Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C999128CA911F0A505CCBEDAE4EC9C.roa
File: F8C999128CA911F0A505CCBEDAE4EC9C.roa (raw, json)
Hash identifier: WhFO45zVpugkfk2xggf63aHBYBf7RHw8HCV5rN0zgmw=
Subject key identifier: D9:4C:FA:4F:EB:A5:D1:8F:33:43:2A:84:BD:FF:78:44:AF:FB:A6:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019ECD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C999128CA911F0A505CCBEDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:50:10 +0000
ROA not before: Mon 08 Sep 2025 11:50:06 +0000
ROA not after: Mon 27 Oct 2025 11:50:06 +0000
asID: 40779
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106189 (0x19ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:50:06 2025 GMT
Not After : Oct 27 11:50:06 2025 GMT
Subject: CN=68bec2f2-59a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:6c:18:cc:bc:43:a0:ce:10:2b:db:43:f0:
72:e0:4f:f5:e1:b5:22:84:19:74:67:11:21:ef:36:
de:c4:98:b2:fd:18:e9:68:81:11:68:99:29:c7:32:
ef:8d:07:ef:05:47:fd:f1:a2:f9:a2:d7:99:11:7f:
34:94:e0:64:c7:d8:5f:dd:de:9f:0c:55:78:14:e3:
ee:25:da:45:cd:a6:96:78:7b:d7:1e:71:c8:ef:25:
e1:5a:34:de:60:bc:b2:b5:c8:62:5d:44:be:89:a9:
47:52:96:00:9b:ab:6b:02:03:e8:5f:7e:b5:82:4c:
88:de:3a:98:a8:6e:36:9e:ea:0d:1f:e8:5b:0f:53:
95:5e:20:87:4e:61:10:4d:04:f7:c1:c9:46:41:1a:
c0:1f:65:48:ca:70:de:c4:79:54:58:ba:10:6f:f5:
a2:7a:d3:f8:6e:a0:0c:75:8e:d4:09:d9:06:46:01:
3e:c3:8e:9c:02:24:22:78:31:0a:d9:c3:6c:65:f7:
34:ca:74:cf:41:4d:76:47:84:c2:c3:0e:e2:7c:fa:
43:d8:3c:7d:20:2a:b8:04:93:77:f1:e3:9d:df:36:
cc:ed:f9:29:9a:0c:3b:b6:26:91:ba:72:fa:b2:62:
be:d5:86:eb:20:d3:0f:40:48:33:c1:c9:94:91:dc:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:FA:4F:EB:A5:D1:8F:33:43:2A:84:BD:FF:78:44:AF:FB:A6:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C999128CA911F0A505CCBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:41:bb:c6:34:3f:1a:c3:e3:be:f0:cc:a0:2a:94:66:a0:cf:
a3:53:b8:78:95:f4:c9:07:8b:ef:43:94:16:c7:9c:e5:33:9f:
ef:a1:80:77:a7:ce:37:59:f2:60:9c:b3:2a:0c:64:95:f2:12:
c0:53:20:6c:ca:dc:cb:79:2b:80:d7:13:2a:69:fa:42:b8:91:
4d:ba:5b:df:92:b0:2e:50:8d:90:78:f7:a8:3d:47:fb:04:6c:
e9:ee:c6:81:ec:f9:ca:8e:75:a8:b2:91:bc:64:0d:10:30:4d:
bc:a2:0c:d0:df:f7:eb:1a:45:8b:f7:48:ae:0a:d7:c5:18:cf:
f5:24:33:66:83:80:0a:6e:20:6f:af:0f:32:36:bd:26:cd:6d:
0a:6f:72:8e:c9:37:63:94:4a:9f:b4:0a:b1:67:ab:ae:6e:e4:
b6:15:28:28:94:2d:82:5d:05:bb:6e:52:d1:fc:27:27:ea:c6:
8f:8b:78:f5:4e:2e:73:aa:b0:59:d7:3c:6b:34:06:da:2d:c3:
26:56:38:b4:fb:3f:ea:6b:fe:c3:d0:8c:c4:2b:f2:71:98:e4:
60:14:1f:e3:a7:6c:fa:98:d9:3d:70:d6:a0:51:1c:6f:51:f4:
26:91:93:73:04:7e:a4:3f:1e:83:44:06:3a:4b:81:df:0d:1e:
97:f2:88:93
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZ7NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA4MTE1MDA2WhcNMjUxMDI3MTE1MDA2WjAYMRYw
FAYDVQQDEw02OGJlYzJmMi01OWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAza9sGMy8Q6DOECvbQ/By4E/14bUihBl0ZxEh7zbexJiy/RjpaIERaJkp
xzLvjQfvBUf98aL5oteZEX80lOBkx9hf3d6fDFV4FOPuJdpFzaaWeHvXHnHI7yXh
WjTeYLyytchiXUS+ialHUpYAm6trAgPoX361gkyI3jqYqG42nuoNH+hbD1OVXiCH
TmEQTQT3wclGQRrAH2VIynDexHlUWLoQb/WietP4bqAMdY7UCdkGRgE+w46cAiQi
eDEK2cNsZfc0ynTPQU12R4TCww7ifPpD2Dx9ICq4BJN38eOd3zbM7fkpmgw7tiaR
unL6smK+1YbrINMPQEgzwcmUkdxoBQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNlM
+k/rpdGPM0MqhL3/eESv+6YuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOEM5OTkxMjhDQTkxMUYwQTUwNUNDQkVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmttgAwQEmt4QMA0GCSqG
SIb3DQEBCwUAA4IBAQChQbvGND8aw+O+8MygKpRmoM+jU7h4lfTJB4vvQ5QWx5zl
M5/voYB3p843WfJgnLMqDGSV8hLAUyBsytzLeSuA1xMqafpCuJFNulvfkrAuUI2Q
ePeoPUf7BGzp7saB7PnKjnWospG8ZA0QME28ogzQ3/frGkWL90iuCtfFGM/1JDNm
g4AKbiBvrw8yNr0mzW0Kb3KOyTdjlEqftAqxZ6uubuS2FSgolC2CXQW7blLR/Ccn
6saPi3j1Ti5zqrBZ1zxrNAbaLcMmVji0+z/qa/7D0IzEK/JxmORgFB/jp2z6mNk9
cNagURxvUfQmkZNzBH6kPx6DRAY6S4HfDR6X8oiT
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:50:54 2025 by rpki-client