Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027372E8B93811F0A2FB0D84DAE4EC9C.roa
File: 027372E8B93811F0A2FB0D84DAE4EC9C.roa (raw, json)
Hash identifier: ARe4gi7d7wByPs3jKHYRDlKxNzF8bGbsNEngwxYgQ0A=
Subject key identifier: 5C:28:FF:86:09:F0:FC:5B:63:49:DB:FB:E2:C3:88:8D:45:AA:4B:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A751
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027372E8B93811F0A2FB0D84DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 04:37:46 +0000
ROA not before: Tue 04 Nov 2025 04:37:41 +0000
ROA not after: Tue 09 Dec 2025 04:37:41 +0000
asID: 200373
IP address blocks: 154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108369 (0x1a751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 04:37:41 2025 GMT
Not After : Dec 9 04:37:41 2025 GMT
Subject: CN=6909831a-dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:3c:c6:8d:4b:39:57:6c:52:d1:4e:1e:30:
83:a0:3c:df:3c:af:36:a2:03:aa:74:7f:58:64:ee:
3c:59:05:cd:30:1c:02:7b:f4:7d:8d:72:11:47:cf:
e3:47:e3:c3:ec:18:5b:14:7e:1e:89:93:7a:f6:74:
a4:73:2c:e8:c6:ad:d0:b7:e5:0d:8b:3b:67:40:87:
28:be:bf:0f:b2:02:22:4f:ba:dd:d4:c7:87:04:cc:
4e:44:a3:d3:21:c0:08:0d:67:e7:a6:de:97:e9:9c:
2f:a4:14:0d:81:7d:a9:13:a0:bf:fd:3c:17:aa:77:
8a:f2:45:56:5d:b3:de:ef:f4:fd:59:91:3f:c8:c8:
53:d1:b1:a5:b7:56:3e:9d:93:46:d8:ec:67:03:7a:
26:99:48:31:c1:37:f8:ca:d7:57:12:ad:90:93:3d:
8d:b2:21:99:25:86:61:ae:4d:04:5d:65:5d:0d:e7:
5e:e6:4f:41:3f:26:97:6b:25:b6:17:93:c7:b7:78:
46:7e:17:ef:24:1f:a5:a7:3b:10:2e:1b:a9:6e:00:
55:19:24:b3:4b:b6:12:2c:37:8b:f9:3c:93:d9:7e:
64:ad:0b:31:11:01:86:98:de:1c:98:85:15:c3:24:
1c:8d:4b:65:41:dc:a5:49:0b:b4:53:d6:2d:74:6a:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:FF:86:09:F0:FC:5B:63:49:DB:FB:E2:C3:88:8D:45:AA:4B:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027372E8B93811F0A2FB0D84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:00:ea:1d:d8:48:b2:48:93:65:94:99:a9:d9:1f:e7:9e:55:
d7:b0:3d:98:e2:0b:ae:ee:b0:89:66:95:06:c2:e9:f3:f5:32:
d5:e5:b1:8f:e8:d6:5b:cf:91:55:a0:97:dc:50:32:c8:b2:88:
7c:cd:71:5c:b2:78:02:09:9d:e5:13:0c:a6:c0:c2:b7:d6:46:
a6:04:0c:dd:2a:c0:89:b6:be:bb:48:2a:b8:83:6b:d3:7b:b9:
45:72:c4:a3:85:17:e2:76:43:ff:03:82:3a:d9:0d:66:af:f7:
02:99:56:ff:1c:59:83:b7:2d:05:40:14:91:f4:b2:cf:bc:28:
d4:88:5f:5a:ce:67:56:b3:d7:98:65:84:4e:57:46:9f:1b:5d:
0c:c0:26:80:98:99:89:64:21:3f:91:4b:85:09:6b:98:b6:00:
7d:91:f1:79:37:f2:d6:83:10:c5:16:76:33:f3:d9:8e:29:3c:
b1:9d:d2:f6:92:ca:80:be:6d:4c:1a:60:07:0b:df:65:b2:c9:
fc:eb:ef:cb:05:71:1e:cb:ad:05:56:f5:d5:cd:f4:69:ab:55:
7d:d6:71:0b:61:84:d3:b9:b7:34:5f:05:28:2d:22:aa:a4:3a:
56:1b:51:03:28:43:aa:10:d7:c8:e8:f5:bd:93:ec:5e:42:be:
17:90:36:1b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAadRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTA0MDQzNzQxWhcNMjUxMjA5MDQzNzQxWjAYMRYw
FAYDVQQDEw02OTA5ODMxYS1kYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAysE8xo1LOVdsUtFOHjCDoDzfPK82ogOqdH9YZO48WQXNMBwCe/R9jXIR
R8/jR+PD7BhbFH4eiZN69nSkcyzoxq3Qt+UNiztnQIcovr8PsgIiT7rd1MeHBMxO
RKPTIcAIDWfnpt6X6ZwvpBQNgX2pE6C//TwXqneK8kVWXbPe7/T9WZE/yMhT0bGl
t1Y+nZNG2OxnA3ommUgxwTf4ytdXEq2Qkz2NsiGZJYZhrk0EXWVdDede5k9BPyaX
ayW2F5PHt3hGfhfvJB+lpzsQLhupbgBVGSSzS7YSLDeL+TyT2X5krQsxEQGGmN4c
mIUVwyQcjUtlQdylSQu0U9YtdGqrCwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFFwo
/4YJ8PxbY0nb++LDiI1FqkuTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMjczNzJFOEI5MzgxMUYwQTJGQjBEODREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmsGeAwQBmscOAwQBmsdE
MA0GCSqGSIb3DQEBCwUAA4IBAQDYAOod2EiySJNllJmp2R/nnlXXsD2Y4guu7rCJ
ZpUGwunz9TLV5bGP6NZbz5FVoJfcUDLIsoh8zXFcsngCCZ3lEwymwMK31kamBAzd
KsCJtr67SCq4g2vTe7lFcsSjhRfidkP/A4I62Q1mr/cCmVb/HFmDty0FQBSR9LLP
vCjUiF9azmdWs9eYZYROV0afG10MwCaAmJmJZCE/kUuFCWuYtgB9kfF5N/LWgxDF
FnYz89mOKTyxndL2ksqAvm1MGmAHC99lssn86+/LBXEey60FVvXVzfRpq1V91nEL
YYTTubc0XwUoLSKqpDpWG1EDKEOqENfI6PW9k+xeQr4XkDYb
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:09:02 2025 by rpki-client