Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5275501E899E11F0B8F4CD79DAE4EC9C.roa
File: 5275501E899E11F0B8F4CD79DAE4EC9C.roa (raw, json)
Hash identifier: 2DkMn2mVDFF6JK9nw5mK6rGuqJ9zt5s3bbb9oLAzTHw=
Subject key identifier: F5:DC:07:AA:AE:43:9C:0A:91:0A:EC:57:42:8F:B1:81:C5:DB:B4:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019DBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5275501E899E11F0B8F4CD79DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 14:49:13 +0000
ROA not before: Thu 04 Sep 2025 14:49:07 +0000
ROA not after: Sat 01 Sep 2035 14:49:07 +0000
asID: 17561
IP address blocks: 154.88.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105917 (0x19dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 14:49:07 2025 GMT
Not After : Sep 1 14:49:07 2035 GMT
Subject: CN=68b9a6e9-47fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:60:f0:8e:51:3f:46:35:9b:6c:d0:e4:c8:
18:1d:81:25:dd:c6:41:20:59:8b:8a:d5:10:12:93:
1e:75:f5:c1:f8:b7:1b:e7:30:01:95:47:0a:06:c8:
32:3a:8f:c1:3a:16:5c:1b:d1:d9:06:5e:db:f1:ff:
3f:30:18:04:3d:db:84:bf:a8:d4:f8:b7:26:65:85:
c2:f1:48:a0:f7:9f:26:ea:00:d1:81:64:5f:0d:b4:
1f:4f:c6:4b:4a:cf:47:79:85:e0:29:69:a5:94:5a:
24:c3:61:36:fe:ed:27:30:0a:a5:bf:4f:9f:01:39:
54:58:32:d1:ef:d2:1a:24:99:bd:58:e7:df:eb:10:
e4:1c:8f:f1:60:79:e0:7a:19:52:86:a2:00:72:dd:
20:5e:b0:4d:f8:fb:15:12:90:96:97:38:c3:1e:46:
3f:23:a4:34:28:f1:8f:f3:d4:dd:a8:8a:7f:9b:12:
05:9d:76:36:21:1b:6a:b7:f8:60:73:cf:87:00:de:
29:34:f5:a8:ef:7e:2e:93:54:ee:ec:6c:68:45:d8:
f4:5d:bc:6c:8e:75:36:58:d9:ec:7d:43:bb:70:37:
ad:82:7d:0e:3d:c0:3a:0e:d1:e2:46:f9:55:7d:c2:
99:6e:55:00:76:b5:c5:34:67:15:d0:75:fe:6a:18:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:07:AA:AE:43:9C:0A:91:0A:EC:57:42:8F:B1:81:C5:DB:B4:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5275501E899E11F0B8F4CD79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:94:1b:b4:49:4f:54:b2:91:0f:c9:e1:d9:eb:37:ec:8e:49:
02:41:42:e8:8d:ce:fc:f0:17:24:09:e7:ff:9e:0b:ac:55:18:
47:f8:1a:f2:05:b9:af:7d:4f:4d:eb:a2:03:d9:d0:1d:da:03:
43:e3:6b:5d:b7:5c:52:b5:2a:6f:04:55:ee:b3:b1:02:3a:48:
19:9a:8c:e9:ea:f0:4a:72:98:5d:a0:95:33:1e:59:49:5f:1d:
a0:72:54:c9:5d:4c:f7:8b:36:aa:6f:66:b3:e8:01:39:a0:2e:
6f:44:d4:f8:15:67:87:2a:82:4a:eb:dd:47:1b:c4:30:78:4f:
53:f8:8b:e4:18:4d:da:e9:85:e2:73:dc:60:e7:94:40:ac:21:
1f:2f:be:a5:42:e2:27:f2:46:d2:51:d5:28:4a:b1:79:54:72:
c1:22:a0:23:6a:d0:4c:66:34:fb:8b:45:6e:83:71:aa:55:36:
d0:0e:fb:0b:31:28:19:3a:f0:92:79:2b:90:42:8b:6f:45:5e:
72:97:18:70:cf:7a:fc:5f:da:bd:1a:c8:7b:e2:85:fa:93:d0:
9b:fc:9a:c7:4e:00:63:dc:34:bd:3b:bb:d8:bc:ef:21:22:f5:
cd:12:a0:e8:1e:47:8d:60:3f:9c:a8:01:b5:f5:d5:a9:16:fa:
ed:95:cd:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ29MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA0MTQ0OTA3WhcNMzUwOTAxMTQ0OTA3WjAYMRYw
FAYDVQQDEw02OGI5YTZlOS00N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoAFg8I5RP0Y1m2zQ5MgYHYEl3cZBIFmLitUQEpMedfXB+Lcb5zABlUcK
BsgyOo/BOhZcG9HZBl7b8f8/MBgEPduEv6jU+LcmZYXC8Uig958m6gDRgWRfDbQf
T8ZLSs9HeYXgKWmllFokw2E2/u0nMAqlv0+fATlUWDLR79IaJJm9WOff6xDkHI/x
YHngehlShqIAct0gXrBN+PsVEpCWlzjDHkY/I6Q0KPGP89TdqIp/mxIFnXY2IRtq
t/hgc8+HAN4pNPWo734uk1Tu7GxoRdj0XbxsjnU2WNnsfUO7cDetgn0OPcA6DtHi
RvlVfcKZblUAdrXFNGcV0HX+ahgkFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPXc
B6quQ5wKkQrsV0KPsYHF27RYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Mjc1NTAxRTg5OUUxMUYwQjhGNENENzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgIMA0GCSqGSIb3DQEB
CwUAA4IBAQDPlBu0SU9UspEPyeHZ6zfsjkkCQULojc788BckCef/ngusVRhH+Bry
BbmvfU9N66ID2dAd2gND42tdt1xStSpvBFXus7ECOkgZmozp6vBKcphdoJUzHllJ
Xx2gclTJXUz3izaqb2az6AE5oC5vRNT4FWeHKoJK691HG8QweE9T+IvkGE3a6YXi
c9xg55RArCEfL76lQuIn8kbSUdUoSrF5VHLBIqAjatBMZjT7i0Vug3GqVTbQDvsL
MSgZOvCSeSuQQotvRV5ylxhwz3r8X9q9Gsh74oX6k9Cb/JrHTgBj3DS9O7vYvO8h
IvXNEqDoHkeNYD+cqAG19dWpFvrtlc2m
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:56 2025 by rpki-client