Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D92F40B37811F0B14E8BD6DAE4EC9C.roa
File: B1D92F40B37811F0B14E8BD6DAE4EC9C.roa (raw, json)
Hash identifier: iK9A/QxAUQJQEK36oM9YIaSI5PqBvrKXJEzM3xlOgYs=
Subject key identifier: 00:AA:21:E4:59:CA:C4:D8:F7:59:68:6E:DF:AD:10:8B:C0:BF:BC:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A58C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D92F40B37811F0B14E8BD6DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 21:05:41 +0000
ROA not before: Mon 27 Oct 2025 21:05:34 +0000
ROA not after: Sun 01 Feb 2026 21:05:34 +0000
asID: 47890
IP address blocks: 154.214.196.0/24 maxlen: 24
154.214.205.0/24 maxlen: 24
154.214.224.0/22 maxlen: 24
154.214.230.0/23 maxlen: 24
154.214.236.0/23 maxlen: 24
154.214.238.0/23 maxlen: 24
154.214.240.0/22 maxlen: 24
154.214.244.0/23 maxlen: 24
154.214.248.0/23 maxlen: 24
154.214.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107916 (0x1a58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 21:05:34 2025 GMT
Not After : Feb 1 21:05:34 2026 GMT
Subject: CN=68ffdea5-cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:a4:b3:6c:04:9a:8c:1b:f0:4d:4c:93:c8:
2c:7b:2e:96:34:98:89:2b:9b:2e:8c:b2:9a:d4:9c:
09:6b:f0:fa:84:62:fc:fe:d4:d1:01:0d:07:9c:6d:
9b:48:80:46:30:60:6f:02:cb:16:90:33:b7:cd:4e:
de:04:80:88:9c:1e:f8:72:11:47:99:17:ad:da:aa:
a9:df:2a:0a:ff:d0:14:bb:90:c4:ab:b0:f4:19:17:
aa:87:b3:bb:bc:64:29:24:55:25:e4:d8:46:0d:91:
83:f5:55:dc:93:54:f2:41:9d:24:2f:7c:26:73:34:
b1:99:1c:b4:54:2b:92:bb:57:f4:de:02:0c:fc:ef:
ea:71:c1:2d:b5:73:87:66:98:e8:6d:2a:87:7d:8f:
7a:44:09:74:0d:18:1c:fa:02:48:8f:75:61:10:cd:
1e:61:d4:83:35:95:91:a7:10:02:c2:56:a0:fc:23:
70:b4:3d:e2:ba:c1:c2:37:18:4d:09:8b:77:48:7a:
36:d4:84:81:6b:e7:60:19:e5:9d:21:fd:6a:c3:00:
25:ef:8d:eb:b9:cb:94:d3:65:cf:48:5b:50:e3:62:
32:12:4f:02:6d:69:81:b8:76:36:0b:23:d6:84:e5:
7c:e2:81:a3:53:db:a9:16:ea:b2:df:59:2c:a6:f9:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:21:E4:59:CA:C4:D8:F7:59:68:6E:DF:AD:10:8B:C0:BF:BC:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D92F40B37811F0B14E8BD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.196.0/24
154.214.205.0/24
154.214.224.0/22
154.214.230.0/23
154.214.236.0-154.214.245.255
154.214.248.0/22
Signature Algorithm: sha256WithRSAEncryption
57:d3:74:f5:30:1c:74:eb:42:7a:4d:c7:18:a0:74:2c:63:f2:
2e:06:b9:46:ce:08:58:f3:e3:c6:72:6e:6a:4d:6b:71:66:aa:
17:63:43:fd:01:83:3b:ca:6b:11:b9:da:7f:9d:ea:e9:20:d8:
c1:01:ba:36:66:e8:48:5a:4b:43:d9:c7:7f:0e:78:67:14:f8:
58:73:ee:d3:14:88:2b:68:d6:19:6e:87:28:93:d5:1c:b4:91:
1e:7e:70:74:b9:20:5b:82:18:cf:d0:3e:ad:48:bc:67:ba:ac:
d3:8f:ab:9f:bb:68:6d:ef:9a:4e:67:93:8f:30:35:d5:b7:19:
a0:2d:60:2f:3d:6d:e1:c3:2e:7e:fb:b1:2a:ad:b5:71:09:5c:
a8:21:d7:67:cc:51:ac:4f:63:1c:25:d4:79:29:73:07:23:8a:
1c:0c:54:7e:eb:a9:31:95:c3:23:1c:a7:17:27:8d:06:f6:02:
51:f8:9a:05:7f:96:55:6d:5b:b8:4e:9d:b6:bf:d7:c0:10:ab:
48:3e:9e:17:4f:7d:3b:d8:1f:f8:78:36:5f:ef:d3:e6:14:46:
0d:8f:68:e2:f7:bc:c3:d0:f5:8e:e2:85:5f:0f:be:f6:59:6b:
57:3b:3f:44:30:43:14:4c:96:fc:ba:7f:d9:64:45:0e:ed:28:
cc:c1:d4:3f
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAaWMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MjEwNTM0WhcNMjYwMjAxMjEwNTM0WjAYMRYw
FAYDVQQDEw02OGZmZGVhNS1jYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Haks2wEmowb8E1Mk8gsey6WNJiJK5sujLKa1JwJa/D6hGL8/tTRAQ0H
nG2bSIBGMGBvAssWkDO3zU7eBICInB74chFHmRet2qqp3yoK/9AUu5DEq7D0GReq
h7O7vGQpJFUl5NhGDZGD9VXck1TyQZ0kL3wmczSxmRy0VCuSu1f03gIM/O/qccEt
tXOHZpjobSqHfY96RAl0DRgc+gJIj3VhEM0eYdSDNZWRpxACwlag/CNwtD3iusHC
NxhNCYt3SHo21ISBa+dgGeWdIf1qwwAl743rucuU02XPSFtQ42IyEk8CbWmBuHY2
CyPWhOV84oGjU9upFuqy31kspvlhUQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFACq
IeRZysTY91lobt+tEIvAv7xvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMUQ5MkY0MEIzNzgxMUYwQjE0RThCRDZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmtbEAwQAmtbNAwQCmtbg
AwQBmtbmMAwDBAKa1uwDBAGa1vQDBAKa1vgwDQYJKoZIhvcNAQELBQADggEBAFfT
dPUwHHTrQnpNxxigdCxj8i4GuUbOCFjz48ZybmpNa3FmqhdjQ/0BgzvKaxG52n+d
6ukg2MEBujZm6EhaS0PZx38OeGcU+Fhz7tMUiCto1hluhyiT1Ry0kR5+cHS5IFuC
GM/QPq1IvGe6rNOPq5+7aG3vmk5nk48wNdW3GaAtYC89beHDLn77sSqttXEJXKgh
12fMUaxPYxwl1HkpcwcjihwMVH7rqTGVwyMcpxcnjQb2AlH4mgV/llVtW7hOnba/
18AQq0g+nhdPfTvYH/h4Nl/v0+YURg2PaOL3vMPQ9Y7ihV8PvvZZa1c7P0QwQxRM
lvy6f9lkRQ7tKMzB1D8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:25:16 2025 by rpki-client