:c7:f8:5e:f3:2a:85:41:d0:22:fa:8c:2d:e7:
69:96:48:e5:a3:08:92:9b:0f:50:8e:30:88:de:2e:
54:96:1f:c0:69:81:0c:39:2b:55:91:43:a0:eb:3d:
04:b9:67:d4:f2:77:cf:53:92:ae:2e:d8:ed:f4:d2:
cc:29:67:4d:1d:fa:59:10:64:e2:bd:52:44:5b:74:
8e:f6:25:ab:53:14:4f:a2:cc:0d:47:ce:fc:e1:7d:
60:4d:ce:a8:f7:10:b7:6c:b2:d1:80:3b:43:21:a5:
57:a3:48:12:f4:4c:d8:1a:d7:e2:5d:73:31:8e:4e:
14:c2:24:6e:52:8c:2b:b5:e0:8b:1a:f8:2a:7f:f9:
59:e0:9b:c9:c6:98:b5:6e:ef:aa:a5:35:14:ff:ed:
23:db:65:27:b4:24:46:64:76:09:06:f3:8e:16:0b:
46:4b:d6:86:06:8d:18:cc:82:7d:f6:b7:fe:17:d0:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:22:0F:2A:73:5D:4C:4A:F6:0B:56:7B:4D:2D:DC:8E:16:9E:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160B285E994511F0839D698FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.160.0/20
154.89.240.0/20
154.90.80.0-154.90.127.255
154.92.144.0/20
Signature Algorithm: sha256WithRSAEncryption
70:73:6b:9b:b8:62:af:97:e0:64:2f:99:e9:94:dd:05:4c:c7:
d1:2e:cb:50:93:ae:30:ad:73:05:c9:4c:52:07:47:9b:92:22:
1b:3b:15:33:4b:be:c2:bd:46:a1:1f:c0:5c:4c:a9:93:58:47:
fd:91:b5:ae:c9:88:d6:cd:29:fd:2b:84:da:71:19:66:2a:14:
54:d9:c4:42:f9:26:01:6e:d4:96:71:a0:ac:ac:07:26:c9:10:
d2:14:63:ee:34:78:63:5b:c6:40:7b:f3:ee:e3:ee:f2:61:9a:
10:50:ca:d7:65:bd:f6:8d:48:86:3b:7a:8b:57:79:9f:f7:84:
82:d6:8d:78:10:7a:44:7a:5c:e3:b5:bc:e3:9d:27:7f:72:27:
80:9e:e2:01:c5:bf:19:b5:20:32:c4:17:f4:7b:bc:ff:ae:c4:
47:4c:dc:8d:d0:d2:da:1c:d3:70:94:27:6c:1c:d7:ea:5a:9a:
27:d0:81:0b:68:10:0b:18:83:c4:af:51:0e:ad:dd:23:37:b6:
56:7d:90:1b:39:f8:d8:43:d2:fd:f4:87:54:43:d7:ec:f9:1a:
9c:96:2b:e5:7a:25:16:a3:f9:b6:48:5d:3f:13:00:18:2c:dd:
43:e3:6f:71:06:a8:c4:e9:6f:6c:fd:06:f8:39:ef:9b:1f:de:
a8:90:12:e5
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAaB2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MTI1MDM5WhcNMjUxMDE5MTI1MDM5WjAYMRYw
FAYDVQQDEw02OGQzZTkyNS03MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwAEMMvpBTpz1rFq3SXTHMS+2gQIFGMX7FArf4MXO7Asg6gnjTDc+6UxE
pm+cwOiAHQlL/subWIEGQpDEjcX2KMz8hcMD6vTqfH1fSsf4XvMqhUHQIvqMLedp
lkjlowiSmw9QjjCI3i5Ulh/AaYEMOStVkUOg6z0EuWfU8nfPU5KuLtjt9NLMKWdN
HfpZEGTivVJEW3SO9iWrUxRPoswNR8784X1gTc6o9xC3bLLRgDtDIaVXo0gS9EzY
GtfiXXMxjk4UwiRuUowrteCLGvgqf/lZ4JvJxpi1bu+qpTUU/+0j22UntCRGZHYJ
BvOOFgtGS9aGBo0YzIJ99rf+F9DiywIDAQABo4ICvzCCArswHQYDVR0OBBYEFHxJ
Ig8qc11MSvYLVntNLdyOFp6wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNjBCMjg1RTk5NDUxMUYwODM5RDY5OEZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQEmlOgAwQEmlnwMAwDBASa
WlADBAeaWgADBASaXJAwDQYJKoZIhvcNAQELBQADggEBAHBza5u4Yq+X4GQvmemU
3QVMx9Euy1CTrjCtcwXJTFIHR5uSIhs7FTNLvsK9RqEfwFxMqZNYR/2Rta7JiNbN
Kf0rhNpxGWYqFFTZxEL5JgFu1JZxoKysBybJENIUY+40eGNbxkB78+7j7vJhmhBQ
ytdlvfaNSIY7eotXeZ/3hILWjXgQekR6XOO1vOOdJ39yJ4Ce4gHFvxm1IDLEF/R7
vP+uxEdM3I3Q0toc03CUJ2wc1+pamifQgQtoEAsYg8SvUQ6t3SM3tlZ9kBs5+NhD
0v30h1RD1+z5GpyWK+V6JRaj+bZIXT8TABgs3UPjb3EGqMTpb2z9Bvg575sf3qiQ
EuU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:40 2025 by rpki-client