Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBEE99BC8A2611F0B997CD7BDAE4EC9C.roa
File: DBEE99BC8A2611F0B997CD7BDAE4EC9C.roa (raw, json)
Hash identifier: ru1nRlwG3CMppXkyOPd3UTmdu4lJ4rWCcUItzUqj3IE=
Subject key identifier: FD:74:DD:AA:A9:C2:16:C1:24:98:5C:D1:97:43:7C:5C:C5:14:FF:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019DE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBEE99BC8A2611F0B997CD7BDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 07:06:36 +0000
ROA not before: Fri 05 Sep 2025 07:06:30 +0000
ROA not after: Wed 05 Nov 2025 07:06:30 +0000
asID: 141372
IP address blocks: 154.208.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105958 (0x19de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 07:06:30 2025 GMT
Not After : Nov 5 07:06:30 2025 GMT
Subject: CN=68ba8bfb-a73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:69:dd:c9:c8:8d:0e:bc:9c:49:23:62:8f:
ed:a4:6e:b5:44:cb:1a:4a:cb:32:05:18:8f:f9:be:
9d:98:0b:67:41:76:1c:94:e8:62:c4:ed:d6:c9:3e:
61:88:6b:38:18:9d:3e:55:ac:0b:71:8e:d7:d8:2f:
de:51:fa:df:ec:8f:8b:80:9f:47:b0:03:7c:7c:43:
9c:b2:26:f3:e3:cc:14:af:39:ec:43:57:5e:57:f6:
a4:96:ef:b0:1a:7f:ca:94:82:c1:15:3b:b4:0c:0c:
c8:ec:06:81:15:38:2a:72:05:ca:53:08:e3:96:b8:
f8:35:c8:5f:ed:79:c1:a9:b1:98:81:26:50:51:8e:
69:5d:b2:79:45:67:70:07:59:6f:3b:30:de:f7:47:
7e:67:1a:4d:b3:f9:4e:01:96:2d:3e:fa:39:17:54:
1b:62:85:09:da:ea:ee:9a:af:26:26:25:85:1e:6e:
91:a4:ef:a4:22:75:a2:e6:ca:76:68:b7:87:7e:b7:
c1:ca:9f:c6:56:69:fa:45:cc:93:4d:a9:fb:bc:66:
7e:92:e9:fd:c4:a1:ff:97:f9:14:ec:76:6b:69:23:
8d:0a:a0:36:f3:21:8a:06:35:e2:4c:09:14:fa:64:
d6:a9:31:ef:6f:b8:32:fa:e4:e1:5e:84:90:65:ca:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:DD:AA:A9:C2:16:C1:24:98:5C:D1:97:43:7C:5C:C5:14:FF:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBEE99BC8A2611F0B997CD7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f7:92:78:bb:c6:41:18:80:da:e6:ff:53:a3:37:05:7c:e6:
4b:2d:a2:79:30:af:c8:34:5c:37:41:00:a6:42:74:b6:53:e3:
59:9a:f8:03:2b:04:d0:79:e5:97:40:97:c0:5d:2a:a0:58:68:
ce:fc:64:07:6d:46:8d:eb:ac:c4:70:60:5c:a1:c2:1d:ec:d2:
e3:d2:77:b9:19:55:9d:2c:dc:c0:90:17:c5:39:c3:66:37:7a:
ee:36:31:e7:fd:29:0a:9d:8d:e0:2e:c4:d0:3f:b3:0b:35:2a:
09:26:ae:b2:45:cb:c8:99:aa:48:77:e2:c8:5a:79:fe:2c:58:
c0:81:b8:f1:e6:f0:6f:8b:73:ef:ba:a2:27:88:41:5d:cd:12:
e4:5b:a3:19:7d:a3:95:f6:61:bd:8d:46:b2:1f:d3:ac:b8:7d:
26:e4:42:c3:6e:f1:ad:85:8c:e5:95:47:3c:b8:bb:ec:83:c8:
89:b0:db:71:7a:e9:87:7a:ff:19:7b:f4:c6:6c:49:65:ba:cd:
e5:ec:41:fb:fe:4e:06:d4:a9:a5:87:5e:5b:ee:ed:da:77:89:
ae:1b:2e:be:b5:aa:ca:48:c1:02:12:21:4a:12:06:fa:03:2d:
39:fa:2e:7f:03:15:05:6f:b0:57:1d:18:96:76:35:2d:61:9c:
5f:25:cc:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ3mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA1MDcwNjMwWhcNMjUxMTA1MDcwNjMwWjAYMRYw
FAYDVQQDEw02OGJhOGJmYi1hNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzxZp3cnIjQ68nEkjYo/tpG61RMsaSssyBRiP+b6dmAtnQXYclOhixO3W
yT5hiGs4GJ0+VawLcY7X2C/eUfrf7I+LgJ9HsAN8fEOcsibz48wUrznsQ1deV/ak
lu+wGn/KlILBFTu0DAzI7AaBFTgqcgXKUwjjlrj4Nchf7XnBqbGYgSZQUY5pXbJ5
RWdwB1lvOzDe90d+ZxpNs/lOAZYtPvo5F1QbYoUJ2urumq8mJiWFHm6RpO+kInWi
5sp2aLeHfrfByp/GVmn6RcyTTan7vGZ+kun9xKH/l/kU7HZraSONCqA28yGKBjXi
TAkU+mTWqTHvb7gy+uThXoSQZco+dwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP10
3aqpwhbBJJhc0ZdDfFzFFP99MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQkVFOTlCQzhBMjYxMUYwQjk5N0NEN0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtA4MA0GCSqGSIb3DQEB
CwUAA4IBAQC195J4u8ZBGIDa5v9TozcFfOZLLaJ5MK/INFw3QQCmQnS2U+NZmvgD
KwTQeeWXQJfAXSqgWGjO/GQHbUaN66zEcGBcocId7NLj0ne5GVWdLNzAkBfFOcNm
N3ruNjHn/SkKnY3gLsTQP7MLNSoJJq6yRcvImapId+LIWnn+LFjAgbjx5vBvi3Pv
uqIniEFdzRLkW6MZfaOV9mG9jUayH9OsuH0m5ELDbvGthYzllUc8uLvsg8iJsNtx
eumHev8Ze/TGbEllus3l7EH7/k4G1Kmlh15b7u3ad4muGy6+tarKSMECEiFKEgb6
Ay05+i5/AxUFb7BXHRiWdjUtYZxfJcys
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:50 2025 by rpki-client