Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A201B8AE5F11F09BAC1D97DAE4EC9C.roa
File: 71A201B8AE5F11F09BAC1D97DAE4EC9C.roa (raw, json)
Hash identifier: bwr1dtcEv/kzs0zI/zdz285Hp1aYAZsd+fjo9BYFqC4=
Subject key identifier: 19:51:A2:35:24:53:0A:D3:19:4F:0A:FA:37:54:87:02:BB:E6:49:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A47C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A201B8AE5F11F09BAC1D97DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 09:22:20 +0000
ROA not before: Tue 21 Oct 2025 09:22:10 +0000
ROA not after: Fri 28 Nov 2025 09:22:10 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107644 (0x1a47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:22:10 2025 GMT
Not After : Nov 28 09:22:10 2025 GMT
Subject: CN=68f750cc-ac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:42:c2:2a:1b:b7:b7:21:d9:5c:73:b8:64:
83:f5:b2:c1:08:8b:0a:01:ff:da:9b:79:e9:99:a2:
94:2e:b4:f4:0d:97:8d:58:fb:2c:1a:4d:0c:77:60:
71:b1:1c:e7:0c:41:56:11:ad:1f:08:99:29:b3:8d:
e8:0d:00:56:e8:4f:3a:c2:b7:d5:9f:48:34:d6:f3:
c6:d1:b2:09:4d:4c:5f:bb:af:0c:4f:41:31:44:8a:
d6:e3:10:db:46:a2:c9:64:91:ff:be:92:75:4a:a6:
ea:4a:21:e3:23:de:15:c3:e3:63:72:21:59:1b:fb:
f4:ea:33:5a:3e:82:7e:00:de:c2:b0:1d:99:88:52:
00:9a:a6:96:f3:77:f2:3b:da:cc:ba:02:2f:7d:b1:
e7:69:db:ff:65:4f:34:15:e1:fc:af:6c:4b:4c:98:
f7:4f:72:d6:d9:57:7a:37:24:e0:88:1d:b9:7e:af:
78:42:f4:7c:9a:93:e7:b3:87:59:32:4d:5e:b1:11:
f1:3b:9c:ee:2a:4d:7e:08:86:50:b5:22:8f:8c:ba:
27:67:d5:ed:b6:d2:99:38:b4:95:f5:67:d5:1b:64:
1b:17:c6:34:9a:eb:9d:91:76:56:8e:4f:df:87:51:
77:82:80:2a:5b:7f:dd:d7:18:53:27:8e:c3:4c:8b:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:51:A2:35:24:53:0A:D3:19:4F:0A:FA:37:54:87:02:BB:E6:49:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A201B8AE5F11F09BAC1D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7e:c7:d5:69:c7:a4:38:42:fc:73:ec:80:06:1b:be:96:22:
ae:40:28:ed:57:ae:07:c6:5c:ce:35:cb:7c:74:b5:3b:29:83:
df:ef:ee:69:49:ad:f5:ba:12:e2:d7:f5:e6:a9:f5:f7:79:12:
7d:35:75:da:5c:ef:ad:46:bf:e7:61:31:13:57:e2:25:e0:ef:
a7:d6:51:e8:2c:a7:94:10:74:ae:99:04:d9:61:d5:ed:57:e5:
4e:30:1f:97:6c:33:69:1d:2f:62:a3:a0:0a:c0:3b:a7:71:31:
0c:4c:e7:41:e0:63:5b:dc:4a:16:34:9d:95:ff:cc:0a:38:1e:
71:5a:e1:61:39:08:9b:ce:da:71:e0:c5:15:46:0b:3b:2c:51:
6a:a7:6a:20:0d:c0:89:a4:d2:f2:1c:1d:d2:15:72:55:de:36:
a8:10:ed:c7:fa:f1:9d:06:58:a9:ca:f6:f2:f1:6b:15:8b:44:
2d:b4:5d:0b:f6:ca:df:91:cc:2a:08:bd:c8:ac:86:be:0b:89:
e1:fc:42:6e:59:b4:64:52:91:7b:42:5d:f3:e8:bb:1e:5c:4d:
6e:7f:68:7b:17:28:97:cd:4e:33:74:9d:27:a4:15:df:f8:0e:
e1:79:67:1d:b5:02:3c:87:00:49:b1:35:15:ca:50:b8:82:61:
44:d2:a8:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaR8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIxMDkyMjEwWhcNMjUxMTI4MDkyMjEwWjAYMRYw
FAYDVQQDEw02OGY3NTBjYy1hYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLxCwiobt7ch2VxzuGSD9bLBCIsKAf/am3npmaKULrT0DZeNWPssGk0M
d2BxsRznDEFWEa0fCJkps43oDQBW6E86wrfVn0g01vPG0bIJTUxfu68MT0ExRIrW
4xDbRqLJZJH/vpJ1SqbqSiHjI94Vw+NjciFZG/v06jNaPoJ+AN7CsB2ZiFIAmqaW
83fyO9rMugIvfbHnadv/ZU80FeH8r2xLTJj3T3LW2Vd6NyTgiB25fq94QvR8mpPn
s4dZMk1esRHxO5zuKk1+CIZQtSKPjLonZ9XtttKZOLSV9WfVG2QbF8Y0muudkXZW
jk/fh1F3goAqW3/d1xhTJ47DTItEIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBlR
ojUkUwrTGU8K+jdUhwK75kmZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MUEyMDFCOEFFNUYxMUYwOUJBQzFEOTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEyMA0GCSqGSIb3DQEB
CwUAA4IBAQAzfsfVacekOEL8c+yABhu+liKuQCjtV64HxlzONct8dLU7KYPf7+5p
Sa31uhLi1/XmqfX3eRJ9NXXaXO+tRr/nYTETV+Il4O+n1lHoLKeUEHSumQTZYdXt
V+VOMB+XbDNpHS9io6AKwDuncTEMTOdB4GNb3EoWNJ2V/8wKOB5xWuFhOQibztpx
4MUVRgs7LFFqp2ogDcCJpNLyHB3SFXJV3jaoEO3H+vGdBlipyvby8WsVi0QttF0L
9srfkcwqCL3IrIa+C4nh/EJuWbRkUpF7Ql3z6LseXE1uf2h7FyiXzU4zdJ0npBXf
+A7heWcdtQI8hwBJsTUVylC4gmFE0qiq
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:06 2025 by rpki-client