Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86846BBCA28311F0BA6D5288DAE4EC9C.roa
File: 86846BBCA28311F0BA6D5288DAE4EC9C.roa (raw, json)
Hash identifier: d7DETmSh8vMVPcaFiF1+NxHCaAyGth2q/Zg6eBZDiC0=
Subject key identifier: 4E:E6:C2:14:5B:EA:C3:FC:EF:5E:D7:E4:50:6C:26:E9:4E:EB:64:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A258
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86846BBCA28311F0BA6D5288DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:10:23 +0000
ROA not before: Mon 06 Oct 2025 07:10:19 +0000
ROA not after: Thu 06 Nov 2025 07:10:19 +0000
asID: 45194
IP address blocks: 154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107096 (0x1a258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 6 07:10:19 2025 GMT
Not After : Nov 6 07:10:19 2025 GMT
Subject: CN=68e36b5f-f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:97:17:4b:10:8b:93:87:59:10:b0:b8:a5:
a9:85:32:59:0c:b4:b7:36:da:f1:f4:b3:f0:da:f5:
1e:b4:bb:f4:94:c4:83:a0:4e:15:35:d7:8f:29:60:
80:52:cf:15:24:da:af:ac:46:dc:af:66:d6:b5:e5:
58:f0:37:8f:bf:6b:0f:84:4b:08:6e:b3:13:42:f8:
2b:1f:79:72:66:24:04:92:aa:e1:95:b8:f4:d7:1d:
f5:f8:82:c7:93:ad:61:ff:1e:b0:88:f7:b9:9c:24:
9b:da:03:ee:6c:6f:dd:63:3e:a4:f3:82:49:b6:c0:
fa:ec:91:2c:76:5b:f6:0b:4d:cb:99:21:6a:54:02:
d4:dd:e7:64:7d:70:13:77:05:7a:b4:b8:b7:c4:7b:
17:9b:f7:d8:02:1f:91:bb:03:8b:ff:0b:c9:5a:54:
da:b0:f5:b5:33:c1:f0:c3:69:f1:c5:6e:cd:7c:3b:
b3:fb:2e:2c:c7:6e:e1:7d:98:d7:a1:bd:15:ec:f7:
85:53:5f:14:75:ae:1e:19:c5:d1:f8:2c:e3:f0:3d:
4c:c4:00:ef:66:b9:44:75:18:e1:26:67:44:9d:59:
75:aa:fe:2c:8a:5e:fb:1d:7e:31:33:fa:22:cc:22:
dc:56:27:74:38:7f:39:85:5f:0e:74:09:61:bf:d8:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E6:C2:14:5B:EA:C3:FC:EF:5E:D7:E4:50:6C:26:E9:4E:EB:64:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86846BBCA28311F0BA6D5288DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.200.0-154.84.208.255
154.84.213.0-154.84.222.255
154.84.224.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9f:92:27:cd:12:e9:6c:ad:0f:13:b9:d3:ac:a5:c5:71:29:
06:bc:31:7d:6e:e7:22:9f:44:7e:58:8a:4f:53:bc:bb:7b:1b:
22:d5:6c:88:ea:57:a7:7b:45:cf:e9:a1:96:ad:a7:0c:a9:62:
89:bc:9f:fa:54:90:e1:5c:a8:af:e7:ef:40:40:5b:12:e2:c0:
a9:b9:2f:20:06:e2:09:97:a0:3e:9b:27:f9:db:1e:45:e2:99:
b3:1c:d3:fc:ff:66:aa:f0:c0:c9:ad:bc:55:fc:0e:78:28:d3:
51:50:4f:9a:65:4a:e6:fd:b9:e6:dd:2d:af:d2:b9:3f:20:88:
e5:b2:1c:e9:e3:73:41:fb:27:e0:28:5b:70:12:75:29:01:c0:
02:40:a6:c3:7b:8c:36:29:9d:6c:88:61:38:2d:68:69:fd:22:
04:89:27:69:6e:79:84:0c:c9:9f:d0:65:76:7a:8a:c3:a8:73:
aa:02:2d:59:6c:f3:5d:5b:6b:ce:3e:0d:14:1b:06:94:aa:e1:
c5:96:22:9d:c4:4c:98:3a:2a:14:09:1e:08:a3:3c:30:40:67:
16:32:85:0c:cc:c3:1f:29:fe:01:b6:31:1d:30:dc:d3:94:2c:
3a:50:f2:50:d3:6c:26:d3:3a:a4:21:69:5b:89:c8:fe:aa:c1:
99:92:de:f3
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAaJYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA2MDcxMDE5WhcNMjUxMTA2MDcxMDE5WjAYMRYw
FAYDVQQDEw02OGUzNmI1Zi1mMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuDyXF0sQi5OHWRCwuKWphTJZDLS3Ntrx9LPw2vUetLv0lMSDoE4VNdeP
KWCAUs8VJNqvrEbcr2bWteVY8DePv2sPhEsIbrMTQvgrH3lyZiQEkqrhlbj01x31
+ILHk61h/x6wiPe5nCSb2gPubG/dYz6k84JJtsD67JEsdlv2C03LmSFqVALU3edk
fXATdwV6tLi3xHsXm/fYAh+RuwOL/wvJWlTasPW1M8Hww2nxxW7NfDuz+y4sx27h
fZjXob0V7PeFU18Uda4eGcXR+Czj8D1MxADvZrlEdRjhJmdEnVl1qv4sil77HX4x
M/oizCLcVid0OH85hV8OdAlhv9iDkwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFE7m
whRb6sP8717X5FBsJulO62RQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84Njg0NkJCQ0EyODMxMUYwQkE2RDUyODhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAOaVMgDBACaVNAwDAME
AJpU1QMEAJpU3gMEAJpU4DANBgkqhkiG9w0BAQsFAAOCAQEArZ+SJ80S6WytDxO5
06ylxXEpBrwxfW7nIp9EfliKT1O8u3sbItVsiOpXp3tFz+mhlq2nDKliibyf+lSQ
4Vyor+fvQEBbEuLAqbkvIAbiCZegPpsn+dseReKZsxzT/P9mqvDAya28VfwOeCjT
UVBPmmVK5v255t0tr9K5PyCI5bIc6eNzQfsn4ChbcBJ1KQHAAkCmw3uMNimdbIhh
OC1oaf0iBIknaW55hAzJn9BldnqKw6hzqgItWWzzXVtrzj4NFBsGlKrhxZYincRM
mDoqFAkeCKM8MEBnFjKFDMzDHyn+AbYxHTDc05QsOlDyUNNsJtM6pCFpW4nI/qrB
mZLe8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:55 2025 by rpki-client