Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C4A202A35811F094FDEFEBDAE4EC9C.roa
File: B2C4A202A35811F094FDEFEBDAE4EC9C.roa (raw, json)
Hash identifier: RvDyJOKkIJSuyLH9OfyO+MSHszYhLJkdVkckMHe0Ypo=
Subject key identifier: 18:FB:7F:80:27:64:E4:A0:9D:70:0C:95:EB:8C:23:61:8C:06:9D:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A28A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C4A202A35811F094FDEFEBDAE4EC9C.roa
Signing time: Tue 07 Oct 2025 08:36:20 +0000
ROA not before: Tue 07 Oct 2025 08:36:15 +0000
ROA not after: Sun 16 Nov 2025 08:36:15 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
154.222.16.0/21 maxlen: 24
154.222.16.0/22 maxlen: 24
154.222.20.0/22 maxlen: 24
154.222.24.0/21 maxlen: 24
154.222.24.0/22 maxlen: 24
154.222.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107146 (0x1a28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 7 08:36:15 2025 GMT
Not After : Nov 16 08:36:15 2025 GMT
Subject: CN=68e4d104-2f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:75:bd:ec:73:10:8b:3b:32:24:24:61:08:
cd:14:23:8d:12:a3:ee:a9:24:49:a2:7d:c4:0d:3a:
82:39:26:98:73:1a:7c:e2:d7:75:d0:1f:f4:e7:c9:
b8:d4:51:49:92:92:1f:40:d3:f1:6f:92:ec:d9:44:
49:07:5c:63:8e:c4:0c:78:4e:f4:b0:82:d8:6e:67:
23:45:a7:d3:f8:7d:1c:45:9e:a7:b6:1e:6e:d7:32:
aa:d7:3f:ad:84:ec:d5:56:cd:4d:90:0f:63:5c:0e:
81:d4:04:d6:9e:eb:18:8c:40:73:d9:df:38:c2:18:
77:4b:f0:75:4f:da:4c:d0:23:d3:8c:ce:f8:44:0b:
e0:61:1f:28:59:05:d4:8f:c6:2a:b8:05:33:ec:c7:
32:4b:ec:65:4d:25:55:22:78:0b:80:76:ba:28:90:
c1:79:c4:68:ad:23:25:f3:68:13:03:f7:a3:21:9c:
5d:92:d8:91:cf:df:c0:f5:f6:a5:ea:a5:87:7a:c9:
d6:28:1a:08:35:ac:a6:d3:62:73:af:6a:d0:83:f1:
76:ee:c7:51:7e:bb:5f:6c:11:ed:af:ac:3a:df:e8:
32:d2:db:cc:0d:50:93:9a:8c:b0:49:32:3e:9d:81:
d9:39:58:55:5a:b7:ac:33:fe:9f:0d:bf:88:7c:bb:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:7F:80:27:64:E4:A0:9D:70:0C:95:EB:8C:23:61:8C:06:9D:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C4A202A35811F094FDEFEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:5e:68:48:0f:e9:5d:3d:cb:de:d5:13:91:8c:17:c3:e2:86:
1e:38:1b:b1:cc:de:37:46:19:ed:3b:06:2e:e6:dd:28:8a:27:
b9:62:ab:fe:03:60:f6:99:c9:c4:bd:5d:70:3c:33:25:06:bb:
bd:59:8f:5d:e2:77:ee:fe:80:c4:d9:03:72:70:b1:7c:23:5f:
9f:a8:29:aa:30:9b:a9:85:3c:fb:ed:63:30:a9:1d:63:51:72:
44:e1:85:4d:fd:6b:8d:40:b5:5a:c3:bd:d7:5f:92:0a:8c:1a:
8f:fc:dc:fe:9e:4f:68:43:63:b2:f0:0e:38:07:ec:52:d9:9f:
6b:c7:63:53:bb:70:4d:e5:54:05:90:3e:c9:52:35:3f:89:84:
66:6b:43:29:4e:4b:d5:02:26:21:65:0d:7d:fe:ca:19:cd:a1:
73:5d:bf:f0:ca:69:82:f9:75:d2:90:c7:63:8d:b1:5e:36:88:
99:1f:58:38:8a:5b:d8:39:63:3c:f2:c2:a1:5e:92:85:05:ea:
45:d6:6b:5d:d2:c7:3f:03:74:cf:06:f1:1a:f0:26:12:c4:5b:
2c:64:9b:be:20:fc:33:ec:35:44:1d:d2:5b:a1:85:50:3d:8e:
43:d1:a1:83:b2:b3:5c:32:3a:e5:e2:d9:74:68:3a:02:a4:ee:
2d:ad:ba:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaKKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA3MDgzNjE1WhcNMjUxMTE2MDgzNjE1WjAYMRYw
FAYDVQQDEw02OGU0ZDEwNC0yZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuc91vexzEIs7MiQkYQjNFCONEqPuqSRJon3EDTqCOSaYcxp84td10B/0
58m41FFJkpIfQNPxb5Ls2URJB1xjjsQMeE70sILYbmcjRafT+H0cRZ6nth5u1zKq
1z+thOzVVs1NkA9jXA6B1ATWnusYjEBz2d84whh3S/B1T9pM0CPTjM74RAvgYR8o
WQXUj8YquAUz7McyS+xlTSVVIngLgHa6KJDBecRorSMl82gTA/ejIZxdktiRz9/A
9fal6qWHesnWKBoINaym02Jzr2rQg/F27sdRfrtfbBHtr6w63+gy0tvMDVCTmoyw
STI+nYHZOVhVWresM/6fDb+IfLsxdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBj7
f4AnZOSgnXAMleuMI2GMBp3aMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkM0QTIwMkEzNTgxMUYwOTRGREVGRUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQAcXmhID+ldPcve1RORjBfD4oYeOBuxzN43RhntOwYu5t0oiie5Yqv+
A2D2mcnEvV1wPDMlBru9WY9d4nfu/oDE2QNycLF8I1+fqCmqMJuphTz77WMwqR1j
UXJE4YVN/WuNQLVaw73XX5IKjBqP/Nz+nk9oQ2Oy8A44B+xS2Z9rx2NTu3BN5VQF
kD7JUjU/iYRma0MpTkvVAiYhZQ19/soZzaFzXb/wymmC+XXSkMdjjbFeNoiZH1g4
ilvYOWM88sKhXpKFBepF1mtd0sc/A3TPBvEa8CYSxFssZJu+IPwz7DVEHdJboYVQ
PY5D0aGDsrNcMjrl4tl0aDoCpO4trbqa
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:06 2025 by rpki-client