Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8058E082B4D611F0BC3DC8F1DAE4EC9C.roa
File: 8058E082B4D611F0BC3DC8F1DAE4EC9C.roa (raw, json)
Hash identifier: UMVGZipnI3Hxc8d1gW64WOzElvRyhI/MQS9HMtVRLdA=
Subject key identifier: 2B:9C:10:23:A0:5F:B6:68:C8:B4:5B:43:5E:FD:E5:5F:D0:09:13:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A654
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8058E082B4D611F0BC3DC8F1DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 14:49:42 +0000
ROA not before: Wed 29 Oct 2025 14:49:37 +0000
ROA not after: Sat 06 Dec 2025 14:49:37 +0000
asID: 44559
IP address blocks: 154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108116 (0x1a654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 14:49:37 2025 GMT
Not After : Dec 6 14:49:37 2025 GMT
Subject: CN=69022986-c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:5b:7c:ca:73:fa:d8:45:c8:29:92:c4:91:
6d:cc:2a:df:e1:98:a1:00:13:04:0d:54:f7:0b:20:
44:91:f8:3b:32:13:2b:88:f3:4c:26:09:18:df:df:
90:3d:9f:83:52:87:c2:02:ea:27:f1:9d:38:d6:0f:
f4:d1:d2:39:c5:a4:fc:91:0f:d3:43:24:1d:64:85:
e1:88:8a:4a:db:bd:94:9f:ef:af:d2:67:a4:3d:72:
80:5f:18:7a:88:74:62:fd:4f:1b:8e:71:e8:56:98:
90:e6:78:e5:2f:58:f2:bf:55:97:8d:68:b9:09:02:
1c:5f:cd:c5:24:f5:e4:54:ec:75:8c:df:fe:61:5a:
42:73:0c:dd:17:d3:0c:53:14:2f:b6:7b:dc:7d:2c:
ad:c5:d3:f2:af:27:5e:d8:1f:2c:8b:e1:73:5c:4e:
b3:62:70:5e:14:b2:15:42:9d:11:d4:b8:ef:71:e9:
4e:5f:9d:df:d6:d1:40:73:73:56:f8:86:1b:af:b7:
36:e7:60:b0:9b:c6:4c:e8:39:b7:35:2c:51:f3:21:
11:f9:28:cf:81:15:bc:96:67:5b:a3:ac:28:1d:bc:
38:cb:b6:02:0a:d3:c3:2c:0c:e0:46:f4:07:f8:34:
1b:52:4c:f8:95:10:96:c1:f4:c9:20:15:b0:a1:2a:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:10:23:A0:5F:B6:68:C8:B4:5B:43:5E:FD:E5:5F:D0:09:13:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8058E082B4D611F0BC3DC8F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.197.0-154.209.205.255
154.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
05:79:9b:32:4d:1b:45:d6:33:17:af:67:4a:25:fd:57:0c:05:
21:35:b7:c1:48:f4:76:09:ee:10:87:dc:03:6a:97:96:0e:52:
f7:b9:c4:3f:bb:95:ac:b5:f6:d8:1e:b4:fe:b0:9a:ec:23:b8:
46:41:fb:7b:be:ae:81:db:76:ed:4e:5a:68:96:26:5f:75:21:
fb:11:21:40:a8:ee:2e:3d:7b:9e:22:3c:1a:64:ea:bb:ed:aa:
d3:2e:d5:8e:53:de:b7:81:d7:b0:1f:95:ad:8c:fa:54:3a:04:
48:76:c2:e6:a6:8f:b1:13:bd:1e:0d:84:bd:0e:15:9b:53:3a:
e9:c7:3d:9b:9c:80:b3:96:70:9e:0f:9f:e9:95:37:2a:be:15:
35:1f:b6:49:fc:d6:10:68:a9:8f:43:96:7a:9c:a1:9c:49:54:
d6:87:40:5d:86:a1:58:6e:74:d3:a5:6d:8b:34:46:e0:21:0f:
75:59:01:47:e7:a8:63:39:88:d3:97:2e:b9:1c:ee:79:1d:6d:
fa:6d:f3:58:dc:33:d8:cc:61:bc:a8:4b:70:8e:49:92:e9:0e:
93:54:60:26:a2:74:fc:5a:6d:4f:1f:bb:17:8d:78:86:a3:3c:
c0:60:76:08:a3:7f:2a:64:db:2c:86:25:a8:8e:f5:0e:f2:c2:
02:d0:ea:cd
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAaZUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTQ0OTM3WhcNMjUxMjA2MTQ0OTM3WjAYMRYw
FAYDVQQDEw02OTAyMjk4Ni1jMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzB1bfMpz+thFyCmSxJFtzCrf4ZihABMEDVT3CyBEkfg7MhMriPNMJgkY
39+QPZ+DUofCAuon8Z041g/00dI5xaT8kQ/TQyQdZIXhiIpK272Un++v0mekPXKA
Xxh6iHRi/U8bjnHoVpiQ5njlL1jyv1WXjWi5CQIcX83FJPXkVOx1jN/+YVpCcwzd
F9MMUxQvtnvcfSytxdPyryde2B8si+FzXE6zYnBeFLIVQp0R1LjvcelOX53f1tFA
c3NW+IYbr7c252Cwm8ZM6Dm3NSxR8yER+SjPgRW8lmdbo6woHbw4y7YCCtPDLAzg
RvQH+DQbUkz4lRCWwfTJIBWwoSqxaQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCuc
ECOgX7ZoyLRbQ1795V/QCRN+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MDU4RTA4MkI0RDYxMUYwQkMzREM4RjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACa0cUDBAGa0cwDBACa
0c8wDQYJKoZIhvcNAQELBQADggEBAAV5mzJNG0XWMxevZ0ol/VcMBSE1t8FI9HYJ
7hCH3ANql5YOUve5xD+7lay19tgetP6wmuwjuEZB+3u+roHbdu1OWmiWJl91IfsR
IUCo7i49e54iPBpk6rvtqtMu1Y5T3reB17Afla2M+lQ6BEh2wuamj7ETvR4NhL0O
FZtTOunHPZucgLOWcJ4Pn+mVNyq+FTUftkn81hBoqY9DlnqcoZxJVNaHQF2GoVhu
dNOlbYs0RuAhD3VZAUfnqGM5iNOXLrkc7nkdbfpt81jcM9jMYbyoS3COSZLpDpNU
YCaidPxabU8fuxeNeIajPMBgdgijfypk2yyGJaiO9Q7ywgLQ6s0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:50:28 2025 by rpki-client