Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43377012A42111F09ED16D80DAE4EC9C.roa
File: 43377012A42111F09ED16D80DAE4EC9C.roa (raw, json)
Hash identifier: ODX0hx3P18HwvvEL/qowMTKwSsBDj0XRgAxMD1T7TjE=
Subject key identifier: 08:1C:10:A1:5A:92:07:B5:4E:6C:B0:F3:D9:A8:CE:6B:39:6F:80:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43377012A42111F09ED16D80DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 08:32:02 +0000
ROA not before: Wed 08 Oct 2025 08:31:57 +0000
ROA not after: Mon 10 Nov 2025 08:31:57 +0000
asID: 203020
IP address blocks: 154.217.52.0/24 maxlen: 24
154.217.53.0/24 maxlen: 24
154.217.54.0/24 maxlen: 24
154.217.55.0/24 maxlen: 24
154.217.56.0/24 maxlen: 24
154.217.57.0/24 maxlen: 24
154.217.58.0/24 maxlen: 24
154.217.59.0/24 maxlen: 24
154.217.60.0/24 maxlen: 24
154.217.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107185 (0x1a2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 08:31:57 2025 GMT
Not After : Nov 10 08:31:57 2025 GMT
Subject: CN=68e62182-06d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:34:15:ce:0f:40:99:d5:4e:f7:f4:18:5d:
54:7c:93:5f:f7:d3:45:14:76:26:46:e2:57:a5:30:
64:7b:01:2b:15:d8:db:84:ec:18:e4:a1:b3:46:b3:
4b:95:20:31:4a:b3:fb:76:0e:34:ac:bc:46:d6:ea:
cd:3f:e9:25:76:61:28:30:dd:30:fe:eb:62:a3:ec:
07:2c:30:c8:b4:66:5d:ea:61:c9:d6:ed:8d:fe:75:
6a:6e:44:c1:07:5e:1c:97:bc:06:dc:15:80:1c:3c:
88:47:80:33:9a:c3:40:5a:12:a7:db:51:04:f3:d8:
74:36:41:8c:b8:a4:62:ff:ff:17:4a:80:c2:fe:af:
a6:c3:4c:ec:b3:92:68:16:40:17:6e:33:97:27:e9:
70:8c:93:89:c5:12:e6:87:e8:a9:5a:3d:27:0a:0e:
62:7f:2b:fd:95:03:03:15:55:8e:03:1d:a7:86:4d:
5d:02:e8:43:b3:38:8b:dd:26:5b:f2:12:ae:55:07:
cf:9f:9e:d0:23:1c:92:77:df:50:ea:54:40:6f:51:
55:ca:d5:67:c1:64:63:5d:23:b2:39:6c:eb:fc:c3:
70:31:3e:2a:71:08:5e:03:7f:11:64:02:16:e5:6b:
11:73:05:a7:53:04:8a:b4:44:e1:e6:46:f2:0e:6c:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:10:A1:5A:92:07:B5:4E:6C:B0:F3:D9:A8:CE:6B:39:6F:80:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43377012A42111F09ED16D80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.52.0-154.217.61.255
Signature Algorithm: sha256WithRSAEncryption
95:2c:b5:cb:3f:db:14:f6:d8:64:d4:b0:4c:3f:a1:3d:ab:ee:
b2:4f:eb:81:fb:c8:53:a9:6b:78:8b:c7:42:f7:ac:29:00:ec:
8c:03:42:91:f5:f1:7a:c5:2d:aa:49:07:82:bf:4d:f5:74:6d:
8e:1a:dc:c2:b4:bc:8c:24:2c:5b:12:6d:70:1a:0c:b3:40:6d:
ca:ac:b9:dd:79:4e:7b:30:f7:42:53:fc:e5:bb:df:44:9e:5a:
f3:04:a1:30:23:aa:c2:08:fe:87:5f:52:f9:89:a2:da:82:16:
51:4c:2a:72:14:eb:7d:7d:f0:54:92:22:b5:f3:bc:84:3a:95:
e4:62:78:83:0f:82:4f:02:40:7f:e6:5c:ea:7a:47:4f:3a:1d:
34:14:21:00:6f:a6:3b:c3:0f:64:9c:f6:10:04:3c:0c:91:7c:
16:98:db:f3:dd:1c:a2:1d:d9:f6:e4:17:81:1b:60:94:54:e0:
3f:7e:90:7a:66:b4:9b:d0:c4:ed:07:6b:e4:a1:cd:a8:69:d8:
f9:e3:c7:fb:d6:6f:91:3c:86:c5:0a:be:55:9a:9c:fe:1b:74:
21:d6:50:c6:a4:e2:3c:47:d1:6b:16:de:fa:7d:d8:3d:f3:3e:
77:e2:1c:c4:24:1d:3b:0d:e3:72:42:07:2d:3b:b7:83:d6:56:
80:24:20:b0
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaKxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA4MDgzMTU3WhcNMjUxMTEwMDgzMTU3WjAYMRYw
FAYDVQQDEw02OGU2MjE4Mi0wNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyLk0Fc4PQJnVTvf0GF1UfJNf99NFFHYmRuJXpTBkewErFdjbhOwY5KGz
RrNLlSAxSrP7dg40rLxG1urNP+kldmEoMN0w/utio+wHLDDItGZd6mHJ1u2N/nVq
bkTBB14cl7wG3BWAHDyIR4AzmsNAWhKn21EE89h0NkGMuKRi//8XSoDC/q+mw0zs
s5JoFkAXbjOXJ+lwjJOJxRLmh+ipWj0nCg5ifyv9lQMDFVWOAx2nhk1dAuhDsziL
3SZb8hKuVQfPn57QIxySd99Q6lRAb1FVytVnwWRjXSOyOWzr/MNwMT4qcQheA38R
ZAIW5WsRcwWnUwSKtETh5kbyDmxr3QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAgc
EKFakge1Tmyw89mozms5b4ACMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MzM3NzAxMkE0MjExMUYwOUVEMTZEODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKa2TQDBAGa2TwwDQYJ
KoZIhvcNAQELBQADggEBAJUstcs/2xT22GTUsEw/oT2r7rJP64H7yFOpa3iLx0L3
rCkA7IwDQpH18XrFLapJB4K/TfV0bY4a3MK0vIwkLFsSbXAaDLNAbcqsud15Tnsw
90JT/OW730SeWvMEoTAjqsII/odfUvmJotqCFlFMKnIU63198FSSIrXzvIQ6leRi
eIMPgk8CQH/mXOp6R086HTQUIQBvpjvDD2Sc9hAEPAyRfBaY2/PdHKId2fbkF4Eb
YJRU4D9+kHpmtJvQxO0Ha+Shzahp2Pnjx/vWb5E8hsUKvlWanP4bdCHWUMak4jxH
0WsW3vp92D3zPnfiHMQkHTsN43JCBy07t4PWVoAkILA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:29 2025 by rpki-client