Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/512B7886B4E211F0B7B7E9BCDAE4EC9C.roa
File: 512B7886B4E211F0B7B7E9BCDAE4EC9C.roa (raw, json)
Hash identifier: XWct43zLoZfDPASZzctjKUOg/qMHZrBPoSTo2m2X9AE=
Subject key identifier: AE:31:5A:96:F7:38:89:42:A8:1E:8A:2D:A3:91:93:C1:8C:77:55:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A672
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/512B7886B4E211F0B7B7E9BCDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 16:14:17 +0000
ROA not before: Wed 29 Oct 2025 16:14:12 +0000
ROA not after: Sat 06 Dec 2025 16:14:12 +0000
asID: 202656
IP address blocks: 154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108146 (0x1a672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 16:14:12 2025 GMT
Not After : Dec 6 16:14:12 2025 GMT
Subject: CN=69023d59-bd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:10:77:d9:d4:35:7b:49:b6:02:50:74:3b:
e2:1c:7c:c1:3a:3b:5b:85:bc:67:8e:f6:2d:e3:df:
c0:3a:7e:04:47:28:03:57:30:81:2d:f7:59:e4:da:
30:24:b1:35:62:87:16:19:f7:a0:af:a8:6a:62:aa:
3e:b0:a4:81:f7:4c:fb:ed:74:c3:5a:64:15:88:e4:
f9:b7:b7:90:c8:92:74:17:fc:a8:c8:5b:27:01:37:
06:88:d3:86:1a:34:2c:07:06:9f:59:2e:c7:c7:51:
39:a3:5f:88:b5:02:9e:49:0c:05:40:ee:b6:99:ca:
ae:3e:0a:7a:4b:d6:82:13:6b:b8:7e:16:09:3c:61:
9c:15:27:f2:bf:d7:e2:6a:81:a1:a6:29:1d:c7:aa:
1a:ab:c1:9a:ad:c0:29:50:a8:06:89:88:08:64:f1:
ff:6b:68:ee:de:4a:42:37:3c:d6:f5:a9:c0:c1:c6:
d9:4f:50:1b:64:1e:6f:d0:1b:7d:4a:a8:8b:d8:d0:
f1:a1:02:2c:05:2c:bb:16:05:58:95:a4:fc:95:49:
16:3e:e9:a9:ea:c6:26:1f:a6:6f:29:cc:08:d6:4a:
e1:c3:f7:f9:0c:b7:22:99:3b:1b:9a:47:d9:41:21:
da:57:f3:28:3c:08:5d:42:ae:3c:94:19:b1:b9:a0:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:5A:96:F7:38:89:42:A8:1E:8A:2D:A3:91:93:C1:8C:77:55:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/512B7886B4E211F0B7B7E9BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.228.0/23
154.219.231.0/24
154.219.233.0-154.219.236.255
154.219.249.0/24
154.221.52.0/24
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7e:5b:1f:d7:88:3f:2d:c7:73:b9:ed:6d:c1:e1:9e:78:4d:
99:fe:19:34:23:1a:97:08:32:0d:17:2d:73:92:0b:76:93:12:
22:55:02:42:ce:15:2b:65:07:3a:71:3f:be:63:48:e5:ed:e1:
21:de:d2:03:9e:35:da:27:47:25:e1:01:0d:d5:cf:f4:bc:f5:
15:7d:af:d9:ee:93:10:d6:fa:eb:a5:36:8a:7b:22:93:cc:28:
4d:a6:40:83:1f:8b:45:68:8a:04:71:0f:8d:3e:42:53:69:e6:
a0:4f:66:b4:ce:98:0c:f9:55:77:05:bd:d6:33:14:c1:8b:13:
b4:8b:ef:22:ad:1e:94:59:c6:dc:44:75:cf:26:6a:2e:bb:1e:
ef:73:d4:b3:56:de:bc:45:9c:e4:ab:b6:8e:a4:78:0b:c1:a3:
bb:c3:ef:12:64:b8:a8:10:5c:23:6f:49:97:a1:e4:4a:20:c1:
f3:04:89:02:39:53:c2:e0:de:3d:aa:53:d7:cc:08:49:50:8f:
47:2f:c6:23:a3:bc:57:7d:c1:20:e2:48:24:12:d4:8f:24:3a:
96:93:ac:c2:78:e4:c5:34:9a:c6:2d:10:3c:76:58:b0:5e:d0:
7d:34:b1:70:47:a7:b1:d1:0a:fb:3f:e1:5e:a4:98:11:55:c7:
eb:ee:15:05
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAaZyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTYxNDEyWhcNMjUxMjA2MTYxNDEyWjAYMRYw
FAYDVQQDEw02OTAyM2Q1OS1iZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqnEQd9nUNXtJtgJQdDviHHzBOjtbhbxnjvYt49/AOn4ERygDVzCBLfdZ
5NowJLE1YocWGfegr6hqYqo+sKSB90z77XTDWmQViOT5t7eQyJJ0F/yoyFsnATcG
iNOGGjQsBwafWS7Hx1E5o1+ItQKeSQwFQO62mcquPgp6S9aCE2u4fhYJPGGcFSfy
v9fiaoGhpikdx6oaq8GarcApUKgGiYgIZPH/a2ju3kpCNzzW9anAwcbZT1AbZB5v
0Bt9SqiL2NDxoQIsBSy7FgVYlaT8lUkWPump6sYmH6ZvKcwI1krhw/f5DLcimTsb
mkfZQSHaV/MoPAhdQq48lBmxuaD4uQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFK4x
Wpb3OIlCqB6KLaORk8GMd1WNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTJCNzg4NkI0RTIxMUYwQjdCN0U5QkNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBmtvkAwQAmtvnMAwDBACa
2+kDBACa2+wDBACa2/kDBACa3TQDBACa3sUwDQYJKoZIhvcNAQELBQADggEBACt+
Wx/XiD8tx3O57W3B4Z54TZn+GTQjGpcIMg0XLXOSC3aTEiJVAkLOFStlBzpxP75j
SOXt4SHe0gOeNdonRyXhAQ3Vz/S89RV9r9nukxDW+uulNop7IpPMKE2mQIMfi0Vo
igRxD40+QlNp5qBPZrTOmAz5VXcFvdYzFMGLE7SL7yKtHpRZxtxEdc8mai67Hu9z
1LNW3rxFnOSrto6keAvBo7vD7xJkuKgQXCNvSZeh5EogwfMEiQI5U8Lg3j2qU9fM
CElQj0cvxiOjvFd9wSDiSCQS1I8kOpaTrMJ45MU0msYtEDx2WLBe0H00sXBHp7HR
Cvs/4V6kmBFVx+vuFQU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:50 2025 by rpki-client