Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23E2820B40911F08A6065F0DAE4EC9C.roa
File: E23E2820B40911F08A6065F0DAE4EC9C.roa (raw, json)
Hash identifier: LAimqGibCp+Vi/C/kYB4vcs/QUErPXvkeDDiPuHEgvU=
Subject key identifier: E4:7E:CA:FF:33:32:46:24:4F:31:F4:7C:12:50:94:96:B0:9B:76:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A601
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23E2820B40911F08A6065F0DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:24:59 +0000
ROA not before: Tue 28 Oct 2025 14:24:54 +0000
ROA not after: Wed 17 Dec 2025 14:24:54 +0000
asID: 138915
IP address blocks: 154.203.144.0/23 maxlen: 24
154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.100.0/23 maxlen: 24
154.206.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108033 (0x1a601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 14:24:54 2025 GMT
Not After : Dec 17 14:24:54 2025 GMT
Subject: CN=6900d23b-28e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:a8:29:23:20:ef:f4:b7:22:52:f3:80:da:
1c:2c:6b:3c:87:df:e6:20:53:45:6f:82:cd:9f:e6:
4a:d8:52:88:a8:be:d8:11:c2:f9:a0:f2:52:b9:60:
2d:ac:ef:9b:38:f7:52:bc:96:8f:bf:10:eb:f5:af:
46:c6:40:43:b3:a6:19:47:17:97:84:67:4e:31:7e:
30:bb:4b:b4:38:69:9d:c3:cc:e7:c6:c2:29:94:4b:
d6:ef:02:6f:9c:44:1a:1e:cf:1b:ba:8c:a3:9a:5f:
a0:38:26:50:23:c0:22:1a:f6:84:6e:0f:75:0f:36:
f3:f6:d7:53:5b:f6:37:80:67:37:56:70:c7:01:cd:
b6:99:de:76:3f:7e:ba:fe:9d:6b:0e:04:d4:88:8f:
e2:d9:e5:07:f1:07:7c:d2:1f:07:80:7a:45:d7:97:
c5:e5:56:61:86:55:7b:85:30:b8:f8:35:41:46:91:
ae:23:50:65:9d:1f:c0:b6:ca:43:cf:6f:cb:90:98:
4d:22:fe:51:99:02:c7:5a:a3:8a:d8:e9:bd:0b:06:
4e:fb:6e:0a:94:92:9e:b7:e0:fc:8a:63:2b:5c:d2:
5c:34:db:d3:2b:53:0d:dd:0e:96:7e:54:e4:00:84:
41:7a:37:c9:42:b9:05:dd:9f:b8:eb:e9:04:bc:06:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:CA:FF:33:32:46:24:4F:31:F4:7C:12:50:94:96:B0:9B:76:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23E2820B40911F08A6065F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.144.0/23
154.203.149.0-154.203.152.255
154.206.56.0/22
154.206.96.0/23
154.206.100.0/23
154.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:72:19:81:ec:ee:a5:5f:58:9d:31:b7:81:2f:bd:07:45:e2:
8f:d3:7b:37:32:b3:18:25:c6:f9:8c:9e:23:74:52:71:46:ce:
59:c8:69:51:94:11:21:90:c4:f9:83:32:f9:f1:0c:1b:e1:ef:
69:27:71:92:5d:49:32:95:6e:ad:96:29:2c:9c:67:ff:8b:81:
11:2e:77:03:f7:5f:04:4b:1d:37:f1:8b:93:52:e5:a7:21:0a:
6f:e4:1d:bb:fe:4c:f7:0d:33:05:98:4a:a2:0e:f6:17:01:68:
c6:ad:f6:e3:9d:51:6c:27:51:81:94:58:51:61:6b:53:4c:7b:
cd:84:c0:27:bb:84:ac:60:3e:65:62:2b:72:1c:56:64:91:41:
ac:39:72:fc:f1:c1:a6:48:4d:ac:33:b9:64:95:65:fc:6b:ba:
8f:9f:81:7e:1c:08:dc:2d:26:6e:41:05:4d:85:dd:b4:11:58:
24:1a:b2:4a:e2:a2:e5:97:59:bb:53:98:73:b5:aa:79:36:3c:
71:04:54:51:d7:a6:71:ed:03:3d:7c:4f:7d:36:11:9b:bc:c4:
15:80:b7:f2:0c:94:0a:50:9b:2b:d0:c1:0f:c7:e2:34:99:5a:
5b:55:2f:f3:82:e7:b1:d7:98:c0:4d:b3:2b:46:00:29:bc:74:
86:88:a2:ea
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAaYBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI4MTQyNDU0WhcNMjUxMjE3MTQyNDU0WjAYMRYw
FAYDVQQDEw02OTAwZDIzYi0yOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuoOoKSMg7/S3IlLzgNocLGs8h9/mIFNFb4LNn+ZK2FKIqL7YEcL5oPJS
uWAtrO+bOPdSvJaPvxDr9a9GxkBDs6YZRxeXhGdOMX4wu0u0OGmdw8znxsIplEvW
7wJvnEQaHs8buoyjml+gOCZQI8AiGvaEbg91Dzbz9tdTW/Y3gGc3VnDHAc22md52
P366/p1rDgTUiI/i2eUH8Qd80h8HgHpF15fF5VZhhlV7hTC4+DVBRpGuI1BlnR/A
tspDz2/LkJhNIv5RmQLHWqOK2Om9CwZO+24KlJKet+D8imMrXNJcNNvTK1MN3Q6W
flTkAIRBejfJQrkF3Z+46+kEvAaitQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFOR+
yv8zMkYkTzH0fBJQlJawm3bwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMjNFMjgyMEI0MDkxMUYwOEE2MDY1RjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBmsuQMAwDBACay5UDBACa
y5gDBAKazjgDBAGazmADBAGazmQDBACazmswDQYJKoZIhvcNAQELBQADggEBAHty
GYHs7qVfWJ0xt4EvvQdF4o/TezcysxglxvmMniN0UnFGzlnIaVGUESGQxPmDMvnx
DBvh72kncZJdSTKVbq2WKSycZ/+LgREudwP3XwRLHTfxi5NS5achCm/kHbv+TPcN
MwWYSqIO9hcBaMat9uOdUWwnUYGUWFFha1NMe82EwCe7hKxgPmViK3IcVmSRQaw5
cvzxwaZITawzuWSVZfxruo+fgX4cCNwtJm5BBU2F3bQRWCQaskriouWXWbtTmHO1
qnk2PHEEVFHXpnHtAz18T302EZu8xBWAt/IMlApQmyvQwQ/H4jSZWltVL/OC57HX
mMBNsytGACm8dIaIouo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:08 2025 by rpki-client