Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AEA6BCEA07D11F09DCD8CD5DAE4EC9C.roa
File: 7AEA6BCEA07D11F09DCD8CD5DAE4EC9C.roa (raw, json)
Hash identifier: 0X+noaFXWRHLY+BvgikgEai8jZTj/7Gz+GHOkNNXz7Q=
Subject key identifier: F0:C7:4C:01:A6:BE:92:AB:7E:11:41:1F:93:A5:4D:7F:96:B3:FB:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A237
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AEA6BCEA07D11F09DCD8CD5DAE4EC9C.roa
Signing time: Fri 03 Oct 2025 17:22:04 +0000
ROA not before: Fri 03 Oct 2025 17:21:55 +0000
ROA not after: Sat 31 Jan 2026 17:21:55 +0000
asID: 328608
IP address blocks: 154.201.48.0/22 maxlen: 24
154.201.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107063 (0x1a237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 3 17:21:55 2025 GMT
Not After : Jan 31 17:21:55 2026 GMT
Subject: CN=68e0063c-7d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:b3:37:71:0f:9d:ca:af:f4:1d:8c:b4:f7:
35:9a:c7:fd:f4:33:f2:2f:b4:0a:2a:05:12:58:f2:
cb:74:51:63:d4:12:9f:56:17:22:e8:57:c1:fc:16:
35:6c:55:18:3b:48:c5:12:19:cf:89:f4:35:29:fe:
3d:2c:01:d0:bd:b8:08:78:84:e1:20:35:cf:5c:04:
1e:eb:16:46:14:ba:e0:1a:b9:81:5c:fe:41:20:cf:
c8:69:73:ed:a1:2f:33:b4:94:08:2b:31:bd:db:56:
d6:de:07:8f:7e:3c:32:78:fd:0b:59:4d:82:2d:ec:
56:1d:85:b6:39:c0:0f:eb:d5:ce:3d:46:b9:c0:93:
3c:6f:50:15:19:74:5c:d6:e0:62:c9:93:d3:ef:71:
e9:a7:d3:23:7f:87:39:b3:1f:24:f4:80:40:f3:5d:
f6:f4:06:cd:8a:d6:c1:32:b9:14:a2:12:9d:bc:38:
66:d4:8f:f9:d2:a0:fc:ce:30:4b:71:1c:8b:08:f4:
3a:f0:46:6d:a6:2d:25:7c:44:0e:79:99:8c:ab:cd:
d2:74:93:a4:5a:25:82:66:aa:30:a9:21:c1:71:be:
e1:8a:fc:df:1a:75:c5:4c:f6:45:54:a7:97:a7:e5:
3e:ff:26:f9:62:bf:90:d5:85:87:89:f7:6f:bb:91:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:4C:01:A6:BE:92:AB:7E:11:41:1F:93:A5:4D:7F:96:B3:FB:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AEA6BCEA07D11F09DCD8CD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.48.0-154.201.52.255
Signature Algorithm: sha256WithRSAEncryption
ad:44:67:05:d0:e6:b9:66:83:94:0d:84:6b:dc:10:ab:9e:f2:
08:f5:82:83:d4:42:4d:1c:4b:2d:de:aa:18:2a:2d:a4:f2:a5:
10:1b:13:af:7c:74:51:4f:ac:64:07:bb:a3:72:65:4e:4e:bd:
36:fb:06:b5:7e:6f:6f:36:37:25:98:3a:fd:42:d8:da:fb:88:
d0:55:50:3c:68:e1:62:2b:10:9c:f2:52:f7:d0:57:15:f7:82:
61:99:f4:c2:55:94:f3:f3:84:9b:cd:8a:9f:1a:6d:32:e4:5e:
29:71:a1:cd:17:61:0a:79:ec:e8:da:40:78:fd:ab:0b:c4:c4:
12:b7:63:5d:c7:80:50:4b:67:fc:fb:d1:de:ed:8b:73:03:df:
57:a0:04:86:60:2f:b2:a6:51:47:ba:f2:e6:02:41:94:03:c2:
18:55:e8:0a:3f:4b:4c:e8:4d:2d:a7:0f:f9:3e:c5:4f:9e:74:
24:fc:63:72:17:a3:b8:4a:20:57:c4:4f:b5:ed:69:4e:eb:ba:
d9:fb:32:0d:3a:e5:26:4d:d5:86:2a:43:57:97:c8:dc:4f:c3:
57:cd:a0:bc:4f:cd:8b:05:dd:59:be:c7:26:27:6a:f2:b5:49:
82:6f:7b:f5:ad:da:00:7d:86:1e:5e:9b:d8:e4:7c:19:98:b5:
2a:fd:a6:d6
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaI3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDAzMTcyMTU1WhcNMjYwMTMxMTcyMTU1WjAYMRYw
FAYDVQQDEw02OGUwMDYzYy03ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAziqzN3EPncqv9B2MtPc1msf99DPyL7QKKgUSWPLLdFFj1BKfVhci6FfB
/BY1bFUYO0jFEhnPifQ1Kf49LAHQvbgIeIThIDXPXAQe6xZGFLrgGrmBXP5BIM/I
aXPtoS8ztJQIKzG921bW3gePfjwyeP0LWU2CLexWHYW2OcAP69XOPUa5wJM8b1AV
GXRc1uBiyZPT73Hpp9Mjf4c5sx8k9IBA81329AbNitbBMrkUohKdvDhm1I/50qD8
zjBLcRyLCPQ68EZtpi0lfEQOeZmMq83SdJOkWiWCZqowqSHBcb7hivzfGnXFTPZF
VKeXp+U+/yb5Yr+Q1YWHifdvu5FR9wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPDH
TAGmvpKrfhFBH5OlTX+Ws/tRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QUVBNkJDRUEwN0QxMUYwOURDRDhDRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASayTADBACayTQwDQYJ
KoZIhvcNAQELBQADggEBAK1EZwXQ5rlmg5QNhGvcEKue8gj1goPUQk0cSy3eqhgq
LaTypRAbE698dFFPrGQHu6NyZU5OvTb7BrV+b282NyWYOv1C2Nr7iNBVUDxo4WIr
EJzyUvfQVxX3gmGZ9MJVlPPzhJvNip8abTLkXilxoc0XYQp57OjaQHj9qwvExBK3
Y13HgFBLZ/z70d7ti3MD31egBIZgL7KmUUe68uYCQZQDwhhV6Ao/S0zoTS2nD/k+
xU+edCT8Y3IXo7hKIFfET7XtaU7rutn7Mg065SZN1YYqQ1eXyNxPw1fNoLxPzYsF
3Vm+xyYnavK1SYJve/Wt2gB9hh5em9jkfBmYtSr9ptY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:46 2025 by rpki-client