Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E205C8A43511F0820C4F81DAE4EC9C.roa
File: B0E205C8A43511F0820C4F81DAE4EC9C.roa (raw, json)
Hash identifier: qy6sqC5Pb3fhb21bHXZKP3DDfwF2Kqr8Bgc/9HrIe0w=
Subject key identifier: 96:E9:C4:B9:6E:EF:C9:6D:B7:3A:5D:A7:83:40:63:C6:9A:AD:8A:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E205C8A43511F0820C4F81DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 10:58:16 +0000
ROA not before: Wed 08 Oct 2025 10:58:09 +0000
ROA not after: Fri 14 Nov 2025 10:58:09 +0000
asID: 397630
IP address blocks: 154.83.44.0/22 maxlen: 24
154.84.132.0/24 maxlen: 24
154.84.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107209 (0x1a2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 10:58:09 2025 GMT
Not After : Nov 14 10:58:09 2025 GMT
Subject: CN=68e643c8-59f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:26:7c:65:32:8d:b7:cb:25:f5:99:44:7b:
28:27:0e:80:c5:2c:72:43:19:93:b4:25:d5:30:5e:
c6:ae:1d:2f:67:33:ec:ea:9c:34:53:0f:e0:7e:4b:
d0:24:37:96:55:6f:e0:c9:85:8b:f0:e7:2b:b5:d9:
e7:04:c8:97:ca:99:69:b0:94:72:fc:0c:de:07:c0:
5d:72:02:ab:a8:3f:ea:d9:af:82:50:95:9e:d7:be:
9b:8c:40:4f:d3:0d:b6:11:53:c2:7d:80:65:64:4b:
42:66:63:ce:37:b5:b7:29:1d:83:c5:56:c2:fa:52:
49:64:13:c7:d0:b6:6b:4d:f4:06:9a:76:cb:c0:be:
9d:e5:76:a2:af:bb:76:3a:95:8c:6b:ee:a1:2d:1b:
e0:35:44:ca:86:23:35:40:68:40:eb:42:6d:1b:4c:
d9:62:eb:f6:5a:44:40:d7:65:cd:e4:0b:f7:61:3e:
81:ad:09:83:58:4f:67:50:02:b1:62:8e:e2:a7:69:
7b:11:40:f2:26:ac:14:ac:a3:34:71:57:cd:ba:0b:
ba:53:ab:3f:3f:07:cd:be:d5:d9:ec:e2:f5:84:2e:
4c:1c:20:e0:a6:c1:15:d5:07:d2:8f:2b:d7:7f:88:
1f:ad:7d:f5:17:61:33:89:ba:8d:cb:9f:c4:88:2a:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:C4:B9:6E:EF:C9:6D:B7:3A:5D:A7:83:40:63:C6:9A:AD:8A:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0E205C8A43511F0820C4F81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.44.0/22
154.84.132.0/24
154.84.134.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bd:34:1d:91:20:ae:cd:f3:8b:2c:37:f4:12:2e:24:34:5d:
01:63:03:ae:9f:a5:da:94:5c:47:d7:5a:94:78:f5:c3:8b:bd:
e2:a9:c5:b4:0a:33:21:a1:e9:89:4f:55:e2:0b:58:02:aa:b0:
7c:b3:f7:6e:4b:57:08:32:ed:9e:87:75:ff:b2:78:ab:ef:e7:
fe:56:de:09:59:69:36:16:de:c6:7b:23:f7:f8:05:9e:7d:f9:
b1:70:f6:e8:ab:99:79:c5:bc:2b:08:83:c0:a9:71:c3:89:8d:
3f:1f:06:da:de:e3:53:66:16:07:8c:47:b7:2a:dd:37:d3:c9:
d2:bc:16:9f:2e:5b:27:2d:0a:4a:7f:d4:10:0c:14:44:85:aa:
af:b5:56:85:31:3b:92:bd:aa:c1:3f:c4:f5:4b:ab:66:2c:b8:
ac:1b:aa:2e:2d:6c:6f:64:bb:ee:46:14:36:12:a4:b7:2b:49:
76:7b:4a:13:05:97:8d:77:88:ad:44:1c:c2:83:04:4a:2c:3b:
37:00:d3:e7:61:dd:87:86:dc:70:2d:f9:b5:92:c8:fe:5d:a0:
ac:81:6e:0a:62:c5:d4:d7:b7:7e:0d:a5:3f:e8:72:16:da:33:
e7:9e:9f:da:1d:47:45:82:09:c0:a9:43:e1:40:55:8a:fc:38:
82:d4:53:61
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAaLJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA4MTA1ODA5WhcNMjUxMTE0MTA1ODA5WjAYMRYw
FAYDVQQDEw02OGU2NDNjOC01OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArvImfGUyjbfLJfWZRHsoJw6AxSxyQxmTtCXVMF7Grh0vZzPs6pw0Uw/g
fkvQJDeWVW/gyYWL8OcrtdnnBMiXyplpsJRy/AzeB8BdcgKrqD/q2a+CUJWe176b
jEBP0w22EVPCfYBlZEtCZmPON7W3KR2DxVbC+lJJZBPH0LZrTfQGmnbLwL6d5Xai
r7t2OpWMa+6hLRvgNUTKhiM1QGhA60JtG0zZYuv2WkRA12XN5Av3YT6BrQmDWE9n
UAKxYo7ip2l7EUDyJqwUrKM0cVfNugu6U6s/PwfNvtXZ7OL1hC5MHCDgpsEV1QfS
jyvXf4gfrX31F2EzibqNy5/EiCqikwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJbp
xLlu78lttzpdp4NAY8aarYpYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMEUyMDVDOEE0MzUxMUYwODIwQzRGODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmlMsAwQAmlSEAwQAmlSG
MA0GCSqGSIb3DQEBCwUAA4IBAQAivTQdkSCuzfOLLDf0Ei4kNF0BYwOun6XalFxH
11qUePXDi73iqcW0CjMhoemJT1XiC1gCqrB8s/duS1cIMu2eh3X/snir7+f+Vt4J
WWk2Ft7GeyP3+AWeffmxcPboq5l5xbwrCIPAqXHDiY0/Hwba3uNTZhYHjEe3Kt03
08nSvBafLlsnLQpKf9QQDBREhaqvtVaFMTuSvarBP8T1S6tmLLisG6ouLWxvZLvu
RhQ2EqS3K0l2e0oTBZeNd4itRBzCgwRKLDs3ANPnYd2HhtxwLfm1ksj+XaCsgW4K
YsXU17d+DaU/6HIW2jPnnp/aHUdFggnAqUPhQFWK/DiC1FNh
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:48 2025 by rpki-client