Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D24E522AE5411F0B1F720D0DAE4EC9C.roa
File: 9D24E522AE5411F0B1F720D0DAE4EC9C.roa (raw, json)
Hash identifier: K1tWgSV4GbI2DP2NLPKlxEuSgSFkVmVOscc7eBQg99w=
Subject key identifier: 38:59:EA:BD:1F:60:31:99:8E:ED:07:CE:54:EF:D0:83:57:7E:EE:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A46E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D24E522AE5411F0B1F720D0DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 08:04:49 +0000
ROA not before: Tue 21 Oct 2025 08:04:44 +0000
ROA not after: Sun 25 Jan 2026 08:04:44 +0000
asID: 135097
IP address blocks: 154.212.168.0/21 maxlen: 24
154.212.176.0/20 maxlen: 24
154.212.192.0/18 maxlen: 24
154.213.80.0/20 maxlen: 24
154.216.4.0/22 maxlen: 24
154.216.8.0/21 maxlen: 24
154.220.4.0/22 maxlen: 24
154.220.8.0/21 maxlen: 24
154.220.16.0/20 maxlen: 24
154.220.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107630 (0x1a46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 08:04:44 2025 GMT
Not After : Jan 25 08:04:44 2026 GMT
Subject: CN=68f73ea1-d9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ba:eb:12:db:62:86:42:c4:d3:b9:a4:d9:03:
90:c4:98:51:84:a7:6b:34:7a:b5:8e:f5:9a:fe:b2:
0c:f4:1f:28:47:1a:6e:64:f4:95:ae:18:55:f7:c7:
67:c3:57:57:83:ce:e0:21:cb:74:23:f4:f7:de:99:
3a:5e:01:03:f7:3b:ef:64:66:3e:66:90:e8:4a:3a:
6b:ba:d4:d1:1c:1b:ce:0e:b6:f3:d5:03:c8:f6:45:
ba:18:10:bd:58:f9:6f:c3:46:7e:ec:c5:5e:07:bf:
ac:1c:96:f5:7b:7e:67:58:82:7c:69:54:f5:85:66:
04:6b:c7:bf:2b:cb:e5:63:e0:77:47:4d:f8:a1:6d:
76:80:78:f6:50:38:eb:2e:96:f7:d0:66:67:64:16:
d8:dc:03:16:f3:11:b3:11:6f:dd:b6:d1:75:e0:c9:
d5:80:97:76:34:43:d8:78:b6:f4:d3:40:20:af:99:
65:ee:2b:1c:f5:0a:ae:a1:14:6c:6d:05:ea:9b:5b:
83:6d:f1:0f:e2:7c:0a:0b:fa:b4:13:f4:f9:b2:1a:
65:9f:ce:32:58:a1:4f:66:39:48:ac:f1:0f:44:16:
45:70:4e:be:c1:d2:02:31:e7:fd:ea:13:54:24:4b:
59:d5:89:81:82:8c:63:d0:8b:31:ef:17:ca:46:06:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:EA:BD:1F:60:31:99:8E:ED:07:CE:54:EF:D0:83:57:7E:EE:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D24E522AE5411F0B1F720D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.168.0-154.212.255.255
154.213.80.0/20
154.216.4.0-154.216.15.255
154.220.4.0-154.220.31.255
154.220.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:9f:03:27:48:95:ed:ca:e8:02:97:f8:1d:f5:83:28:3a:5d:
56:17:9c:d1:c1:dd:d2:0e:ae:90:b0:07:cc:95:c0:ae:c7:45:
08:1a:00:69:8f:35:e2:3f:9a:cc:81:6a:57:af:56:3c:6d:fe:
97:d2:80:d4:ec:12:30:2a:cc:dc:8f:72:39:ad:ec:c2:bc:59:
b3:81:6e:48:26:68:6d:7b:d7:19:92:df:42:90:8f:80:8a:9c:
4b:e4:c9:6b:93:86:17:57:d3:89:cc:8b:f0:79:87:ea:3b:e3:
15:9e:64:f8:81:21:04:56:a9:5e:8a:61:fb:e3:1b:f7:31:41:
79:37:f5:8b:e1:36:3b:2e:4d:d4:a7:e5:a3:db:97:ba:1a:94:
d1:d6:54:f2:69:14:3f:03:a8:69:d7:ac:f9:12:8f:18:7d:66:
cc:52:d3:7f:2d:2b:31:47:83:af:bc:9f:52:bc:97:ee:0d:a9:
e6:01:54:a6:6c:3a:ba:b6:2b:28:1b:19:0b:fe:ef:54:a6:7f:
9f:10:ac:d0:ad:78:bb:5f:75:1f:df:72:a2:b0:e7:b0:63:43:
5c:e2:eb:df:61:41:4d:3b:bc:54:4c:2c:54:c5:ec:19:3b:17:
39:c1:e6:6a:a9:84:77:77:78:14:c9:1c:98:2e:f5:3c:c2:88:
08:94:47:0f
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAaRuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIxMDgwNDQ0WhcNMjYwMTI1MDgwNDQ0WjAYMRYw
FAYDVQQDEw02OGY3M2VhMS1kOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+LrrEttihkLE07mk2QOQxJhRhKdrNHq1jvWa/rIM9B8oRxpuZPSVrhhV
98dnw1dXg87gIct0I/T33pk6XgED9zvvZGY+ZpDoSjprutTRHBvODrbz1QPI9kW6
GBC9WPlvw0Z+7MVeB7+sHJb1e35nWIJ8aVT1hWYEa8e/K8vlY+B3R034oW12gHj2
UDjrLpb30GZnZBbY3AMW8xGzEW/dttF14MnVgJd2NEPYeLb000Agr5ll7isc9Qqu
oRRsbQXqm1uDbfEP4nwKC/q0E/T5shpln84yWKFPZjlIrPEPRBZFcE6+wdICMef9
6hNUJEtZ1YmBgoxj0Isx7xfKRgbOGwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFDhZ
6r0fYDGZju0HzlTv0INXfu4PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RDI0RTUyMkFFNTQxMUYwQjFGNzIwRDBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1MAsDBAOa1KgDAwCa1AMEBJrV
UDAMAwQCmtgEAwQEmtgAMAwDBAKa3AQDBAWa3AADBAaa3EAwDQYJKoZIhvcNAQEL
BQADggEBAC6fAydIle3K6AKX+B31gyg6XVYXnNHB3dIOrpCwB8yVwK7HRQgaAGmP
NeI/msyBalevVjxt/pfSgNTsEjAqzNyPcjmt7MK8WbOBbkgmaG171xmS30KQj4CK
nEvkyWuThhdX04nMi/B5h+o74xWeZPiBIQRWqV6KYfvjG/cxQXk39YvhNjsuTdSn
5aPbl7oalNHWVPJpFD8DqGnXrPkSjxh9ZsxS038tKzFHg6+8n1K8l+4NqeYBVKZs
Orq2KygbGQv+71Smf58QrNCteLtfdR/fcqKw57BjQ1zi699hQU07vFRMLFTF7Bk7
FznB5mqphHd3eBTJHJgu9TzCiAiURw8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:59:41 2025 by rpki-client