Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784195B28A5411F091C1B59EDAE4EC9C.roa
File: 784195B28A5411F091C1B59EDAE4EC9C.roa (raw, json)
Hash identifier: XIYRDDSZO9XbXtj3U4t7aqyN3pyjHq7VJgkmcewaAaE=
Subject key identifier: EC:71:E9:CC:9B:C7:7A:B5:2A:4F:81:90:F5:21:B3:CA:5A:BD:0A:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784195B28A5411F091C1B59EDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:33:05 +0000
ROA not before: Fri 05 Sep 2025 12:33:00 +0000
ROA not after: Fri 12 Dec 2025 12:33:00 +0000
asID: 398993
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106032 (0x19e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 12:33:00 2025 GMT
Not After : Dec 12 12:33:00 2025 GMT
Subject: CN=68bad881-88db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:00:6b:2b:df:47:d0:df:59:41:f5:5d:d9:
16:a3:0f:e9:21:c6:31:29:0b:64:26:f4:61:3a:31:
64:1a:9d:01:6a:e8:56:61:00:a3:96:5d:11:de:71:
c7:d4:0c:cb:a8:40:2e:50:e1:8e:91:2e:fc:36:96:
5f:26:af:9f:13:81:a4:8f:1d:61:dd:39:80:78:62:
3f:8d:88:f4:cd:36:98:45:2b:c4:5d:ca:b3:76:70:
f4:36:02:e1:7f:c1:50:b8:ba:c6:b3:c5:59:30:d0:
0e:63:0b:09:43:b7:62:b3:2e:22:6e:65:6f:c3:9d:
e3:57:59:8c:e3:cd:cd:1e:52:b9:e8:0d:80:87:8d:
2a:04:40:4e:ab:7c:42:68:5b:de:76:7b:b9:0d:f4:
93:93:79:f4:9c:bd:13:59:d8:6d:b9:c9:a4:23:a7:
bf:60:03:98:43:35:49:4b:31:bd:ca:47:be:7d:1d:
87:b2:57:12:33:a8:f5:6a:13:38:86:2b:0e:db:ff:
19:92:11:bd:41:43:e2:68:2b:ec:5f:81:78:b1:5b:
1e:76:f2:8a:b7:44:c1:ed:de:9a:2c:30:84:65:4d:
d8:41:9a:55:9a:7e:58:14:57:07:af:40:bc:e1:44:
be:a0:b4:17:74:e8:ee:0c:ec:7d:9f:ad:a2:45:94:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:E9:CC:9B:C7:7A:B5:2A:4F:81:90:F5:21:B3:CA:5A:BD:0A:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/784195B28A5411F091C1B59EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
Signature Algorithm: sha256WithRSAEncryption
34:8f:2a:f5:23:05:25:75:67:8c:02:ad:27:16:ed:d4:c2:34:
a1:b8:95:0f:f3:20:20:01:b5:2c:3a:e7:ba:e2:77:77:01:a3:
6d:36:dd:69:87:20:81:a5:ae:d5:3f:9d:cb:df:be:1f:75:e2:
10:28:0f:cc:07:4f:aa:5f:83:1a:5d:8a:60:ee:1f:27:89:89:
a2:5c:aa:e1:36:fb:d4:bb:70:9b:7b:e6:9d:22:ce:52:09:e1:
24:6e:c7:1d:fe:f8:69:25:0d:16:ca:7d:fb:4f:aa:0f:44:8b:
cd:ff:45:a8:da:bb:62:e0:34:3c:36:17:d3:1f:c6:47:40:4a:
29:61:37:c9:32:3e:30:96:3a:8e:15:8d:c1:36:08:7a:f8:59:
dd:52:81:60:f3:34:c9:e4:dd:3c:08:55:d2:c0:46:db:cd:34:
a5:33:1d:80:79:2d:3e:73:18:26:45:7c:c9:6d:92:96:fd:34:
ce:44:de:18:5d:46:9b:3b:3b:61:0d:ad:c1:2a:dc:5e:b6:57:
dd:34:4e:f2:a2:07:3c:cd:65:37:ce:67:ce:5e:b4:3d:e2:a1:
6a:7a:23:e9:41:17:93:42:80:4c:f9:e7:12:36:a7:63:de:b5:
e7:d5:59:3e:1e:5b:a1:a2:22:6e:1a:0d:bb:11:f9:ca:0d:65:
d3:bb:99:d5
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIDAZ4wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA1MTIzMzAwWhcNMjUxMjEyMTIzMzAwWjAYMRYw
FAYDVQQDEw02OGJhZDg4MS04OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwH4AayvfR9DfWUH1XdkWow/pIcYxKQtkJvRhOjFkGp0BauhWYQCjll0R
3nHH1AzLqEAuUOGOkS78NpZfJq+fE4Gkjx1h3TmAeGI/jYj0zTaYRSvEXcqzdnD0
NgLhf8FQuLrGs8VZMNAOYwsJQ7disy4ibmVvw53jV1mM483NHlK56A2Ah40qBEBO
q3xCaFvednu5DfSTk3n0nL0TWdhtucmkI6e/YAOYQzVJSzG9yke+fR2HslcSM6j1
ahM4hisO2/8ZkhG9QUPiaCvsX4F4sVsedvKKt0TB7d6aLDCEZU3YQZpVmn5YFFcH
r0C84US+oLQXdOjuDOx9n62iRZTkywIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOxx
6cybx3q1Kk+BkPUhs8pavQoJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83ODQxOTVCMjhBNTQxMUYwOTFDMUI1OUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBASax9ADAwOawDANBgkq
hkiG9w0BAQsFAAOCAQEANI8q9SMFJXVnjAKtJxbt1MI0obiVD/MgIAG1LDrnuuJ3
dwGjbTbdaYcggaWu1T+dy9++H3XiECgPzAdPql+DGl2KYO4fJ4mJolyq4Tb71Ltw
m3vmnSLOUgnhJG7HHf74aSUNFsp9+0+qD0SLzf9FqNq7YuA0PDYX0x/GR0BKKWE3
yTI+MJY6jhWNwTYIevhZ3VKBYPM0yeTdPAhV0sBG2800pTMdgHktPnMYJkV8yW2S
lv00zkTeGF1Gmzs7YQ2twSrcXrZX3TRO8qIHPM1lN85nzl60PeKhanoj6UEXk0KA
TPnnEjanY96159VZPh5boaIibhoNuxH5yg1l07uZ1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:45 2025 by rpki-client