Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0B59AEB91E11F0B22A5EDBDAE4EC9C.roa
File: CD0B59AEB91E11F0B22A5EDBDAE4EC9C.roa (raw, json)
Hash identifier: u8dqSFnbY+HRwPgBpEA0fgcIeM1g54BR98LeFGAZ5OI=
Subject key identifier: 19:74:24:68:7D:3F:C7:B2:AF:A7:16:0F:C4:38:14:C9:B4:DE:AD:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A747
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0B59AEB91E11F0B22A5EDBDAE4EC9C.roa
Signing time: Tue 04 Nov 2025 01:37:19 +0000
ROA not before: Tue 04 Nov 2025 01:37:11 +0000
ROA not after: Mon 10 Nov 2025 01:37:11 +0000
asID: 139057
IP address blocks: 154.92.24.0/24 maxlen: 24
154.92.25.0/24 maxlen: 24
154.92.26.0/24 maxlen: 24
154.92.27.0/24 maxlen: 24
154.92.28.0/24 maxlen: 24
154.92.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108359 (0x1a747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 01:37:11 2025 GMT
Not After : Nov 10 01:37:11 2025 GMT
Subject: CN=690958cf-e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:91:13:b1:98:a4:b3:0b:38:1a:76:49:6f:
3d:67:18:a6:5f:ee:fd:8c:fd:b2:33:49:de:c1:1e:
0c:60:03:ba:bf:2f:2e:14:a4:3e:85:1b:d6:b4:69:
0e:58:3e:d8:84:71:e5:44:a3:d5:49:68:b2:09:de:
47:b7:bd:d2:13:ef:7d:42:4f:c4:b3:97:9e:8c:94:
ac:e8:66:45:78:0e:58:44:2c:04:be:71:78:44:6c:
82:9f:4b:e0:2f:a2:5b:87:65:a3:30:e1:e4:ac:7a:
1b:f8:ac:27:2a:80:dc:88:19:43:38:4c:bf:17:60:
14:e8:2b:b7:c5:71:aa:e4:75:cf:4f:c8:8b:7f:8a:
ee:f6:0e:5b:df:b6:f6:2b:77:6c:38:23:3d:9f:59:
92:3a:d8:77:59:7e:f9:3f:dd:b7:08:0d:2c:c2:d2:
8f:c6:4c:d3:2a:2a:b2:c2:b4:f8:eb:a0:88:b9:b3:
d8:98:bd:d6:d7:0d:e9:65:5b:b6:ba:cb:6c:e1:a8:
48:af:6e:1d:8f:69:b2:47:04:46:0a:50:f4:c6:44:
28:c4:32:c8:0a:5a:6c:1c:dc:ab:d8:b1:43:93:75:
ce:46:6a:b2:40:84:4f:76:32:10:9f:9b:a8:79:14:
7a:0a:a9:f9:78:7b:1c:19:28:36:82:6b:79:98:03:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:24:68:7D:3F:C7:B2:AF:A7:16:0F:C4:38:14:C9:B4:DE:AD:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD0B59AEB91E11F0B22A5EDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.24.0-154.92.28.255
154.92.30.0/24
Signature Algorithm: sha256WithRSAEncryption
66:df:f0:ba:86:05:8a:d9:a1:8a:52:46:93:62:a1:1f:fb:fe:
92:e6:c2:16:f1:06:05:d2:65:0a:c0:96:b9:b5:e6:27:86:6a:
c1:70:e6:95:f9:ef:57:dc:1c:29:44:f6:08:6e:d6:3f:dd:c3:
52:20:2e:62:0d:38:33:6d:dc:87:92:ec:7d:26:76:50:af:d2:
4f:a6:73:a6:9e:42:8c:3d:b9:57:9f:3a:5f:1b:48:47:43:85:
65:b4:74:41:7a:42:c0:00:2f:d9:06:f2:85:50:a4:9d:6c:01:
93:c0:e1:48:11:b2:bf:24:a4:e9:8d:32:8f:03:dd:e3:91:25:
a3:38:12:55:bf:96:38:a8:e2:06:a0:6a:22:8f:22:34:97:13:
11:74:e6:f3:8c:42:ae:eb:9d:fd:cb:03:0e:b0:6a:a2:96:c7:
69:3d:18:63:a7:12:e1:64:15:2e:ea:6a:a3:f9:08:f0:9f:9b:
8c:18:35:b4:62:52:08:55:7a:42:b4:8f:e5:92:c3:61:2d:ae:
8d:61:07:ee:dd:9c:6d:2b:78:da:2e:e4:fd:ff:8e:8e:bb:63:
b9:f5:f5:14:4a:6d:76:f1:af:18:d7:b2:ab:d2:fc:89:b3:18:
c6:c2:28:f0:2f:1c:83:65:02:38:7d:a5:ea:1d:13:ae:09:28:
5b:ec:81:4d
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAadHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTA0MDEzNzExWhcNMjUxMTEwMDEzNzExWjAYMRYw
FAYDVQQDEw02OTA5NThjZi1lOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq1eRE7GYpLMLOBp2SW89ZximX+79jP2yM0newR4MYAO6vy8uFKQ+hRvW
tGkOWD7YhHHlRKPVSWiyCd5Ht73SE+99Qk/Es5eejJSs6GZFeA5YRCwEvnF4RGyC
n0vgL6Jbh2WjMOHkrHob+KwnKoDciBlDOEy/F2AU6Cu3xXGq5HXPT8iLf4ru9g5b
37b2K3dsOCM9n1mSOth3WX75P923CA0swtKPxkzTKiqywrT466CIubPYmL3W1w3p
ZVu2usts4ahIr24dj2myRwRGClD0xkQoxDLIClpsHNyr2LFDk3XORmqyQIRPdjIQ
n5uoeRR6Cqn5eHscGSg2gmt5mANmmQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFBl0
JGh9P8eyr6cWD8Q4FMm03q3KMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDBCNTlBRUI5MUUxMUYwQjIyQTVFREJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAOaXBgDBACaXBwDBACa
XB4wDQYJKoZIhvcNAQELBQADggEBAGbf8LqGBYrZoYpSRpNioR/7/pLmwhbxBgXS
ZQrAlrm15ieGasFw5pX571fcHClE9ghu1j/dw1IgLmINODNt3IeS7H0mdlCv0k+m
c6aeQow9uVefOl8bSEdDhWW0dEF6QsAAL9kG8oVQpJ1sAZPA4UgRsr8kpOmNMo8D
3eORJaM4ElW/ljio4gagaiKPIjSXExF05vOMQq7rnf3LAw6waqKWx2k9GGOnEuFk
FS7qaqP5CPCfm4wYNbRiUghVekK0j+WSw2Etro1hB+7dnG0reNou5P3/jo67Y7n1
9RRKbXbxrxjXsqvS/ImzGMbCKPAvHINlAjh9peodE64JKFvsgU0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:05 2025 by rpki-client