Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87E37CCAE6711F0BDB649CCDAE4EC9C.roa
File: E87E37CCAE6711F0BDB649CCDAE4EC9C.roa (raw, json)
Hash identifier: jqBswrPkyYqGvlomn46I24q/13kOyzATts202eyMSQA=
Subject key identifier: 20:B3:01:4F:6C:9E:27:4C:5C:8F:B7:D2:AC:16:BF:3F:A0:99:94:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A48E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87E37CCAE6711F0BDB649CCDAE4EC9C.roa
Signing time: Tue 21 Oct 2025 10:22:57 +0000
ROA not before: Tue 21 Oct 2025 10:22:51 +0000
ROA not after: Thu 27 Nov 2025 10:22:51 +0000
asID: 395793
IP address blocks: 154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107662 (0x1a48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 10:22:51 2025 GMT
Not After : Nov 27 10:22:51 2025 GMT
Subject: CN=68f75f01-f3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:8a:09:85:0d:91:1f:ac:8d:eb:1f:a3:d3:
e0:bf:4b:a8:94:3b:40:a3:e6:fb:26:c3:37:33:0b:
36:8b:8a:bf:16:ea:69:ae:a4:db:df:eb:0b:3e:d9:
f2:12:65:34:69:2c:c7:93:87:38:e9:fc:52:12:bb:
00:27:e8:7f:13:a8:78:f6:93:f7:34:6d:50:f6:3e:
ea:64:02:61:a1:bb:30:8c:b9:16:87:4e:a0:45:6e:
b0:27:34:db:97:29:7c:c7:4f:7c:cb:58:85:6d:91:
d5:13:17:f7:50:ee:94:05:e9:ca:44:96:4f:bc:2c:
64:9a:23:09:88:25:3d:f4:77:81:bc:64:94:ba:02:
45:54:8d:db:ff:d7:0f:22:6c:37:eb:a4:f7:4e:a6:
09:ba:bf:20:5e:4b:aa:24:cd:7d:b2:37:93:5c:5c:
08:77:bd:37:84:19:3a:e7:29:e9:36:8e:d5:12:cf:
cb:b3:75:54:15:68:b3:cf:fe:60:22:4c:b5:53:79:
7b:d9:73:44:90:77:d9:dc:71:d7:fe:c6:d7:c1:5c:
e1:98:a5:45:db:43:56:ff:36:50:6d:aa:03:55:0c:
07:21:74:c4:56:cf:1f:b0:02:ce:87:41:7c:15:8a:
01:19:df:08:40:ff:58:74:b1:2c:0c:47:ff:b7:f9:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:01:4F:6C:9E:27:4C:5C:8F:B7:D2:AC:16:BF:3F:A0:99:94:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87E37CCAE6711F0BDB649CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:96:c8:f9:a4:a6:2b:b8:4b:cc:12:77:1f:ea:4f:45:99:dc:
4f:e9:0b:25:ba:18:f0:f3:fe:b9:36:24:73:41:f4:07:46:1c:
2e:5d:08:67:81:15:e7:13:4b:75:6d:37:f1:fd:35:35:0e:8b:
43:cf:04:82:89:90:8a:20:1a:3f:46:69:61:10:62:f7:8e:d6:
30:48:96:dd:b4:c7:bb:3e:fe:73:03:66:1d:55:7a:85:92:99:
03:70:7a:b4:41:ba:69:29:47:91:76:a2:2f:92:99:67:4b:91:
71:f1:05:b5:31:05:d0:16:45:b9:61:37:e4:cc:f0:f8:d0:db:
eb:a7:67:cd:f5:35:bc:7a:92:ce:85:0b:ed:25:45:f5:8f:d6:
5b:a8:ab:25:3f:e3:b1:c8:20:b5:4a:1a:c1:30:c9:2f:25:fe:
56:0b:b4:9e:55:c0:f4:9a:1d:71:ea:b6:39:a8:7a:3d:46:a1:
43:ca:66:0b:89:99:e2:38:2f:76:e7:b7:66:ae:5b:77:25:dc:
17:98:bf:f4:a1:f9:58:be:d0:df:a9:c9:35:1c:46:f6:b8:89:
e0:67:04:db:54:18:71:b9:d1:ac:50:0e:8c:df:49:8f:05:da:
eb:9f:da:f2:22:73:81:3e:c6:8b:d3:c2:40:2f:28:6c:62:22:
35:fc:9d:0b
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAaSOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIxMTAyMjUxWhcNMjUxMTI3MTAyMjUxWjAYMRYw
FAYDVQQDEw02OGY3NWYwMS1mM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0aaKCYUNkR+sjesfo9Pgv0uolDtAo+b7JsM3Mws2i4q/FupprqTb3+sL
PtnyEmU0aSzHk4c46fxSErsAJ+h/E6h49pP3NG1Q9j7qZAJhobswjLkWh06gRW6w
JzTblyl8x098y1iFbZHVExf3UO6UBenKRJZPvCxkmiMJiCU99HeBvGSUugJFVI3b
/9cPImw366T3TqYJur8gXkuqJM19sjeTXFwId703hBk65ynpNo7VEs/Ls3VUFWiz
z/5gIky1U3l72XNEkHfZ3HHX/sbXwVzhmKVF20NW/zZQbaoDVQwHIXTEVs8fsALO
h0F8FYoBGd8IQP9YdLEsDEf/t/n2SQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCCz
AU9snidMXI+30qwWvz+gmZRIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODdFMzdDQ0FFNjcxMUYwQkRCNjQ5Q0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmshQAwQDmt/4MA0GCSqG
SIb3DQEBCwUAA4IBAQBflsj5pKYruEvMEncf6k9FmdxP6Qsluhjw8/65NiRzQfQH
RhwuXQhngRXnE0t1bTfx/TU1DotDzwSCiZCKIBo/RmlhEGL3jtYwSJbdtMe7Pv5z
A2YdVXqFkpkDcHq0QbppKUeRdqIvkplnS5Fx8QW1MQXQFkW5YTfkzPD40Nvrp2fN
9TW8epLOhQvtJUX1j9ZbqKslP+OxyCC1ShrBMMkvJf5WC7SeVcD0mh1x6rY5qHo9
RqFDymYLiZniOC9257dmrlt3JdwXmL/0oflYvtDfqck1HEb2uIngZwTbVBhxudGs
UA6M30mPBdrrn9ryInOBPsaL08JALyhsYiI1/J0L
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:21:51 2025 by rpki-client