Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C8205EB89211F0B4A4BAF5DAE4EC9C.roa
File: 35C8205EB89211F0B4A4BAF5DAE4EC9C.roa (raw, json)
Hash identifier: Lo0p/RSEfCwYvnkHjTOIfsQYk4Fu7y+BE0f9DJ4b/bk=
Subject key identifier: AF:AE:C5:33:DE:06:F3:F9:8C:BB:96:5F:24:8E:73:61:FD:91:45:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A70E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C8205EB89211F0B4A4BAF5DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 08:50:56 +0000
ROA not before: Mon 03 Nov 2025 08:50:47 +0000
ROA not after: Sun 09 Nov 2025 08:50:47 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Nov 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108302 (0x1a70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 08:50:47 2025 GMT
Not After : Nov 9 08:50:47 2025 GMT
Subject: CN=69086cf0-2837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:7b:6d:96:51:5b:14:24:12:6e:22:96:a9:
40:ba:0a:c7:8b:bb:67:41:33:d1:d8:c4:8c:ef:58:
c1:84:4f:e8:b6:58:d2:6a:c5:a0:69:6d:34:9d:9d:
50:35:eb:5c:a7:e8:1c:65:2e:05:48:52:85:67:55:
32:d6:20:11:57:9c:08:aa:fe:b3:e7:41:1b:dc:d7:
4f:b5:06:b7:6b:79:7f:f2:1d:bd:40:a9:25:66:bc:
7d:6c:5a:54:14:b6:e5:b8:74:81:7a:f4:e5:c4:08:
e5:45:09:bd:68:2d:3a:c4:f4:d0:d8:25:de:35:de:
3e:33:a3:4c:7a:8c:97:8e:fa:1f:7f:cd:ea:50:77:
37:5d:20:b2:74:57:81:ca:bc:45:a1:dc:24:28:77:
0c:2d:f8:58:99:f0:6a:fc:f5:d7:f8:b2:bc:af:fc:
3e:c0:de:e5:d3:cc:02:97:d6:22:01:b0:eb:a6:b7:
ef:03:a1:ac:18:1a:74:fc:53:2e:3a:9d:c7:fd:dc:
91:9b:36:d6:c1:68:a8:2a:1a:ab:af:c8:c9:bd:40:
e9:f0:8e:6b:a5:bb:23:fe:c3:bf:dc:6b:6d:0e:9b:
56:78:dd:10:31:5e:96:e2:61:3c:4a:4c:02:6f:eb:
2b:26:10:01:d8:39:a1:1c:f1:e4:d1:37:8c:be:88:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:C5:33:DE:06:F3:F9:8C:BB:96:5F:24:8E:73:61:FD:91:45:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C8205EB89211F0B4A4BAF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:97:54:fc:e9:6f:07:44:37:ee:72:83:dc:1d:e0:4f:b5:2e:
e7:96:a7:1b:da:08:f8:c1:a7:0a:d5:be:6e:e9:bb:e8:86:26:
58:4f:6f:f0:08:f6:1c:96:45:d7:2b:9b:3f:7a:2e:5b:c6:7e:
f5:6f:71:e7:58:54:71:bb:61:62:64:08:33:04:d7:27:36:09:
a5:93:22:b5:bb:c0:2e:97:07:93:82:2d:7d:c1:89:48:90:f7:
29:a5:f6:8f:6a:56:75:9a:d8:1b:61:c9:ba:d6:0a:ea:a9:94:
32:c3:06:1d:9e:8d:d5:3c:91:d6:34:25:5c:cf:80:1e:7f:04:
64:12:0d:91:61:e4:ec:7a:7b:4d:2a:21:81:52:55:20:c6:b9:
ec:59:3c:d2:b2:72:bf:03:e7:98:8b:0f:75:91:22:f7:19:c1:
31:b6:82:35:d6:05:13:6c:63:ea:41:23:dc:9e:83:7b:72:c5:
01:ba:1e:a7:61:03:f0:49:0e:68:34:da:e6:c5:c2:b9:25:f8:
80:02:61:75:26:f6:46:e4:d8:a5:08:78:fa:9e:66:81:46:42:
95:d2:3a:b0:cb:36:6c:f9:59:70:a0:29:36:bc:de:e0:fb:15:
5a:57:74:00:d4:e6:23:5e:d5:cf:12:11:d7:d8:b7:f7:cb:8b:
bd:f7:f7:ca
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAacOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTAzMDg1MDQ3WhcNMjUxMTA5MDg1MDQ3WjAYMRYw
FAYDVQQDEw02OTA4NmNmMC0yODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0bp7bZZRWxQkEm4ilqlAugrHi7tnQTPR2MSM71jBhE/otljSasWgaW00
nZ1QNetcp+gcZS4FSFKFZ1Uy1iARV5wIqv6z50Eb3NdPtQa3a3l/8h29QKklZrx9
bFpUFLbluHSBevTlxAjlRQm9aC06xPTQ2CXeNd4+M6NMeoyXjvoff83qUHc3XSCy
dFeByrxFodwkKHcMLfhYmfBq/PXX+LK8r/w+wN7l08wCl9YiAbDrprfvA6GsGBp0
/FMuOp3H/dyRmzbWwWioKhqrr8jJvUDp8I5rpbsj/sO/3GttDptWeN0QMV6W4mE8
SkwCb+srJhAB2DmhHPHk0TeMvohM/wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFK+u
xTPeBvP5jLuWXySOc2H9kUV6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNUM4MjA1RUI4OTIxMUYwQjRBNEJBRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsIQAwQCmsIYMA0GCSqG
SIb3DQEBCwUAA4IBAQCal1T86W8HRDfucoPcHeBPtS7nlqcb2gj4wacK1b5u6bvo
hiZYT2/wCPYclkXXK5s/ei5bxn71b3HnWFRxu2FiZAgzBNcnNgmlkyK1u8AulweT
gi19wYlIkPcppfaPalZ1mtgbYcm61grqqZQywwYdno3VPJHWNCVcz4AefwRkEg2R
YeTsentNKiGBUlUgxrnsWTzSsnK/A+eYiw91kSL3GcExtoI11gUTbGPqQSPcnoN7
csUBuh6nYQPwSQ5oNNrmxcK5JfiAAmF1JvZG5NilCHj6nmaBRkKV0jqwyzZs+Vlw
oCk2vN7g+xVaV3QA1OYjXtXPEhHX2Lf3y4u99/fK
-----END CERTIFICATE-----
Generated at Mon Nov 3 17:12:26 2025 by rpki-client