Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E4964D8B2EE11F0A35402D7DAE4EC9C.roa
File: 0E4964D8B2EE11F0A35402D7DAE4EC9C.roa (raw, json)
Hash identifier: BuyzBPCx6nQpY8f5kz/wU4GbL2TLLft+tia4L5dLHmI=
Subject key identifier: 46:E4:CB:EC:E8:44:8D:21:20:10:BB:5E:D3:0A:39:0C:5F:0A:0A:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A4F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E4964D8B2EE11F0A35402D7DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 04:33:16 +0000
ROA not before: Mon 27 Oct 2025 04:33:12 +0000
ROA not after: Sun 30 Nov 2025 04:33:12 +0000
asID: 32043
IP address blocks: 154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107760 (0x1a4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 04:33:12 2025 GMT
Not After : Nov 30 04:33:12 2025 GMT
Subject: CN=68fef60c-da06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:8f:9b:f4:37:07:83:c6:7a:58:f5:09:a3:
0e:ea:cc:02:29:e6:95:f3:a4:7a:4d:ca:e0:99:89:
b8:e6:1a:4a:82:d2:4d:89:14:c0:e0:6a:29:a9:d6:
75:e3:81:3d:3d:3d:44:ef:b5:45:f3:9e:e4:2e:a0:
7f:f2:69:87:9c:2d:c0:18:b5:75:34:2e:e4:03:7d:
78:bf:55:14:99:8f:8a:d2:7d:a2:31:1c:d3:3d:a1:
d9:3c:44:72:45:ac:f8:0d:59:79:3b:25:5e:ba:93:
81:8a:25:5a:06:c0:2d:68:51:b0:80:ee:5f:ed:32:
45:c9:a7:b0:b4:b5:00:49:9f:73:d0:53:c6:fa:51:
e2:2f:11:41:99:64:d3:9e:49:bc:b5:64:82:51:3b:
f1:a9:f9:32:dd:7e:09:67:26:fb:92:28:bc:ab:85:
56:ad:d2:36:23:5f:c3:12:7a:81:ee:22:94:fd:a7:
b6:56:65:be:fe:92:d8:70:c4:fa:15:05:95:59:30:
99:f9:d0:81:52:26:8b:2b:78:c9:44:d0:71:00:f1:
3d:e4:c6:1f:ba:40:4c:4a:24:1d:c4:3e:63:2e:c0:
bc:5d:76:d9:30:77:aa:30:37:fa:a8:b1:1e:a1:17:
ca:73:cf:f9:52:9d:e5:f3:8d:1e:5b:fc:ea:9a:34:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:CB:EC:E8:44:8D:21:20:10:BB:5E:D3:0A:39:0C:5F:0A:0A:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E4964D8B2EE11F0A35402D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.8.0-154.195.13.255
Signature Algorithm: sha256WithRSAEncryption
d6:9b:d2:2d:02:dd:b6:8b:d4:0e:80:e4:1a:da:ec:fa:ca:73:
7a:a7:1b:b2:1a:11:47:50:3e:41:28:d3:1c:30:6d:e9:36:e2:
bd:8e:c0:80:27:99:4c:12:83:c5:4a:d5:90:c0:58:ad:10:b8:
47:84:6e:4d:ac:b3:1d:5c:61:63:c3:8f:1a:3a:25:16:e1:13:
eb:b6:1c:74:24:21:a8:27:45:13:e0:ce:8c:79:c1:bc:8f:80:
92:56:23:89:ab:f9:0c:b6:c1:17:d5:eb:ce:57:1d:66:96:3d:
4f:45:5a:2e:49:9a:f4:a0:0e:da:1f:92:2c:72:9b:97:c8:f1:
29:16:46:20:87:8a:dc:a9:cf:03:c8:ec:88:23:46:ac:1e:81:
80:42:4a:21:98:0b:31:8b:f4:82:b2:65:fd:e6:93:68:c4:64:
a3:8f:98:94:03:b8:69:8a:10:3d:90:d0:cc:5a:bd:87:61:42:
2d:6a:73:55:88:bd:40:9f:d2:41:20:b2:e3:63:47:f5:e4:7d:
42:83:61:6f:4c:2d:23:1d:aa:02:23:bc:04:57:af:2c:7f:45:
10:06:72:64:58:c0:20:d9:61:81:c8:e7:ed:f1:db:58:18:fd:
71:42:6a:78:27:31:e9:bb:5d:0e:a2:21:0a:dd:70:f8:8e:e7:
9d:a7:dd:9e
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaTwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MDQzMzEyWhcNMjUxMTMwMDQzMzEyWjAYMRYw
FAYDVQQDEw02OGZlZjYwYy1kYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ZSPm/Q3B4PGelj1CaMO6swCKeaV86R6TcrgmYm45hpKgtJNiRTA4Gop
qdZ144E9PT1E77VF857kLqB/8mmHnC3AGLV1NC7kA314v1UUmY+K0n2iMRzTPaHZ
PERyRaz4DVl5OyVeupOBiiVaBsAtaFGwgO5f7TJFyaewtLUASZ9z0FPG+lHiLxFB
mWTTnkm8tWSCUTvxqfky3X4JZyb7kii8q4VWrdI2I1/DEnqB7iKU/ae2VmW+/pLY
cMT6FQWVWTCZ+dCBUiaLK3jJRNBxAPE95MYfukBMSiQdxD5jLsC8XXbZMHeqMDf6
qLEeoRfKc8/5Up3l840eW/zqmjRH5QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEbk
y+zoRI0hIBC7XtMKOQxfCgqsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRTQ5NjREOEIyRUUxMUYwQTM1NDAyRDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOawwgDBAGawwwwDQYJ
KoZIhvcNAQELBQADggEBANab0i0C3baL1A6A5Bra7PrKc3qnG7IaEUdQPkEo0xww
bek24r2OwIAnmUwSg8VK1ZDAWK0QuEeEbk2ssx1cYWPDjxo6JRbhE+u2HHQkIagn
RRPgzox5wbyPgJJWI4mr+Qy2wRfV685XHWaWPU9FWi5JmvSgDtofkixym5fI8SkW
RiCHitypzwPI7IgjRqwegYBCSiGYCzGL9IKyZf3mk2jEZKOPmJQDuGmKED2Q0Mxa
vYdhQi1qc1WIvUCf0kEgsuNjR/XkfUKDYW9MLSMdqgIjvARXryx/RRAGcmRYwCDZ
YYHI5+3x21gY/XFCangnMem7XQ6iIQrdcPiO552n3Z4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:38 2025 by rpki-client