Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9075260B37011F0B6431CA5DAE4EC9C.roa
File: E9075260B37011F0B6431CA5DAE4EC9C.roa (raw, json)
Hash identifier: QXjWCmFRt4dpXOrwdr3kBD0Vp1Q21UEr+Xf6PiW5N8w=
Subject key identifier: 21:A7:A3:E2:D9:B2:39:EB:78:91:91:07:EA:81:6F:1E:70:0C:8F:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A588
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9075260B37011F0B6431CA5DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 20:09:58 +0000
ROA not before: Mon 27 Oct 2025 20:09:53 +0000
ROA not after: Mon 01 Dec 2025 20:09:53 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107912 (0x1a588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 20:09:53 2025 GMT
Not After : Dec 1 20:09:53 2025 GMT
Subject: CN=68ffd196-86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:bd:6d:45:89:16:b8:81:8b:54:c1:bc:b8:
e6:fd:bd:67:49:d3:f1:4d:cf:e6:4b:6c:89:54:b0:
8b:32:87:5a:6e:b5:ec:e9:19:a1:5c:a7:3a:1c:a7:
90:57:d9:2d:2d:b3:b9:50:29:26:b7:d4:1f:a4:e6:
d0:c0:7b:f2:2d:c6:91:b6:0c:52:82:3d:db:d1:aa:
40:ac:ef:3e:42:49:3d:fd:4f:65:8f:ce:3d:6d:1b:
54:84:24:74:2e:44:b4:16:7b:da:03:c1:dd:60:92:
58:41:83:ce:6a:60:6c:b2:aa:fa:b6:df:37:bd:a6:
77:57:e6:5e:f4:7a:e4:cc:24:32:0e:30:0d:04:35:
dc:7c:4a:91:79:b5:17:b9:9f:c8:0e:5a:63:58:cb:
bf:17:61:71:22:a6:c7:88:cc:b8:bd:ef:13:20:39:
ee:82:e3:37:fa:92:fe:7e:a4:39:2f:46:56:5b:14:
fb:7f:7f:1c:a9:24:e4:9f:2e:2e:c4:3f:75:c4:0e:
d1:5e:a9:f7:2e:3e:5a:0f:d7:d9:ea:f7:8b:7f:9b:
6a:9e:37:d9:b7:92:b9:49:7d:55:9c:e9:9d:d7:0e:
53:f9:0e:75:fd:43:a7:5a:14:a5:ad:a1:f0:e7:81:
1d:8a:a0:13:33:7f:e9:f1:e5:ca:51:80:7f:30:f4:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:A3:E2:D9:B2:39:EB:78:91:91:07:EA:81:6F:1E:70:0C:8F:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9075260B37011F0B6431CA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:59:b6:45:16:95:4e:51:00:c3:84:ad:df:b3:75:91:c8:e6:
bb:27:e3:3b:b8:a4:3b:e6:29:37:3b:8b:95:ce:bc:a0:98:6c:
28:9f:cd:e2:5a:f8:8d:81:83:2f:04:04:6e:c1:96:25:a0:8b:
e4:49:e7:47:e1:48:43:93:92:43:76:5d:63:28:e3:6e:97:80:
56:4d:50:4e:ae:99:68:1c:5d:29:6f:e6:1f:fe:e0:7f:c7:2b:
f2:09:2c:76:f8:87:25:38:cb:7a:5b:16:45:cb:b5:4c:17:51:
df:bd:95:b4:67:9a:7d:d8:2b:f2:b7:ec:19:3b:f3:25:9c:fc:
fd:24:85:8d:97:e2:7d:f9:8c:9d:ac:ce:bf:56:8f:08:15:d7:
c1:39:bc:5d:b2:2a:c8:7f:3d:b3:02:af:89:66:fc:41:f6:15:
8b:48:b3:5c:0d:88:e0:ef:96:e4:d9:23:4b:ee:ed:8d:05:70:
27:c7:7a:d5:5e:3f:f7:3f:9e:a2:43:57:8e:ba:8f:76:12:58:
d0:f1:b0:a6:ae:ec:f3:55:e2:5d:cb:77:c1:9b:80:ef:3b:7f:
5e:0c:8f:f1:e7:dd:95:1a:83:e3:28:1f:30:7d:7a:94:c8:3f:
ef:87:80:a0:7a:05:92:19:24:fe:d9:70:e2:c8:7a:c9:ae:9c:
a0:51:08:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaWIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MjAwOTUzWhcNMjUxMjAxMjAwOTUzWjAYMRYw
FAYDVQQDEw02OGZmZDE5Ni04NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAK9bUWJFriBi1TBvLjm/b1nSdPxTc/mS2yJVLCLModabrXs6RmhXKc6
HKeQV9ktLbO5UCkmt9QfpObQwHvyLcaRtgxSgj3b0apArO8+Qkk9/U9lj849bRtU
hCR0LkS0FnvaA8HdYJJYQYPOamBssqr6tt83vaZ3V+Ze9HrkzCQyDjANBDXcfEqR
ebUXuZ/IDlpjWMu/F2FxIqbHiMy4ve8TIDnuguM3+pL+fqQ5L0ZWWxT7f38cqSTk
ny4uxD91xA7RXqn3Lj5aD9fZ6veLf5tqnjfZt5K5SX1VnOmd1w5T+Q51/UOnWhSl
raHw54EdiqATM3/p8eXKUYB/MPR8rQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCGn
o+LZsjnreJGRB+qBbx5wDI+NMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTA3NTI2MEIzNzAxMUYwQjY0MzFDQTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIyMA0GCSqGSIb3DQEB
CwUAA4IBAQAMWbZFFpVOUQDDhK3fs3WRyOa7J+M7uKQ75ik3O4uVzrygmGwon83i
WviNgYMvBARuwZYloIvkSedH4UhDk5JDdl1jKONul4BWTVBOrploHF0pb+Yf/uB/
xyvyCSx2+IclOMt6WxZFy7VMF1HfvZW0Z5p92Cvyt+wZO/MlnPz9JIWNl+J9+Yyd
rM6/Vo8IFdfBObxdsirIfz2zAq+JZvxB9hWLSLNcDYjg75bk2SNL7u2NBXAnx3rV
Xj/3P56iQ1eOuo92EljQ8bCmruzzVeJdy3fBm4DvO39eDI/x592VGoPjKB8wfXqU
yD/vh4CgegWSGST+2XDiyHrJrpygUQha
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:16 2025 by rpki-client