Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8BFDF08B32F11F095337981DAE4EC9C.roa
File: D8BFDF08B32F11F095337981DAE4EC9C.roa (raw, json)
Hash identifier: xhHsGxYzR3KvUA7CseML6hfNiSFy/sJypGUflSvymDk=
Subject key identifier: E6:35:A0:C9:48:44:73:74:1B:64:A2:31:45:43:3E:5D:25:9E:56:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A523
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8BFDF08B32F11F095337981DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 12:24:13 +0000
ROA not before: Mon 27 Oct 2025 12:24:03 +0000
ROA not after: Sat 29 Nov 2025 12:24:03 +0000
asID: 134365
IP address blocks: 154.194.248.0/21 maxlen: 24
154.194.248.0/24 maxlen: 24
154.194.249.0/24 maxlen: 24
154.194.250.0/24 maxlen: 24
154.194.251.0/24 maxlen: 24
154.194.252.0/24 maxlen: 24
154.194.253.0/24 maxlen: 24
154.194.254.0/24 maxlen: 24
154.194.255.0/24 maxlen: 24
154.198.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107811 (0x1a523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 12:24:03 2025 GMT
Not After : Nov 29 12:24:03 2025 GMT
Subject: CN=68ff646d-bfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:64:7c:a1:d7:72:00:ff:0f:3d:3e:ac:84:
81:51:a3:49:36:a9:5d:e1:c9:20:c6:a7:10:f4:f3:
09:c5:ef:e8:be:31:c0:9d:a9:21:7a:ac:b2:8b:6a:
af:ec:82:94:0a:53:34:4e:b4:42:54:7a:dc:b7:10:
c5:c4:56:1f:9d:16:6c:f5:97:1f:c0:88:91:ce:1f:
6c:76:a2:0a:a8:c4:d0:34:5c:5a:71:5a:78:6a:c4:
c6:e1:9b:2e:54:ab:6f:fd:09:de:8b:92:70:30:9a:
b0:c0:d7:db:72:38:6f:3e:ba:a7:32:29:49:40:a5:
1d:46:cd:fa:2b:30:c5:97:73:59:58:34:ef:8b:f7:
35:5c:6a:1b:a8:76:ce:bc:65:f4:b2:22:36:a9:b1:
43:ba:8d:73:c2:be:d7:a3:ff:bc:48:af:22:b2:89:
c2:ee:08:24:69:e3:20:92:f4:49:01:76:9e:a9:d2:
ec:13:84:d9:67:08:15:53:50:b3:3a:9d:f0:79:64:
58:03:6e:05:d7:0e:b3:c9:8a:19:24:e0:94:84:92:
2b:86:16:b3:b5:55:20:14:7f:50:1b:47:02:28:9f:
5a:08:01:09:91:de:40:a0:20:17:14:63:87:9d:f7:
f3:de:dc:76:29:38:7f:82:75:d4:f0:54:04:dd:d1:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:35:A0:C9:48:44:73:74:1B:64:A2:31:45:43:3E:5D:25:9E:56:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8BFDF08B32F11F095337981DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.248.0/21
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:67:8c:db:35:59:f5:6b:81:71:77:1e:4c:13:72:c2:19:70:
f4:f8:46:1e:60:af:75:f7:38:f3:de:51:83:b5:b7:8f:3c:21:
ab:45:4b:80:99:88:e6:3a:11:db:c5:e7:d1:09:48:6f:c4:a7:
df:8f:d0:cb:59:fc:3f:15:19:55:72:3c:9a:42:f2:52:95:e4:
78:9e:5c:a6:c9:31:ff:92:98:ad:8c:69:e3:e8:18:a0:fd:e4:
7e:b3:5f:30:e9:1e:c3:c1:2b:3c:05:bd:26:02:6d:08:da:3f:
c0:7c:de:ca:31:41:4f:b7:94:ef:14:b0:1f:3b:1c:be:40:eb:
54:5b:4f:6a:0a:5d:34:86:4f:92:87:49:a9:00:32:d1:15:bf:
18:a2:e4:b3:c2:ed:49:85:b1:ba:5b:62:54:62:c2:ab:14:37:
d3:e8:c9:ff:f4:85:bb:67:7c:97:4d:ca:cd:bf:a6:c7:fe:69:
ec:ce:0e:84:e0:5d:dc:46:64:ac:b8:86:ce:45:cf:97:cc:44:
6c:4f:99:66:d3:03:f9:ee:a7:a4:99:b0:d4:e3:cc:35:20:d0:
f8:bb:3a:cc:71:b3:f4:05:51:2f:18:f9:8b:57:30:36:d5:8c:
95:cc:d2:d6:c3:8a:1a:1a:87:86:e1:82:03:8e:76:85:1d:a4:
6c:8b:61:a2
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAaUjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MTIyNDAzWhcNMjUxMTI5MTIyNDAzWjAYMRYw
FAYDVQQDEw02OGZmNjQ2ZC1iZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsVBkfKHXcgD/Dz0+rISBUaNJNqld4ckgxqcQ9PMJxe/ovjHAnakheqyy
i2qv7IKUClM0TrRCVHrctxDFxFYfnRZs9ZcfwIiRzh9sdqIKqMTQNFxacVp4asTG
4ZsuVKtv/Qnei5JwMJqwwNfbcjhvPrqnMilJQKUdRs36KzDFl3NZWDTvi/c1XGob
qHbOvGX0siI2qbFDuo1zwr7Xo/+8SK8isonC7ggkaeMgkvRJAXaeqdLsE4TZZwgV
U1CzOp3weWRYA24F1w6zyYoZJOCUhJIrhhaztVUgFH9QG0cCKJ9aCAEJkd5AoCAX
FGOHnffz3tx2KTh/gnXU8FQE3dGtgwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOY1
oMlIRHN0G2SiMUVDPl0lnlaxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOEJGREYwOEIzMkYxMUYwOTUzMzc5ODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmsL4AwQCmsYoMA0GCSqG
SIb3DQEBCwUAA4IBAQA7Z4zbNVn1a4Fxdx5ME3LCGXD0+EYeYK919zjz3lGDtbeP
PCGrRUuAmYjmOhHbxefRCUhvxKffj9DLWfw/FRlVcjyaQvJSleR4nlymyTH/kpit
jGnj6Big/eR+s18w6R7DwSs8Bb0mAm0I2j/AfN7KMUFPt5TvFLAfOxy+QOtUW09q
Cl00hk+Sh0mpADLRFb8YouSzwu1JhbG6W2JUYsKrFDfT6Mn/9IW7Z3yXTcrNv6bH
/mnszg6E4F3cRmSsuIbORc+XzERsT5lm0wP57qekmbDU48w1IND4uzrMcbP0BVEv
GPmLVzA21YyVzNLWw4oaGoeG4YIDjnaFHaRsi2Gi
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:05:00 2025 by rpki-client