Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A143D8B40611F099EA35DFDAE4EC9C.roa
File: A4A143D8B40611F099EA35DFDAE4EC9C.roa (raw, json)
Hash identifier: rQ9QumtwRDBE3kEXSo/JSoWGB9CF57IiMX1FbcYXdBY=
Subject key identifier: 35:EF:4C:5F:07:E8:B7:C6:36:7D:86:A5:4E:F9:78:4D:BF:77:F3:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A143D8B40611F099EA35DFDAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:01:48 +0000
ROA not before: Tue 28 Oct 2025 14:01:40 +0000
ROA not after: Mon 15 Dec 2025 14:01:40 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.135.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108027 (0x1a5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 14:01:40 2025 GMT
Not After : Dec 15 14:01:40 2025 GMT
Subject: CN=6900cccc-780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:91:55:c3:7c:4f:86:5d:9d:86:f7:f9:10:
63:55:2e:41:67:1d:c7:84:d0:bc:4e:1e:01:bd:f9:
20:06:13:c5:a7:49:2d:32:08:11:6f:66:03:a7:3d:
ec:2b:73:b1:9b:17:fd:fa:9f:33:7e:62:9f:59:10:
14:58:9b:31:92:ed:95:dc:1c:46:33:1c:56:3b:19:
20:64:80:d6:93:33:50:e4:bb:23:27:b6:44:91:eb:
5a:94:e6:13:bc:be:b7:e7:29:4c:59:3c:8d:ff:0a:
68:b3:1f:4a:d9:0c:c0:ac:14:03:8a:43:de:c6:2e:
b3:0d:a1:ca:97:bc:3f:22:7d:d1:8a:82:d8:ae:5f:
fa:76:0f:fd:72:d5:0c:35:8e:36:a5:10:cb:0e:73:
ad:3f:9d:a1:1c:cd:15:9d:fe:2f:de:b3:a3:cc:29:
9a:5a:09:0f:bf:5a:41:db:63:41:b8:9b:30:8a:7f:
c0:10:40:aa:d9:f6:96:bf:12:60:fb:d4:a2:7b:d3:
e1:30:8b:34:72:4b:ab:63:99:05:7d:51:35:d4:e2:
70:d0:1c:56:07:66:cd:6c:4d:8e:8b:be:94:ec:d1:
b3:9c:db:ca:ba:d6:f0:12:a9:c0:a5:c2:60:13:1f:
a2:22:90:a4:ff:88:8d:4b:7f:b6:e6:18:40:22:2d:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:4C:5F:07:E8:B7:C6:36:7D:86:A5:4E:F9:78:4D:BF:77:F3:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A143D8B40611F099EA35DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0-154.203.135.255
154.203.138.0-154.203.141.255
154.203.146.0/23
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0b:62:b3:74:3e:d4:22:95:d8:43:01:29:8a:36:24:ca:95:
ec:c3:4b:b5:7f:78:d7:87:51:90:d0:a0:1f:de:b5:8a:ac:c6:
09:2a:20:dd:fb:53:61:3a:7a:6f:c0:b6:6a:e2:9d:3d:10:d5:
6c:23:8d:04:5e:bc:3b:85:9e:22:d9:b7:2f:d6:77:67:dd:76:
dc:4d:73:b2:1b:fe:73:87:2d:4c:59:4c:66:36:d1:c8:dc:d7:
68:a1:07:0b:54:d5:68:ee:84:4c:10:e2:d0:24:20:e5:c1:34:
51:c6:9f:42:04:7a:1f:25:02:da:c1:2f:a8:cc:c3:b7:6b:da:
d7:76:9a:5d:72:1f:25:8c:76:4f:94:21:0e:91:4d:9c:a9:d8:
bb:24:73:75:50:d1:78:2c:92:7c:9e:9a:0c:ba:7e:0f:e0:34:
c5:0e:d6:81:84:b8:8b:f8:ef:43:58:3d:52:2e:1b:11:fc:58:
3b:21:4d:88:70:67:15:ce:0f:73:06:3b:63:eb:bd:a7:d6:80:
12:21:6d:14:08:ac:c1:5a:cd:5a:44:76:c8:af:76:84:67:b7:
67:75:d0:78:85:99:f6:d4:fe:c5:9b:75:61:99:51:fa:31:bd:
50:8f:71:4d:15:78:61:ab:a2:33:9b:51:8c:96:6a:5f:4e:83:
26:7e:18:0f
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAaX7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI4MTQwMTQwWhcNMjUxMjE1MTQwMTQwWjAYMRYw
FAYDVQQDEw02OTAwY2NjYy03ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxWmRVcN8T4ZdnYb3+RBjVS5BZx3HhNC8Th4BvfkgBhPFp0ktMggRb2YD
pz3sK3Oxmxf9+p8zfmKfWRAUWJsxku2V3BxGMxxWOxkgZIDWkzNQ5LsjJ7ZEketa
lOYTvL635ylMWTyN/wposx9K2QzArBQDikPexi6zDaHKl7w/In3RioLYrl/6dg/9
ctUMNY42pRDLDnOtP52hHM0Vnf4v3rOjzCmaWgkPv1pB22NBuJswin/AEECq2faW
vxJg+9Sie9PhMIs0ckurY5kFfVE11OJw0BxWB2bNbE2Oi76U7NGznNvKutbwEqnA
pcJgEx+iIpCk/4iNS3+25hhAIi2ffQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFDXv
TF8H6LfGNn2GpU75eE2/d/OwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNEExNDNEOEI0MDYxMUYwOTlFQTM1REZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACay4UDBAOay4AwDAME
AZrLigMEAZrLjAMEAZrLkgMEAJrLqTANBgkqhkiG9w0BAQsFAAOCAQEASwtis3Q+
1CKV2EMBKYo2JMqV7MNLtX9414dRkNCgH961iqzGCSog3ftTYTp6b8C2auKdPRDV
bCONBF68O4WeItm3L9Z3Z9123E1zshv+c4ctTFlMZjbRyNzXaKEHC1TVaO6ETBDi
0CQg5cE0UcafQgR6HyUC2sEvqMzDt2va13aaXXIfJYx2T5QhDpFNnKnYuyRzdVDR
eCySfJ6aDLp+D+A0xQ7WgYS4i/jvQ1g9Ui4bEfxYOyFNiHBnFc4PcwY7Y+u9p9aA
EiFtFAiswVrNWkR2yK92hGe3Z3XQeIWZ9tT+xZt1YZlR+jG9UI9xTRV4YauiM5tR
jJZqX06DJn4YDw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:51 2025 by rpki-client