Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C643E7EAD8B11F0B1C020BDDAE4EC9C.roa
File: 7C643E7EAD8B11F0B1C020BDDAE4EC9C.roa (raw, json)
Hash identifier: HoCJTSorrocA/lZm4QsnYw/vR9tqm96CEODdKK7KrLc=
Subject key identifier: 87:09:47:3E:43:3B:21:B1:DE:7D:92:5F:13:A9:4F:78:22:C0:84:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A447
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C643E7EAD8B11F0B1C020BDDAE4EC9C.roa
Signing time: Mon 20 Oct 2025 08:05:05 +0000
ROA not before: Mon 20 Oct 2025 08:04:56 +0000
ROA not after: Tue 25 Nov 2025 08:04:56 +0000
asID: 14315
IP address blocks: 154.82.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Oct 2025 07:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107591 (0x1a447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 20 08:04:56 2025 GMT
Not After : Nov 25 08:04:56 2025 GMT
Subject: CN=68f5ed31-9571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:91:ac:09:8f:74:78:c9:ab:8c:dd:04:2c:
f0:eb:b0:05:26:19:e1:48:d3:37:17:f5:e1:e5:fa:
6e:f8:dc:3e:8d:5f:31:e7:e1:16:96:f3:81:58:fd:
7b:71:47:b8:55:1d:34:40:d3:65:6a:b5:da:9a:0c:
23:3a:19:e6:d7:c9:df:a7:e8:85:79:b8:3f:b6:eb:
45:3b:ea:f4:9e:ad:92:30:b5:f6:3c:05:56:9f:77:
57:19:36:2d:d7:d2:dc:50:b2:ad:0c:c7:d7:a0:37:
04:a5:83:69:1d:6d:03:4b:de:11:69:1d:7d:ee:2a:
8a:8e:0e:05:0b:d5:67:3a:ed:48:6a:04:ea:95:04:
df:b6:a7:6c:e8:42:d5:66:bd:42:e6:61:3f:20:9f:
4c:ce:07:23:64:34:1b:20:78:63:30:f6:d7:7d:7a:
50:bc:91:c3:ee:26:08:c4:80:5f:ea:2b:f9:4f:b5:
0b:d2:02:a7:91:d2:d3:dd:98:81:08:f5:6d:a9:5e:
b7:22:19:e4:0e:73:bc:9f:69:e0:98:79:a5:70:b2:
ee:e7:68:fa:66:8e:4a:e4:64:95:1f:61:1a:2a:d7:
fd:f5:21:67:e1:b5:a1:fe:91:9d:4b:95:3a:26:55:
e1:5e:f8:27:fe:a0:21:25:89:f0:5c:79:d4:2c:c5:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:47:3E:43:3B:21:B1:DE:7D:92:5F:13:A9:4F:78:22:C0:84:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C643E7EAD8B11F0B1C020BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
Signature Algorithm: sha256WithRSAEncryption
27:42:b0:1d:46:8b:c9:12:65:b6:78:97:71:73:ee:7c:6e:12:
4e:92:a3:55:8c:af:52:8f:01:0c:26:96:7e:4a:55:51:c2:cc:
55:c4:44:7d:8f:87:bf:3d:d4:39:3a:ca:e8:35:8e:82:56:c3:
86:19:07:a0:15:f0:f2:45:b7:20:00:cd:3a:8d:55:b4:10:f2:
1b:fb:5c:41:1b:d8:c0:50:14:35:92:71:b3:ff:ad:2e:ea:ec:
19:f8:54:b2:28:2d:d6:ac:72:bc:c2:86:b4:cc:ef:0b:0f:1c:
3a:6f:f6:23:19:38:d5:01:3f:e9:1c:76:1d:e8:07:9c:45:dd:
37:39:72:de:e1:c4:c7:e5:4f:a0:4c:d4:46:70:fc:74:99:5c:
bb:e4:b6:15:47:3d:bd:5c:b7:b9:ab:19:82:3e:35:d4:ba:34:
25:64:de:85:f9:3f:18:92:95:b9:05:7d:3c:66:44:e2:ad:71:
9c:c9:66:c4:e5:f2:57:e7:fc:6b:c0:7a:30:d3:81:28:02:f3:
a6:92:0f:1d:ad:ff:07:bf:3c:14:29:1f:ae:23:0a:cd:22:17:
54:25:4f:03:6f:80:4d:21:23:95:aa:0f:3c:7d:39:e9:f6:61:
c7:cc:50:07:4d:0a:dd:12:33:51:55:88:03:93:74:b2:15:34:
95:8e:70:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaRHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIwMDgwNDU2WhcNMjUxMTI1MDgwNDU2WjAYMRYw
FAYDVQQDEw02OGY1ZWQzMS05NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuUSRrAmPdHjJq4zdBCzw67AFJhnhSNM3F/Xh5fpu+Nw+jV8x5+EWlvOB
WP17cUe4VR00QNNlarXamgwjOhnm18nfp+iFebg/tutFO+r0nq2SMLX2PAVWn3dX
GTYt19LcULKtDMfXoDcEpYNpHW0DS94RaR197iqKjg4FC9VnOu1IagTqlQTftqds
6ELVZr1C5mE/IJ9MzgcjZDQbIHhjMPbXfXpQvJHD7iYIxIBf6iv5T7UL0gKnkdLT
3ZiBCPVtqV63IhnkDnO8n2ngmHmlcLLu52j6Zo5K5GSVH2EaKtf99SFn4bWh/pGd
S5U6JlXhXvgn/qAhJYnwXHnULMXVyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIcJ
Rz5DOyGx3n2SXxOpT3giwIQSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QzY0M0U3RUFEOEIxMUYwQjFDMDIwQkREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlITMA0GCSqGSIb3DQEB
CwUAA4IBAQAnQrAdRovJEmW2eJdxc+58bhJOkqNVjK9SjwEMJpZ+SlVRwsxVxER9
j4e/PdQ5OsroNY6CVsOGGQegFfDyRbcgAM06jVW0EPIb+1xBG9jAUBQ1knGz/60u
6uwZ+FSyKC3WrHK8woa0zO8LDxw6b/YjGTjVAT/pHHYd6AecRd03OXLe4cTH5U+g
TNRGcPx0mVy75LYVRz29XLe5qxmCPjXUujQlZN6F+T8YkpW5BX08ZkTirXGcyWbE
5fJX5/xrwHow04EoAvOmkg8drf8HvzwUKR+uIwrNIhdUJU8Db4BNISOVqg88fTnp
9mHHzFAHTQrdEjNRVYgDk3SyFTSVjnBy
-----END CERTIFICATE-----
Generated at Wed Oct 22 10:21:52 2025 by rpki-client