Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B24FCEAE6511F094EA46BFDAE4EC9C.roa
File: D3B24FCEAE6511F094EA46BFDAE4EC9C.roa (raw, json)
Hash identifier: knM3VBSyhZ0qq9GUEI3XSujYqVYdVwOMHDzpYGG47XQ=
Subject key identifier: BC:A8:30:DF:54:DD:89:92:84:6E:98:2C:2A:5E:A1:FA:CA:F4:E3:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A488
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B24FCEAE6511F094EA46BFDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 10:08:02 +0000
ROA not before: Tue 21 Oct 2025 10:07:50 +0000
ROA not after: Sun 30 Nov 2025 10:07:50 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107656 (0x1a488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 10:07:50 2025 GMT
Not After : Nov 30 10:07:50 2025 GMT
Subject: CN=68f75b82-6d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:69:c5:c2:23:36:f8:40:ed:94:27:51:e3:
16:19:bb:6b:73:93:77:ec:91:78:24:dc:4b:d5:75:
e6:89:66:6b:69:24:7e:ff:63:ab:91:1a:3c:a1:5a:
3c:ac:7a:86:1e:55:25:4e:7b:e2:1f:06:30:63:e6:
71:1a:40:a1:95:c0:2a:e1:cc:5b:3b:22:1b:54:41:
2a:d7:6c:a9:d4:0a:2c:3f:11:f7:b1:9c:e0:b7:8c:
19:e6:a0:32:fe:15:f6:3c:38:75:73:26:ea:b0:46:
a4:0d:d8:85:ca:48:ae:42:fa:7a:11:e5:5e:a1:aa:
97:07:3c:f1:91:3b:f1:ff:17:26:c9:a7:7c:f0:cb:
d9:ad:a2:f3:d7:32:4c:48:ea:cb:f9:0b:3e:98:10:
f7:ae:fe:f0:83:30:66:3a:51:97:02:86:de:6f:6d:
24:19:09:d3:85:c3:81:a3:64:62:78:ac:38:0c:3e:
51:67:63:43:6f:db:49:7c:c7:8d:e4:a6:11:71:57:
3f:fd:99:da:d8:05:e4:76:57:ab:cc:43:f7:96:50:
e3:b9:58:95:b0:1a:c3:3d:53:b2:95:c1:f9:ef:b4:
1c:ee:9f:95:65:08:43:f7:97:c4:82:3c:0b:80:e0:
dc:72:6c:e5:4c:6a:1d:87:a6:49:cc:26:0c:df:cb:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:30:DF:54:DD:89:92:84:6E:98:2C:2A:5E:A1:FA:CA:F4:E3:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B24FCEAE6511F094EA46BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
21:0c:c4:63:46:ab:6c:a5:6d:4e:f3:30:d4:b8:e1:41:ab:24:
45:9b:07:f6:82:2b:80:5f:6d:4e:5e:ec:07:76:2b:3c:95:d8:
d5:29:8f:b3:a5:37:71:e3:0a:ef:1f:91:e9:f4:19:16:1d:19:
47:a5:c8:bd:a8:f3:d7:9c:c3:58:5a:72:ca:c9:c8:d0:82:67:
d0:76:ef:32:19:1d:d2:2c:9f:cf:a0:a3:9b:ed:d8:8a:5a:a1:
c5:fc:1e:2c:b6:ff:8f:12:f7:c0:43:33:18:ed:57:8b:88:82:
be:b7:30:d0:49:8f:a3:a6:16:39:3e:b2:d1:57:c3:af:77:4e:
17:d6:9d:30:2d:60:6c:ec:62:7f:66:1f:25:bc:21:44:20:9a:
f6:00:7d:ce:e2:2d:06:86:9a:25:8c:3b:57:ea:b0:c0:35:6f:
5f:f7:36:c7:f9:53:66:a3:44:38:0e:23:91:36:50:34:0b:bc:
b8:fd:57:dc:07:4e:8d:4e:c5:31:b0:a7:2a:2f:fa:ae:3c:fb:
ea:3f:2b:49:e7:39:d9:b7:9a:f5:1e:ac:c6:15:9a:fb:46:29:
fb:e3:f2:2e:e1:64:2d:88:4e:e4:5e:e2:3a:5c:54:d4:2f:19:
92:93:c6:ee:8a:93:50:87:87:d3:ac:a3:f6:17:30:62:0a:33:
b6:2e:45:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaSIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIxMTAwNzUwWhcNMjUxMTMwMTAwNzUwWjAYMRYw
FAYDVQQDEw02OGY3NWI4Mi02ZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmORpxcIjNvhA7ZQnUeMWGbtrc5N37JF4JNxL1XXmiWZraSR+/2OrkRo8
oVo8rHqGHlUlTnviHwYwY+ZxGkChlcAq4cxbOyIbVEEq12yp1AosPxH3sZzgt4wZ
5qAy/hX2PDh1cybqsEakDdiFykiuQvp6EeVeoaqXBzzxkTvx/xcmyad88MvZraLz
1zJMSOrL+Qs+mBD3rv7wgzBmOlGXAobeb20kGQnThcOBo2RieKw4DD5RZ2NDb9tJ
fMeN5KYRcVc//Zna2AXkdlerzEP3llDjuViVsBrDPVOylcH577Qc7p+VZQhD95fE
gjwLgODccmzlTGodh6ZJzCYM38sSXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLyo
MN9U3YmShG6YLCpeofrK9ON6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EM0IyNEZDRUFFNjUxMUYwOTRFQTQ2QkZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhDMRjRqtspW1O8zDUuOFBqyRFmwf2giuAX21OXuwHdis8ldjVKY+z
pTdx4wrvH5Hp9BkWHRlHpci9qPPXnMNYWnLKycjQgmfQdu8yGR3SLJ/PoKOb7diK
WqHF/B4stv+PEvfAQzMY7VeLiIK+tzDQSY+jphY5PrLRV8Ovd04X1p0wLWBs7GJ/
Zh8lvCFEIJr2AH3O4i0GhpoljDtX6rDANW9f9zbH+VNmo0Q4DiORNlA0C7y4/Vfc
B06NTsUxsKcqL/quPPvqPytJ5znZt5r1HqzGFZr7Rin74/Iu4WQtiE7kXuI6XFTU
LxmSk8buipNQh4fTrKP2FzBiCjO2LkVj
-----END CERTIFICATE-----
Generated at Fri Oct 24 12:11:02 2025 by rpki-client