Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8692548C9D7611F09FD32FB2DAE4EC9C.roa
File: 8692548C9D7611F09FD32FB2DAE4EC9C.roa (raw, json)
Hash identifier: 1MzKBFzKEu4BiCHmxRKBcALDLVd5DItSmisdIrQxc9A=
Subject key identifier: EB:B0:0C:41:7D:CB:00:E4:E5:3B:59:00:62:8F:D0:0B:40:54:60:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A187
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8692548C9D7611F09FD32FB2DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 20:54:44 +0000
ROA not before: Mon 29 Sep 2025 20:54:36 +0000
ROA not after: Tue 04 Nov 2025 20:54:36 +0000
asID: 20326
IP address blocks: 154.194.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106887 (0x1a187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 20:54:36 2025 GMT
Not After : Nov 4 20:54:36 2025 GMT
Subject: CN=68daf214-67e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:84:9d:1c:db:f7:f8:ad:3c:f3:bf:8b:77:
95:d1:7e:a9:3f:03:ec:39:19:6e:eb:ea:5c:22:1b:
e1:11:82:c1:c7:31:6f:83:56:93:04:a0:bd:ba:4f:
39:9c:7b:6f:67:c5:14:e1:09:89:df:13:cd:1e:90:
d1:4c:99:fb:37:83:bf:93:d4:5e:c4:e9:42:31:a3:
06:59:2c:e0:80:e1:15:cc:c1:c0:2b:f6:92:68:65:
93:c3:d5:2f:36:e0:82:47:82:c4:fe:6f:81:6f:e5:
dd:b7:0a:20:7f:2f:00:c6:29:c9:24:40:5c:ff:0a:
28:39:a6:ee:36:6d:5f:b6:e2:58:1e:28:2f:37:6b:
33:1e:f9:f8:b0:cf:55:e7:08:60:34:a7:e5:5f:46:
99:2a:ac:40:ff:3e:b2:ce:dd:3f:8c:c4:8f:6e:28:
01:94:a9:bc:5c:20:8a:48:ba:14:5d:9f:7e:7b:67:
ee:e3:98:6b:9c:87:b6:2c:35:23:b7:00:66:82:d3:
a0:87:29:39:7c:86:ec:53:50:98:76:33:58:60:82:
b7:b3:d7:40:cf:b5:fb:49:65:95:64:1f:2a:2a:1f:
53:51:c1:19:33:fc:d8:9b:9f:25:21:9e:02:7e:84:
07:6b:56:d1:d2:66:a5:98:97:7f:2e:ef:81:8b:66:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:0C:41:7D:CB:00:E4:E5:3B:59:00:62:8F:D0:0B:40:54:60:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8692548C9D7611F09FD32FB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.234.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:a2:a0:03:b2:e8:7e:a0:92:b6:b9:ae:c2:38:68:18:80:36:
84:d1:e9:5d:06:49:ab:c3:fc:cb:b3:8b:07:e3:33:09:2c:0f:
69:81:3b:f6:2d:a7:ec:49:55:f1:39:91:fc:dd:be:51:47:d2:
d9:82:bc:34:df:36:53:bd:7b:02:1c:ca:c2:21:9b:e1:97:7e:
2f:c1:d4:84:87:a3:2a:1c:8f:89:de:5c:d1:1a:f4:3a:87:24:
42:4c:1b:f9:9d:8c:37:50:cc:4a:37:e2:11:cf:0b:ed:23:e3:
e2:3b:31:e0:ac:17:7a:5c:48:58:0d:30:48:4c:f7:b1:78:ba:
27:d7:b2:e9:e7:d8:45:34:3a:a8:a5:6f:ce:4f:7a:62:72:b0:
04:5c:a8:10:4e:28:a2:19:73:f1:f1:8f:be:b5:22:61:c1:0a:
d8:70:96:b7:78:ba:8e:b7:df:54:57:a9:eb:f2:e5:99:d4:c3:
be:c4:91:00:0b:31:0d:77:02:10:91:68:e2:44:a4:59:56:34:
43:de:d4:b1:0b:4a:fe:c4:b2:42:5e:52:66:76:be:62:a6:ca:
d1:57:ed:64:7f:0c:c3:ad:07:3c:ce:5e:e7:48:80:c5:69:23:
00:3d:7e:7e:eb:4f:8d:25:81:f3:4e:21:0f:9a:44:e2:7f:39:
3b:c3:e5:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaGHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MjA1NDM2WhcNMjUxMTA0MjA1NDM2WjAYMRYw
FAYDVQQDEw02OGRhZjIxNC02N2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzsWEnRzb9/itPPO/i3eV0X6pPwPsORlu6+pcIhvhEYLBxzFvg1aTBKC9
uk85nHtvZ8UU4QmJ3xPNHpDRTJn7N4O/k9RexOlCMaMGWSzggOEVzMHAK/aSaGWT
w9UvNuCCR4LE/m+Bb+Xdtwogfy8AxinJJEBc/wooOabuNm1ftuJYHigvN2szHvn4
sM9V5whgNKflX0aZKqxA/z6yzt0/jMSPbigBlKm8XCCKSLoUXZ9+e2fu45hrnIe2
LDUjtwBmgtOghyk5fIbsU1CYdjNYYIK3s9dAz7X7SWWVZB8qKh9TUcEZM/zYm58l
IZ4CfoQHa1bR0malmJd/Lu+Bi2bE2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOuw
DEF9ywDk5TtZAGKP0AtAVGByMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjkyNTQ4QzlENzYxMUYwOUZEMzJGQjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsLqMA0GCSqGSIb3DQEB
CwUAA4IBAQCMoqADsuh+oJK2ua7COGgYgDaE0eldBkmrw/zLs4sH4zMJLA9pgTv2
LafsSVXxOZH83b5RR9LZgrw03zZTvXsCHMrCIZvhl34vwdSEh6MqHI+J3lzRGvQ6
hyRCTBv5nYw3UMxKN+IRzwvtI+PiOzHgrBd6XEhYDTBITPexeLon17Lp59hFNDqo
pW/OT3picrAEXKgQTiiiGXPx8Y++tSJhwQrYcJa3eLqOt99UV6nr8uWZ1MO+xJEA
CzENdwIQkWjiRKRZVjRD3tSxC0r+xLJCXlJmdr5ipsrRV+1kfwzDrQc8zl7nSIDF
aSMAPX5+60+NJYHzTiEPmkTifzk7w+X0
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:54 2025 by rpki-client