Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F076FE6692CC11F0902AE8B8DAE4EC9C.roa
File: F076FE6692CC11F0902AE8B8DAE4EC9C.roa (raw, json)
Hash identifier: dorjNdMc7WicUcURIOpKtgmdfzZ6LstL3VAXzgnXsCI=
Subject key identifier: 01:30:F8:90:CD:6D:E7:BE:39:63:09:C4:BF:04:61:4F:B0:60:2C:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019FCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F076FE6692CC11F0902AE8B8DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 07:15:36 +0000
ROA not before: Tue 16 Sep 2025 07:15:31 +0000
ROA not after: Mon 20 Oct 2025 07:15:31 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106447 (0x19fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:15:31 2025 GMT
Not After : Oct 20 07:15:31 2025 GMT
Subject: CN=68c90e98-93dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:c5:ca:b2:02:97:3a:80:0e:a5:14:6a:4a:
ac:7a:fc:b1:79:1f:30:1f:75:82:04:ec:0b:ad:8f:
2b:26:76:fb:a3:38:91:a6:68:7c:a1:ca:af:d8:08:
37:b0:ef:4a:c1:2d:55:2a:b0:d3:d9:ff:e3:a4:d2:
cc:9f:39:0f:46:17:3c:10:f7:4a:da:9c:de:ba:85:
78:e2:9a:4e:03:62:04:bd:1a:ce:51:85:a6:7f:e1:
ff:9a:ea:eb:1c:3f:8d:f0:64:f4:da:a8:8d:57:9a:
6a:e3:60:90:01:5b:99:f0:56:b5:90:89:fb:d9:ee:
4e:40:a3:af:8c:12:67:6c:ca:d0:33:f3:38:a6:53:
ba:09:b5:12:85:63:77:0f:d7:32:0d:00:e7:d5:01:
c7:e3:c5:82:4e:1f:26:54:4b:6d:7f:2e:12:40:74:
a8:3f:e0:20:d2:98:83:10:85:4f:c3:57:c8:e1:d8:
f5:96:dc:63:da:e5:4c:e1:4a:c5:5e:65:9e:61:54:
44:08:98:1a:73:2d:fc:c1:71:84:e5:20:e2:c1:2e:
d4:7a:cd:73:34:39:16:f4:34:1d:cf:df:63:70:10:
ce:b1:18:5a:35:7e:9f:1c:81:13:99:ce:79:0e:9a:
9b:06:58:a9:0c:81:21:c7:85:17:47:c4:ed:67:18:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:30:F8:90:CD:6D:E7:BE:39:63:09:C4:BF:04:61:4F:B0:60:2C:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F076FE6692CC11F0902AE8B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b1:86:f8:a6:b1:09:b0:1c:68:9d:59:6d:9a:d6:e1:69:6c:
00:3d:5f:5d:ab:ef:2f:1d:fe:92:34:47:7d:a9:13:5c:f8:26:
46:7b:64:d9:7e:03:ed:2d:bf:79:37:7c:fa:e6:04:86:31:43:
22:01:55:7a:25:eb:a1:c3:46:ca:ad:71:d7:ae:48:62:c6:fd:
5a:4e:04:33:49:bd:80:1f:70:5a:cb:05:d0:08:a7:c9:d4:f9:
aa:fc:88:90:2b:8e:6e:cc:43:fc:b1:78:b7:29:c3:85:13:50:
34:a8:64:45:cd:cb:b3:de:42:88:83:bb:e0:d7:db:55:ef:6c:
d9:00:5e:1f:9e:da:a6:85:c8:d0:58:b4:48:95:1a:40:7c:b9:
b6:83:e7:fc:f8:69:a8:b9:fe:d2:f1:b6:dc:24:14:16:6c:4c:
35:9f:45:cb:d6:b8:6f:fd:a8:c7:a3:2c:da:ca:f2:70:cb:76:
fd:64:7c:be:d6:97:92:98:d8:e3:c5:2e:b8:db:ba:f2:8b:28:
ec:29:4a:a4:7b:f6:10:27:fe:5a:f5:ba:98:54:67:f3:ce:9b:
33:05:2e:c4:57:82:97:35:66:3a:e9:47:3f:a3:e1:c3:93:e2:
6a:37:d3:bd:2b:96:b3:b3:dc:46:2b:6a:21:2e:8a:83:c6:3f:
f2:68:db:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ/PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTE2MDcxNTMxWhcNMjUxMDIwMDcxNTMxWjAYMRYw
FAYDVQQDEw02OGM5MGU5OC05M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2B3FyrIClzqADqUUakqsevyxeR8wH3WCBOwLrY8rJnb7oziRpmh8ocqv
2Ag3sO9KwS1VKrDT2f/jpNLMnzkPRhc8EPdK2pzeuoV44ppOA2IEvRrOUYWmf+H/
murrHD+N8GT02qiNV5pq42CQAVuZ8Fa1kIn72e5OQKOvjBJnbMrQM/M4plO6CbUS
hWN3D9cyDQDn1QHH48WCTh8mVEttfy4SQHSoP+Ag0piDEIVPw1fI4dj1ltxj2uVM
4UrFXmWeYVRECJgacy38wXGE5SDiwS7Ues1zNDkW9DQdz99jcBDOsRhaNX6fHIET
mc55DpqbBlipDIEhx4UXR8TtZxgI6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAEw
+JDNbee+OWMJxL8EYU+wYCxLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMDc2RkU2NjkyQ0MxMUYwOTAyQUU4QjhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsjsMA0GCSqGSIb3DQEB
CwUAA4IBAQCRsYb4prEJsBxonVltmtbhaWwAPV9dq+8vHf6SNEd9qRNc+CZGe2TZ
fgPtLb95N3z65gSGMUMiAVV6Jeuhw0bKrXHXrkhixv1aTgQzSb2AH3BaywXQCKfJ
1Pmq/IiQK45uzEP8sXi3KcOFE1A0qGRFzcuz3kKIg7vg19tV72zZAF4fntqmhcjQ
WLRIlRpAfLm2g+f8+Gmouf7S8bbcJBQWbEw1n0XL1rhv/ajHoyzayvJwy3b9ZHy+
1peSmNjjxS6427ryiyjsKUqke/YQJ/5a9bqYVGfzzpszBS7EV4KXNWY66Uc/o+HD
k+JqN9O9K5azs9xGK2ohLoqDxj/yaNtB
-----END CERTIFICATE-----
Generated at Fri Sep 19 11:51:51 2025 by rpki-client