Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B96567648A3E11F0843EFD94DAE4EC9C.roa
File: B96567648A3E11F0843EFD94DAE4EC9C.roa (raw, json)
Hash identifier: yxusVDsx24ktMuxNqYJWvMli8/br/t0513UJRSIqCwM=
Subject key identifier: 4F:AF:21:26:B5:59:E2:8F:0E:2E:0B:2F:63:D7:92:F5:AA:54:00:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B96567648A3E11F0843EFD94DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 09:57:25 +0000
ROA not before: Fri 05 Sep 2025 09:57:20 +0000
ROA not after: Fri 05 Dec 2025 09:57:20 +0000
asID: 18229
IP address blocks: 154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105998 (0x19e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:57:20 2025 GMT
Not After : Dec 5 09:57:20 2025 GMT
Subject: CN=68bab405-db96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:d1:2e:91:ba:d3:39:e9:e8:03:7f:d8:d0:
f0:21:ad:36:11:ae:91:1e:46:fa:20:2e:87:8b:f8:
ac:63:a7:26:9f:1a:33:9c:1e:dd:72:78:43:05:48:
51:c0:3e:0a:0e:a5:c7:88:f5:e7:1d:f1:fb:d7:fd:
d4:ad:31:36:73:8c:09:15:d8:1e:7b:6f:5d:6c:0a:
99:bb:37:43:83:91:9b:53:8c:ae:60:e0:d1:d2:5a:
77:39:dd:f7:e8:0c:5e:b9:71:37:72:b1:02:f6:d2:
15:c8:a8:81:fe:df:b7:99:d7:d7:ec:10:d0:f6:65:
f3:dd:94:42:c5:95:5a:07:16:91:ca:87:ea:96:b0:
4e:05:5b:c2:c1:79:40:6d:a6:b6:79:ef:6c:b6:65:
ae:bf:93:97:af:5c:16:26:08:72:33:0a:b6:2f:bf:
4a:d2:de:80:02:9c:02:86:5f:c3:b2:9d:9c:73:82:
f7:0a:a2:3a:6d:68:79:53:c9:05:89:71:bc:42:76:
3a:bd:32:94:a7:a3:3f:ff:9c:99:e8:1d:f4:7a:98:
e3:6a:d6:c8:10:99:6a:c6:6a:a7:c2:51:27:20:f3:
7c:9a:f5:d3:a1:f4:1b:dc:62:4e:29:48:21:a7:96:
c8:cc:d1:89:cd:20:94:af:1b:11:b9:5d:35:bb:e9:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:21:26:B5:59:E2:8F:0E:2E:0B:2F:63:D7:92:F5:AA:54:00:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B96567648A3E11F0843EFD94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.155.0-154.210.164.255
Signature Algorithm: sha256WithRSAEncryption
ab:f1:14:44:fc:54:ca:2c:bd:6c:31:13:b1:cf:08:f1:01:ec:
77:1d:1a:11:60:bd:bc:fc:cb:bc:82:f1:93:78:45:3f:04:a8:
2a:51:c9:18:4f:fa:62:f8:92:3c:32:70:71:21:d0:e1:06:d8:
01:c1:e5:7e:4f:d3:33:1f:db:eb:3e:eb:db:42:39:99:a5:db:
c3:30:98:fb:e5:4a:44:48:50:86:d3:a2:4c:a8:69:1e:0b:77:
c7:a5:c4:95:cb:29:0e:67:13:ce:10:5f:0d:08:23:5d:3b:81:
86:bf:67:34:98:f0:82:bf:5e:0e:a8:91:0d:50:99:c5:5f:f1:
b6:b5:b6:43:f3:b3:0f:16:98:f6:a0:e4:45:d3:dc:c6:6d:7a:
e3:92:e8:e2:c1:77:3b:69:c9:a4:b6:72:e6:9b:ca:ae:70:27:
d1:3c:af:db:7f:ac:a0:f5:46:82:6b:d0:bf:26:bc:21:ff:7c:
a9:48:bc:b3:d1:4c:77:bc:5f:1b:e3:69:a7:17:5d:83:ea:6d:
1a:13:53:5f:ba:e0:fa:b9:1b:fe:49:f6:55:ac:43:83:05:08:
da:2b:d1:a1:1f:91:71:85:d9:a7:cd:09:eb:14:01:ce:aa:6e:
e2:8f:4b:7e:95:58:03:77:39:40:99:2a:53:19:0d:c5:fd:f4:
70:94:7b:21
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAZ4OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA1MDk1NzIwWhcNMjUxMjA1MDk1NzIwWjAYMRYw
FAYDVQQDEw02OGJhYjQwNS1kYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4IDRLpG60znp6AN/2NDwIa02Ea6RHkb6IC6Hi/isY6cmnxoznB7dcnhD
BUhRwD4KDqXHiPXnHfH71/3UrTE2c4wJFdgee29dbAqZuzdDg5GbU4yuYODR0lp3
Od336AxeuXE3crEC9tIVyKiB/t+3mdfX7BDQ9mXz3ZRCxZVaBxaRyofqlrBOBVvC
wXlAbaa2ee9stmWuv5OXr1wWJghyMwq2L79K0t6AApwChl/Dsp2cc4L3CqI6bWh5
U8kFiXG8QnY6vTKUp6M//5yZ6B30epjjatbIEJlqxmqnwlEnIPN8mvXTofQb3GJO
KUghp5bIzNGJzSCUrxsRuV01u+lAxQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFE+v
ISa1WeKPDi4LL2PXkvWqVADAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9COTY1Njc2NDhBM0UxMUYwODQzRUZEOTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa0psDBACa0qQwDQYJ
KoZIhvcNAQELBQADggEBAKvxFET8VMosvWwxE7HPCPEB7HcdGhFgvbz8y7yC8ZN4
RT8EqCpRyRhP+mL4kjwycHEh0OEG2AHB5X5P0zMf2+s+69tCOZml28MwmPvlSkRI
UIbTokyoaR4Ld8elxJXLKQ5nE84QXw0II107gYa/ZzSY8IK/Xg6okQ1QmcVf8ba1
tkPzsw8WmPag5EXT3MZteuOS6OLBdztpyaS2cuabyq5wJ9E8r9t/rKD1RoJr0L8m
vCH/fKlIvLPRTHe8XxvjaacXXYPqbRoTU1+64Pq5G/5J9lWsQ4MFCNor0aEfkXGF
2afNCesUAc6qbuKPS36VWAN3OUCZKlMZDcX99HCUeyE=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:42 2025 by rpki-client