Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E45C4F0EA5B511F0873518BEDAE4EC9C.roa
File: E45C4F0EA5B511F0873518BEDAE4EC9C.roa (raw, json)
Hash identifier: HUjAwe4HCZ/zyMRntrhIdZvwrwNfsNtUkYEWQiQsxyk=
Subject key identifier: 7F:F8:28:C8:7F:2E:C0:58:54:D7:DA:83:74:4B:0D:29:F5:BF:9B:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A339
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E45C4F0EA5B511F0873518BEDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 08:48:29 +0000
ROA not before: Fri 10 Oct 2025 08:48:24 +0000
ROA not after: Wed 14 Oct 2026 08:48:24 +0000
asID: 133847
IP address blocks: 154.83.112.0/24 maxlen: 24
154.83.113.0/24 maxlen: 24
154.83.114.0/24 maxlen: 24
154.83.115.0/24 maxlen: 24
154.83.116.0/24 maxlen: 24
154.83.117.0/24 maxlen: 24
154.83.118.0/24 maxlen: 24
154.83.119.0/24 maxlen: 24
154.83.120.0/24 maxlen: 24
154.83.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107321 (0x1a339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 08:48:24 2025 GMT
Not After : Oct 14 08:48:24 2026 GMT
Subject: CN=68e8c85d-dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:ef:32:cc:32:90:4f:f2:0f:b7:6e:ba:15:
f0:3a:0b:2e:7c:8c:51:bb:09:d3:45:57:85:da:82:
c6:4f:a0:21:5e:16:58:83:4f:ef:87:a7:63:7a:3a:
30:57:fe:3c:74:16:44:b9:e0:7a:54:97:cb:f6:9e:
99:5a:15:da:84:3e:ff:e0:1f:d2:28:fc:5d:e8:61:
79:a6:d3:76:52:b6:94:6a:af:e6:e7:48:47:f8:b4:
00:74:b0:dd:5b:2b:8c:e5:5c:f2:9b:17:1f:0a:d8:
85:ce:52:e2:d3:e8:3a:16:06:ee:2a:91:6b:c6:c3:
c7:33:e3:fa:d4:4c:4d:ce:d8:09:f0:d5:ff:b6:96:
bf:7a:9b:01:90:76:bc:1a:e0:c8:1f:8a:96:c9:f3:
e7:27:87:96:f9:d3:de:fa:cb:dd:54:54:8f:6f:ba:
7f:87:a3:31:ad:52:f6:63:11:cf:3b:a8:13:3f:d3:
61:0f:3b:2e:df:1e:1f:90:14:48:ed:44:74:0f:b5:
5c:7b:40:aa:ff:13:d1:f8:8e:53:f4:1d:3b:8e:41:
97:83:a7:b9:a8:c0:cd:72:33:c0:e8:0c:5b:ca:e3:
cb:57:27:5d:b6:dd:33:71:39:ad:23:ad:fe:1a:04:
6f:a1:e5:83:4f:4a:ec:e6:5f:68:54:dc:b9:01:06:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:28:C8:7F:2E:C0:58:54:D7:DA:83:74:4B:0D:29:F5:BF:9B:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E45C4F0EA5B511F0873518BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.112.0-154.83.121.255
Signature Algorithm: sha256WithRSAEncryption
b8:7f:3a:bb:e9:e2:00:97:93:ab:80:81:6d:ed:1c:4a:ac:47:
2f:69:93:b4:a6:a6:58:a4:c7:9a:53:3f:90:d0:e8:a7:d5:e6:
80:1b:47:70:5a:00:63:1a:e4:c9:67:85:d5:f3:eb:1c:9d:7f:
e6:bf:b5:6e:81:ad:b3:31:ca:05:4c:6b:9c:73:a8:99:c4:8d:
f0:1c:60:cd:3c:b1:c8:8c:00:85:f9:1d:b4:d5:26:1b:b5:4c:
1b:dc:cc:2c:d2:9f:52:b2:9b:01:6f:8e:40:a0:2f:d4:ed:6d:
4f:e1:32:c1:5c:e7:15:fe:04:5e:f8:32:5e:65:9c:da:08:d5:
84:cb:fa:f0:f7:e3:7e:59:40:dc:22:4f:75:bb:9c:49:81:80:
5d:4f:c1:a9:3a:d9:0c:54:1e:9c:0a:e1:0e:de:42:55:a2:ee:
2a:c3:cd:3e:ec:16:8a:47:5c:d4:59:f8:a2:6e:5b:e8:a7:8e:
3f:d8:c0:ee:0a:35:88:4a:dc:51:ba:7b:17:d8:15:9a:ca:1d:
1a:95:98:a1:b1:74:0a:7f:d5:75:57:69:68:2b:e0:26:66:af:
7f:e8:f2:0e:1f:1f:c9:0d:86:d9:35:1b:78:6e:39:6c:e6:a5:
d8:72:6c:92:8b:9f:fe:85:79:58:f9:1a:66:76:a2:48:13:47:
f9:42:9c:00
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaM5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDEwMDg0ODI0WhcNMjYxMDE0MDg0ODI0WjAYMRYw
FAYDVQQDEw02OGU4Yzg1ZC1kZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtpTvMswykE/yD7duuhXwOgsufIxRuwnTRVeF2oLGT6AhXhZYg0/vh6dj
ejowV/48dBZEueB6VJfL9p6ZWhXahD7/4B/SKPxd6GF5ptN2UraUaq/m50hH+LQA
dLDdWyuM5VzymxcfCtiFzlLi0+g6FgbuKpFrxsPHM+P61ExNztgJ8NX/tpa/epsB
kHa8GuDIH4qWyfPnJ4eW+dPe+svdVFSPb7p/h6MxrVL2YxHPO6gTP9NhDzsu3x4f
kBRI7UR0D7Vce0Cq/xPR+I5T9B07jkGXg6e5qMDNcjPA6AxbyuPLVyddtt0zcTmt
I63+GgRvoeWDT0rs5l9oVNy5AQbvYQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFH/4
KMh/LsBYVNfag3RLDSn1v5uSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNDVDNEYwRUE1QjUxMUYwODczNTE4QkVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaU3ADBAGaU3gwDQYJ
KoZIhvcNAQELBQADggEBALh/Orvp4gCXk6uAgW3tHEqsRy9pk7Smplikx5pTP5DQ
6KfV5oAbR3BaAGMa5MlnhdXz6xydf+a/tW6BrbMxygVMa5xzqJnEjfAcYM08sciM
AIX5HbTVJhu1TBvczCzSn1KymwFvjkCgL9TtbU/hMsFc5xX+BF74Ml5lnNoI1YTL
+vD3435ZQNwiT3W7nEmBgF1Pwak62QxUHpwK4Q7eQlWi7irDzT7sFopHXNRZ+KJu
W+injj/YwO4KNYhK3FG6exfYFZrKHRqVmKGxdAp/1XVXaWgr4CZmr3/o8g4fH8kN
htk1G3huOWzmpdhybJKLn/6FeVj5GmZ2okgTR/lCnAA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:49 2025 by rpki-client