Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23E39DCAA9C211F0AE3F3BDFDAE4EC9C.roa
File: 23E39DCAA9C211F0AE3F3BDFDAE4EC9C.roa (raw, json)
Hash identifier: 5fYfQORMhiXTJnN0rMsNxLM1acxN7tXaFaQuNx4RNwA=
Subject key identifier: 8E:A8:32:4B:7B:D5:5B:71:2C:5C:05:A8:8E:9C:4E:22:77:9D:51:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A39B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23E39DCAA9C211F0AE3F3BDFDAE4EC9C.roa
Signing time: Wed 15 Oct 2025 12:26:14 +0000
ROA not before: Wed 15 Oct 2025 12:26:09 +0000
ROA not after: Thu 22 Oct 2026 12:26:09 +0000
asID: 138959
IP address blocks: 154.91.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107419 (0x1a39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 12:26:09 2025 GMT
Not After : Oct 22 12:26:09 2026 GMT
Subject: CN=68ef92e6-da21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:52:36:f8:da:06:56:09:0a:de:73:80:e0:
25:7c:0e:be:84:c7:b6:2f:69:02:5c:04:54:8f:01:
88:ca:62:be:32:04:f7:e0:69:46:3d:01:66:44:75:
82:41:78:1b:a3:3a:41:6d:27:36:35:cc:a5:d9:f3:
18:af:67:68:3b:a0:01:1d:9e:5e:d2:a5:b6:2c:76:
05:5d:62:1f:b1:f9:74:b6:88:b7:d6:d3:db:34:cc:
7d:ca:b3:f2:e9:69:e1:15:8b:aa:82:31:74:be:9f:
62:22:b3:83:3b:45:04:f9:ab:b6:40:6b:1c:f4:6b:
7c:e0:89:21:4e:d1:11:e4:6c:97:80:c9:78:4a:f0:
d0:59:c4:fe:02:3e:d2:ef:b3:fd:d9:94:64:26:0d:
b8:67:bd:3d:03:51:41:40:b1:e5:cd:2a:48:e0:71:
e1:fa:d0:94:9d:96:e5:13:bc:b0:5d:0a:db:85:36:
cf:e2:f0:81:6f:f2:ec:ad:41:c5:d6:e1:6d:b9:75:
80:a3:01:6b:e2:78:7f:db:df:15:53:e2:76:78:2a:
27:b6:44:54:9a:00:02:e0:4b:7b:c2:17:db:f2:19:
84:71:be:ca:6b:d9:59:cd:01:6e:e4:ab:c2:ca:c8:
07:fb:5e:2e:a7:47:f1:b0:f5:fa:49:34:3e:94:bc:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:32:4B:7B:D5:5B:71:2C:5C:05:A8:8E:9C:4E:22:77:9D:51:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23E39DCAA9C211F0AE3F3BDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.1.0/24
Signature Algorithm: sha256WithRSAEncryption
60:37:24:c6:41:71:fc:cb:d7:ff:9e:52:6f:15:c2:90:5a:6d:
2a:6d:38:ca:0f:d8:08:f4:05:ca:ec:b5:be:3f:9d:7a:ee:5b:
cc:b9:fb:0f:a6:ff:61:06:94:86:fb:c3:b4:12:52:57:24:51:
fe:a9:48:b9:a9:de:93:0f:ce:a1:15:9e:c4:a3:b3:e7:5f:df:
fe:4b:fe:18:06:b6:8b:2a:ac:48:97:f1:32:11:ad:65:cf:2c:
fb:b9:a8:48:66:ab:80:dd:9c:bb:da:65:8f:a3:e7:d1:7b:a0:
18:18:3c:08:fa:55:52:3b:36:28:3b:a0:62:53:6e:be:46:e8:
1f:91:b8:2e:e6:da:48:a6:c7:ea:9d:cd:6f:6f:d0:d6:31:7a:
b9:49:31:74:6a:3c:0f:80:0c:b8:00:31:e4:47:f6:27:13:f0:
85:86:04:ba:ee:dd:ad:33:46:b5:64:02:d9:b1:e2:e0:9d:dc:
25:2f:6a:36:c3:d1:06:4b:27:8e:dd:01:e3:e6:9b:2c:1a:3d:
18:ce:b9:99:c6:38:c0:65:af:25:b4:6e:2a:a4:75:08:cd:21:
d6:91:bc:b4:e1:91:82:b6:5c:9f:be:bd:1f:d1:6f:5b:18:9a:
f5:e9:d3:46:56:a1:97:37:80:64:82:d0:c1:35:ad:ea:97:6e:
60:c8:12:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaObMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDE1MTIyNjA5WhcNMjYxMDIyMTIyNjA5WjAYMRYw
FAYDVQQDEw02OGVmOTJlNi1kYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0g9SNvjaBlYJCt5zgOAlfA6+hMe2L2kCXARUjwGIymK+MgT34GlGPQFm
RHWCQXgbozpBbSc2Ncyl2fMYr2doO6ABHZ5e0qW2LHYFXWIfsfl0toi31tPbNMx9
yrPy6WnhFYuqgjF0vp9iIrODO0UE+au2QGsc9Gt84IkhTtER5GyXgMl4SvDQWcT+
Aj7S77P92ZRkJg24Z709A1FBQLHlzSpI4HHh+tCUnZblE7ywXQrbhTbP4vCBb/Ls
rUHF1uFtuXWAowFr4nh/298VU+J2eContkRUmgAC4Et7whfb8hmEcb7Ka9lZzQFu
5KvCysgH+14up0fxsPX6STQ+lLyIZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI6o
Mkt71VtxLFwFqI6cTiJ3nVGvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yM0UzOURDQUE5QzIxMUYwQUUzRjNCREZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlsBMA0GCSqGSIb3DQEB
CwUAA4IBAQBgNyTGQXH8y9f/nlJvFcKQWm0qbTjKD9gI9AXK7LW+P5167lvMufsP
pv9hBpSG+8O0ElJXJFH+qUi5qd6TD86hFZ7Eo7PnX9/+S/4YBraLKqxIl/EyEa1l
zyz7uahIZquA3Zy72mWPo+fRe6AYGDwI+lVSOzYoO6BiU26+Rugfkbgu5tpIpsfq
nc1vb9DWMXq5STF0ajwPgAy4ADHkR/YnE/CFhgS67t2tM0a1ZALZseLgndwlL2o2
w9EGSyeO3QHj5pssGj0YzrmZxjjAZa8ltG4qpHUIzSHWkby04ZGCtlyfvr0f0W9b
GJr16dNGVqGXN4BkgtDBNa3ql25gyBLK
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:51 2025 by rpki-client