Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97EC658A8CAD11F08C8F1CD8DAE4EC9C.roa
File: 97EC658A8CAD11F08C8F1CD8DAE4EC9C.roa (raw, json)
Hash identifier: smgaxsQYHRjcf+aEjcDrJpG/KUL29hzlb2qIwnHxbEQ=
Subject key identifier: AB:79:D0:F9:CA:37:F5:C0:B9:9F:CB:CF:75:B1:DD:0B:D4:5C:6E:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019ED7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97EC658A8CAD11F08C8F1CD8DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 12:16:06 +0000
ROA not before: Mon 08 Sep 2025 12:16:01 +0000
ROA not after: Sat 15 Aug 2026 12:16:01 +0000
asID: 55967
IP address blocks: 154.222.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106199 (0x19ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 12:16:01 2025 GMT
Not After : Aug 15 12:16:01 2026 GMT
Subject: CN=68bec906-04b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:4e:f4:59:0c:b6:54:e9:a9:ba:f8:4d:76:
eb:66:6a:e1:09:40:32:d5:e7:9a:51:8d:f2:96:30:
f0:ef:b9:d4:4c:c9:2c:ff:87:5f:11:22:f3:3b:2e:
47:31:b4:d1:65:f8:22:e0:3c:34:39:ad:8f:8c:37:
d3:28:aa:f0:22:8c:9c:04:f9:36:f1:ba:dd:d2:0c:
3f:4c:ca:8d:7c:d0:e2:25:d5:4e:3b:15:3c:64:14:
a7:36:78:dd:6f:94:47:b2:1c:44:11:4e:f2:e6:1a:
c0:28:99:c5:73:89:f5:d2:c7:d1:f5:8d:ba:9c:ee:
55:1a:1f:1e:92:d0:7a:6f:42:0d:33:c9:d9:f0:b0:
64:e9:24:58:97:1e:25:00:07:56:01:46:51:5e:97:
4f:32:fa:41:2e:0b:c7:e4:eb:90:8f:d1:e6:13:ec:
61:38:9e:84:e7:0f:3c:d0:a4:df:08:f6:b5:f0:08:
59:5b:62:22:b7:9d:67:01:4c:95:4b:06:db:ab:6a:
4a:a2:76:93:f3:6c:80:51:81:2d:36:bb:84:81:bd:
38:40:5b:a7:ea:7e:5f:da:68:fe:bb:d9:96:fd:35:
d3:a6:86:1e:eb:5d:5f:0a:20:8f:80:30:73:da:6e:
20:66:e6:40:e3:f2:a1:61:0d:3a:61:9a:81:28:8b:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:D0:F9:CA:37:F5:C0:B9:9F:CB:CF:75:B1:DD:0B:D4:5C:6E:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97EC658A8CAD11F08C8F1CD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:98:c2:3f:2f:8d:4b:0b:94:db:2f:d6:dd:e5:11:94:37:c9:
d4:5e:70:01:94:99:b1:fb:37:4a:99:40:f3:91:1f:a7:7a:69:
a9:78:9a:cf:39:44:0e:86:66:79:bd:c3:00:ca:95:57:15:ce:
42:73:eb:5e:b8:89:b4:f0:cd:9c:69:79:b3:49:5b:5c:65:25:
e1:64:f9:62:bd:9a:81:01:0d:25:1c:3c:0a:a4:6f:95:e5:42:
b4:4b:95:97:17:25:93:6b:74:69:64:91:68:d2:29:eb:5b:52:
c6:5b:e5:a7:2d:52:9a:9c:f0:f7:71:d2:08:64:49:0b:d9:b8:
d5:40:83:65:04:01:16:22:ca:5d:27:45:98:20:f9:90:0c:d0:
fe:df:42:e2:54:f6:fa:33:29:9f:5c:cf:1c:56:fb:27:64:d9:
76:d6:db:27:0d:ad:1e:19:98:02:21:26:ef:fb:b8:f9:fe:b5:
71:c0:70:68:67:37:4b:d5:cc:a5:d7:14:41:61:a6:38:59:98:
87:c0:d4:cd:5e:00:6b:2f:0d:de:db:d4:e7:df:0e:e5:3d:e7:
35:fd:e6:72:db:c3:cc:ae:23:82:a8:ac:24:db:d1:c5:9b:c8:
c6:a7:49:65:70:92:8a:fc:91:fe:7a:5d:81:c2:ee:79:ee:92:
d2:ea:b6:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ7XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA4MTIxNjAxWhcNMjYwODE1MTIxNjAxWjAYMRYw
FAYDVQQDEw02OGJlYzkwNi0wNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4M5O9FkMtlTpqbr4TXbrZmrhCUAy1eeaUY3yljDw77nUTMks/4dfESLz
Oy5HMbTRZfgi4Dw0Oa2PjDfTKKrwIoycBPk28brd0gw/TMqNfNDiJdVOOxU8ZBSn
Nnjdb5RHshxEEU7y5hrAKJnFc4n10sfR9Y26nO5VGh8ektB6b0INM8nZ8LBk6SRY
lx4lAAdWAUZRXpdPMvpBLgvH5OuQj9HmE+xhOJ6E5w880KTfCPa18AhZW2Iit51n
AUyVSwbbq2pKonaT82yAUYEtNruEgb04QFun6n5f2mj+u9mW/TXTpoYe611fCiCP
gDBz2m4gZuZA4/KhYQ06YZqBKIsXBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKt5
0PnKN/XAuZ/Lz3Wx3QvUXG5mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85N0VDNjU4QThDQUQxMUYwOEM4RjFDRDhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt4CMA0GCSqGSIb3DQEB
CwUAA4IBAQCOmMI/L41LC5TbL9bd5RGUN8nUXnABlJmx+zdKmUDzkR+nemmpeJrP
OUQOhmZ5vcMAypVXFc5Cc+teuIm08M2caXmzSVtcZSXhZPlivZqBAQ0lHDwKpG+V
5UK0S5WXFyWTa3RpZJFo0inrW1LGW+WnLVKanPD3cdIIZEkL2bjVQINlBAEWIspd
J0WYIPmQDND+30LiVPb6MymfXM8cVvsnZNl21tsnDa0eGZgCISbv+7j5/rVxwHBo
ZzdL1cyl1xRBYaY4WZiHwNTNXgBrLw3e29Tn3w7lPec1/eZy28PMriOCqKwk29HF
m8jGp0llcJKK/JH+el2Bwu557pLS6rYJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:07 2025 by rpki-client