Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989205B2A9C711F0A5F94D80DAE4EC9C.roa
File: 989205B2A9C711F0A5F94D80DAE4EC9C.roa (raw, json)
Hash identifier: cLzmRSWqhSA9AzRq5zzVxQypaTyTIvYQ0z9k/lcPlh0=
Subject key identifier: EB:0B:A8:2F:7A:E4:33:EA:71:44:F2:EF:2B:AB:28:00:E0:70:70:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989205B2A9C711F0A5F94D80DAE4EC9C.roa
Signing time: Wed 15 Oct 2025 13:05:17 +0000
ROA not before: Wed 15 Oct 2025 13:05:12 +0000
ROA not after: Tue 25 Nov 2025 13:05:12 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107429 (0x1a3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 13:05:12 2025 GMT
Not After : Nov 25 13:05:12 2025 GMT
Subject: CN=68ef9c0d-d2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:a8:58:41:62:97:99:6d:f3:a9:48:eb:6a:
6b:ae:ce:06:33:60:46:7d:53:fe:c2:a5:a7:52:a8:
a8:86:27:4d:9a:bc:c1:10:fc:4a:b5:6d:64:cd:7b:
a9:cb:22:30:77:49:a1:b5:a6:7f:c0:fa:9f:79:57:
e6:75:2a:35:e8:89:db:ad:c0:9a:1e:9a:6a:d6:6d:
33:b9:88:cf:2f:85:bc:2e:91:2d:94:90:68:87:4f:
f0:99:58:b9:e1:e0:48:df:62:1d:1f:0e:51:77:b4:
a4:3d:eb:9f:48:04:98:5a:88:fb:f3:a9:e9:04:6d:
b6:7f:58:47:34:a0:f5:0e:79:87:af:83:ab:07:d9:
35:43:fb:25:de:4f:eb:67:76:8b:26:65:77:dc:4e:
3d:65:2d:d8:a4:25:08:59:ef:24:e8:80:76:26:f4:
23:be:e4:56:0b:83:a2:48:77:fc:d9:aa:6a:8e:52:
cf:8b:2a:a8:ba:7e:29:e7:e1:d7:49:8b:26:52:c3:
ed:0c:78:f2:46:83:31:bc:8f:b6:80:5b:29:da:94:
fe:e6:4d:21:cb:5b:16:c7:0e:9e:e1:6d:1f:ba:c6:
4c:36:83:74:97:e7:de:d2:48:4a:c7:40:b9:7b:6e:
93:bb:05:a5:2c:a6:46:07:0e:10:fd:e1:d4:0e:4d:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:A8:2F:7A:E4:33:EA:71:44:F2:EF:2B:AB:28:00:E0:70:70:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/989205B2A9C711F0A5F94D80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:60:75:4f:5b:aa:4b:f0:fc:54:67:79:49:ec:2d:f9:3b:f9:
34:3e:76:98:64:4a:52:5c:5a:61:e1:58:72:2a:bc:03:0b:57:
66:f6:ba:c5:b4:33:7b:60:c8:e6:67:1f:da:bc:95:ec:b1:b6:
7f:e0:6e:80:f5:c8:51:04:c7:6e:c9:45:00:24:ea:5c:08:42:
09:9e:63:9f:bf:79:0f:d6:46:14:fb:84:7a:7d:cc:72:51:37:
6c:47:44:f2:95:e7:fb:9d:9c:e8:4c:93:be:4b:c8:8c:f7:e6:
62:dc:49:fb:1c:1f:77:10:00:f4:c7:bc:2a:39:f6:99:a0:e2:
d4:44:b8:88:5d:d4:b9:5c:e8:60:16:07:56:5d:cd:d0:08:82:
42:8c:61:5a:c9:7e:d4:df:b8:31:87:14:d1:e3:68:d9:6d:6f:
19:0d:36:cb:5a:fe:7a:ed:f3:92:29:07:dd:df:3b:9f:38:bc:
85:89:fe:49:8e:d7:91:bb:56:5d:d5:c7:fb:09:76:32:9c:da:
da:77:f7:55:37:a4:a8:34:ac:84:04:d7:9a:c9:19:5e:84:ef:
09:33:60:01:dd:e8:ba:6c:82:19:63:5d:d0:84:9d:c3:46:ab:
b6:60:96:a2:6b:aa:34:3c:93:ac:98:60:74:91:1a:4d:25:3f:
dd:30:ec:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaOlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDE1MTMwNTEyWhcNMjUxMTI1MTMwNTEyWjAYMRYw
FAYDVQQDEw02OGVmOWMwZC1kMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAylGoWEFil5lt86lI62prrs4GM2BGfVP+wqWnUqiohidNmrzBEPxKtW1k
zXupyyIwd0mhtaZ/wPqfeVfmdSo16InbrcCaHppq1m0zuYjPL4W8LpEtlJBoh0/w
mVi54eBI32IdHw5Rd7SkPeufSASYWoj786npBG22f1hHNKD1DnmHr4OrB9k1Q/sl
3k/rZ3aLJmV33E49ZS3YpCUIWe8k6IB2JvQjvuRWC4OiSHf82apqjlLPiyqoun4p
5+HXSYsmUsPtDHjyRoMxvI+2gFsp2pT+5k0hy1sWxw6e4W0fusZMNoN0l+fe0khK
x0C5e26TuwWlLKZGBw4Q/eHUDk3N9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOsL
qC965DPqcUTy7yurKADgcHAUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODkyMDVCMkE5QzcxMUYwQTVGOTREODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUQMA0GCSqGSIb3DQEB
CwUAA4IBAQClYHVPW6pL8PxUZ3lJ7C35O/k0PnaYZEpSXFph4VhyKrwDC1dm9rrF
tDN7YMjmZx/avJXssbZ/4G6A9chRBMduyUUAJOpcCEIJnmOfv3kP1kYU+4R6fcxy
UTdsR0Tylef7nZzoTJO+S8iM9+Zi3En7HB93EAD0x7wqOfaZoOLURLiIXdS5XOhg
FgdWXc3QCIJCjGFayX7U37gxhxTR42jZbW8ZDTbLWv567fOSKQfd3zufOLyFif5J
jteRu1Zd1cf7CXYynNrad/dVN6SoNKyEBNeayRlehO8JM2AB3ei6bIIZY13QhJ3D
Rqu2YJaia6o0PJOsmGB0kRpNJT/dMOzJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:56 2025 by rpki-client