Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B38FD01E993D11F0AAB79CDFDAE4EC9C.roa
File: B38FD01E993D11F0AAB79CDFDAE4EC9C.roa (raw, json)
Hash identifier: FsDdTEHhftw3qw0Y9SLmjmbAmvbj2NH9LIKfdJ9jc2g=
Subject key identifier: 75:3A:DF:92:10:C1:79:7A:91:3E:1A:97:80:F7:F4:82:31:68:91:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A060
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B38FD01E993D11F0AAB79CDFDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 11:57:54 +0000
ROA not before: Wed 24 Sep 2025 11:57:47 +0000
ROA not after: Tue 28 Oct 2025 11:57:47 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106592 (0x1a060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 11:57:47 2025 GMT
Not After : Oct 28 11:57:47 2025 GMT
Subject: CN=68d3dcc1-ce9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:67:ae:ca:14:7e:f2:da:28:c9:73:f9:1f:
13:94:32:84:5e:f9:e3:2b:38:75:14:e8:55:9a:fe:
d2:a8:a2:a4:16:ec:47:7a:b2:75:9e:53:ab:b7:fc:
98:26:54:64:df:48:0f:2c:f5:94:47:95:21:06:50:
89:45:b9:66:b4:73:36:5e:a5:de:89:8a:f3:f4:90:
b3:15:7b:0d:8f:18:53:96:63:13:4e:b1:73:05:a2:
18:99:60:10:72:59:7e:9b:24:b8:f1:c8:4b:f9:78:
11:4a:96:e2:dd:b4:20:a0:93:fe:9e:d3:8a:84:dd:
ef:6b:a9:57:f4:37:c8:23:e2:6b:7b:a6:1a:e1:02:
43:24:74:4f:f4:45:a0:89:f9:4e:bf:f9:a9:ee:79:
e7:81:73:82:62:97:04:d2:08:4f:a9:ac:87:84:b0:
81:49:50:81:c7:49:57:b9:6f:2d:9b:0a:0d:a0:90:
e4:dc:12:06:23:c7:1e:0c:5b:35:17:89:31:ec:0e:
64:9c:23:f5:5f:ec:fe:54:d3:ed:09:a4:31:0f:f0:
a3:00:17:ee:4d:ba:19:d0:60:30:54:17:58:ab:15:
38:31:df:39:41:2c:7b:d4:97:ea:c8:05:4e:fa:3c:
65:25:25:3b:01:46:bf:f2:06:02:54:33:be:41:95:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:DF:92:10:C1:79:7A:91:3E:1A:97:80:F7:F4:82:31:68:91:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B38FD01E993D11F0AAB79CDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:a8:96:18:65:aa:25:4d:af:5b:04:67:87:b0:d0:04:b2:2b:
e8:34:48:a5:18:45:7b:c0:6c:0e:aa:9a:15:43:43:21:9e:2a:
0e:c2:11:74:cc:0e:85:e8:79:cc:10:ae:b2:36:08:48:5e:9c:
92:82:0f:26:89:e8:71:62:ee:65:90:0f:3a:39:1c:c3:fa:99:
97:d4:ae:33:8e:35:3e:99:fb:dc:32:81:38:88:81:02:80:66:
96:7b:e3:8b:68:b1:1d:1d:25:2c:d8:e5:2a:7b:39:67:2b:a3:
a5:66:04:24:98:35:ae:52:af:90:2e:2b:6c:6d:83:68:01:2c:
5e:40:2d:81:f5:d6:5c:47:23:33:90:9a:58:7b:88:d9:65:ed:
35:ea:28:f6:d8:c5:a7:08:f3:c5:b5:38:cd:97:8e:96:a7:49:
f5:ff:dd:17:ce:51:d5:55:65:33:95:14:a6:4c:11:f9:05:0c:
31:ac:a5:18:68:0b:b4:81:f8:42:6c:f3:a3:32:d4:24:00:66:
c5:9f:4a:9f:7a:6e:d2:34:59:7a:64:57:e5:0f:07:d4:cd:f8:
5d:76:8f:49:ec:ea:21:a1:d2:ae:b2:fc:e6:9d:10:f0:46:71:
51:33:ae:cd:ab:62:85:d3:15:64:2c:60:6e:a1:3c:98:91:25:
da:2d:f2:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaBgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MTE1NzQ3WhcNMjUxMDI4MTE1NzQ3WjAYMRYw
FAYDVQQDEw02OGQzZGNjMS1jZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1rtnrsoUfvLaKMlz+R8TlDKEXvnjKzh1FOhVmv7SqKKkFuxHerJ1nlOr
t/yYJlRk30gPLPWUR5UhBlCJRblmtHM2XqXeiYrz9JCzFXsNjxhTlmMTTrFzBaIY
mWAQcll+myS48chL+XgRSpbi3bQgoJP+ntOKhN3va6lX9DfII+Jre6Ya4QJDJHRP
9EWgiflOv/mp7nnngXOCYpcE0ghPqayHhLCBSVCBx0lXuW8tmwoNoJDk3BIGI8ce
DFs1F4kx7A5knCP1X+z+VNPtCaQxD/CjABfuTboZ0GAwVBdYqxU4Md85QSx71Jfq
yAVO+jxlJSU7AUa/8gYCVDO+QZWJnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHU6
35IQwXl6kT4al4D39IIxaJENMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzhGRDAxRTk5M0QxMUYwQUFCNzlDREZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEyMA0GCSqGSIb3DQEB
CwUAA4IBAQDGqJYYZaolTa9bBGeHsNAEsivoNEilGEV7wGwOqpoVQ0MhnioOwhF0
zA6F6HnMEK6yNghIXpySgg8miehxYu5lkA86ORzD+pmX1K4zjjU+mfvcMoE4iIEC
gGaWe+OLaLEdHSUs2OUqezlnK6OlZgQkmDWuUq+QLitsbYNoASxeQC2B9dZcRyMz
kJpYe4jZZe016ij22MWnCPPFtTjNl46Wp0n1/90XzlHVVWUzlRSmTBH5BQwxrKUY
aAu0gfhCbPOjMtQkAGbFn0qfem7SNFl6ZFflDwfUzfhddo9J7OohodKusvzmnRDw
RnFRM67Nq2KF0xVkLGBuoTyYkSXaLfLR
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:50 2025 by rpki-client