Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/811F815C85FA11F0AF6946BADAE4EC9C.roa
File: 811F815C85FA11F0AF6946BADAE4EC9C.roa (raw, json)
Hash identifier: w3oKGzzg0Ur/ZYBpOXMIhjq+RiS1ykt1GepsbLOf/PE=
Subject key identifier: 62:A7:53:3B:79:55:2E:7C:8F:A1:06:B2:09:D5:9E:76:5A:4B:CC:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/811F815C85FA11F0AF6946BADAE4EC9C.roa
Signing time: Sat 30 Aug 2025 23:39:02 +0000
ROA not before: Sun 31 Aug 2025 23:38:54 +0000
ROA not after: Sun 07 Sep 2025 23:38:54 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105044 (0x19a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 23:38:54 2025 GMT
Not After : Sep 7 23:38:54 2025 GMT
Subject: CN=68b38b96-672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:19:78:4f:66:aa:73:ea:24:c7:d8:b0:00:
d0:de:3f:37:8a:eb:61:98:7e:23:49:66:6f:78:95:
2e:ee:a1:ef:40:59:4f:02:1e:19:21:88:d3:ba:12:
09:c3:a7:4e:fb:c6:5b:1f:41:ac:1a:25:20:cc:c7:
83:55:5c:6e:25:75:fa:2c:af:3f:51:bd:0c:04:a6:
f4:15:dc:ad:5c:8d:2c:a4:fb:ad:04:19:d6:c0:bb:
32:44:cd:2b:4a:d7:2c:0f:58:06:58:23:a3:21:89:
ae:80:48:ae:1b:44:34:f9:d5:b8:ee:ec:34:31:3d:
dc:a1:8c:ae:69:6e:8a:72:41:56:4b:82:9f:9b:7e:
5b:98:43:d3:7d:7e:df:68:2c:b7:0d:9f:e3:d1:bd:
56:66:e7:ee:25:7a:ae:a9:47:da:ab:5f:c5:5b:03:
37:d1:8e:fb:27:60:88:86:0b:85:15:49:39:1e:f2:
47:93:21:0e:12:f9:1e:b9:f6:0b:be:3c:98:6c:3a:
35:fb:db:e9:be:e8:6c:6b:5a:91:06:67:97:1c:2f:
e0:96:1e:80:ee:97:0d:24:39:f5:79:56:e9:69:0c:
75:d3:65:04:43:1e:b6:70:b6:b0:c2:64:78:6e:ba:
78:05:11:7f:bb:38:22:8d:d8:51:ae:82:81:7c:ee:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:53:3B:79:55:2E:7C:8F:A1:06:B2:09:D5:9E:76:5A:4B:CC:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/811F815C85FA11F0AF6946BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:14:12:cf:fb:76:a6:34:37:74:45:17:5c:ce:3f:a3:58:b2:
79:f7:7e:2f:e1:8c:ea:fe:dd:88:21:f1:e5:56:3a:63:46:b6:
18:b9:d9:4e:00:95:bb:63:ba:e8:0a:af:ab:53:1b:fd:81:4b:
29:09:4a:29:e4:29:02:d3:3b:56:52:46:90:c3:69:0e:eb:44:
55:b9:a4:72:d1:e0:f7:64:b2:55:3a:69:0d:7d:1b:5e:4f:3b:
5c:c5:55:3d:21:6f:44:8b:b9:df:ad:90:4f:e3:b9:1b:c7:04:
92:43:97:c3:2d:04:b3:0e:6b:b2:24:eb:75:78:c5:93:59:2a:
48:51:b4:12:32:5e:49:88:70:2c:8a:0a:f1:4e:9b:03:8c:f1:
a5:19:c7:00:fa:57:75:e8:6d:7c:6f:96:5e:d9:bb:c6:7f:b2:
62:fd:5c:47:3a:1e:c6:d7:9e:38:6b:09:72:4b:79:93:08:f7:
28:61:33:12:6b:66:06:24:18:56:99:d6:17:5e:15:25:ff:1c:
e1:fb:52:27:00:0f:de:51:37:ba:84:66:99:af:4d:ca:91:aa:
b8:0d:1e:5d:33:cc:cc:0c:cc:8f:f2:08:9a:4f:19:2a:f9:c0:
94:38:b2:32:1b:0d:ca:b5:11:29:76:65:a5:97:13:97:7c:bf:
62:c2:8b:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZpUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODMxMjMzODU0WhcNMjUwOTA3MjMzODU0WjAYMRYw
FAYDVQQDEw02OGIzOGI5Ni02NzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvmwZeE9mqnPqJMfYsADQ3j83iuthmH4jSWZveJUu7qHvQFlPAh4ZIYjT
uhIJw6dO+8ZbH0GsGiUgzMeDVVxuJXX6LK8/Ub0MBKb0FdytXI0spPutBBnWwLsy
RM0rStcsD1gGWCOjIYmugEiuG0Q0+dW47uw0MT3coYyuaW6KckFWS4Kfm35bmEPT
fX7faCy3DZ/j0b1WZufuJXquqUfaq1/FWwM30Y77J2CIhguFFUk5HvJHkyEOEvke
ufYLvjyYbDo1+9vpvuhsa1qRBmeXHC/glh6A7pcNJDn1eVbpaQx102UEQx62cLaw
wmR4brp4BRF/uzgijdhRroKBfO5GMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGKn
Uzt5VS58j6EGsgnVnnZaS8zNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTFGODE1Qzg1RkExMUYwQUY2OTQ2QkFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6FBLP+3amNDd0RRdczj+jWLJ5934v4Yzq/t2IIfHlVjpjRrYYudlO
AJW7Y7roCq+rUxv9gUspCUop5CkC0ztWUkaQw2kO60RVuaRy0eD3ZLJVOmkNfRte
TztcxVU9IW9Ei7nfrZBP47kbxwSSQ5fDLQSzDmuyJOt1eMWTWSpIUbQSMl5JiHAs
igrxTpsDjPGlGccA+ld16G18b5Ze2bvGf7Ji/VxHOh7G1544awlyS3mTCPcoYTMS
a2YGJBhWmdYXXhUl/xzh+1InAA/eUTe6hGaZr03Kkaq4DR5dM8zMDMyP8giaTxkq
+cCUOLIyGw3KtREpdmWllxOXfL9iwoue
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:44 2025 by rpki-client