Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20B5998B34711F0899E88A9DAE4EC9C.roa
File: F20B5998B34711F0899E88A9DAE4EC9C.roa (raw, json)
Hash identifier: fsy9D0pKdoWRfjCDMzlr+8QBgt1nlRMRd5PDLWNCoCc=
Subject key identifier: 97:15:8F:B7:32:F7:84:1A:3E:F9:32:AE:4D:C0:5C:B5:62:16:ED:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A539
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20B5998B34711F0899E88A9DAE4EC9C.roa
Signing time: Mon 27 Oct 2025 15:16:44 +0000
ROA not before: Mon 27 Oct 2025 15:16:39 +0000
ROA not after: Mon 01 Dec 2025 15:16:39 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.52.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107833 (0x1a539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 15:16:39 2025 GMT
Not After : Dec 1 15:16:39 2025 GMT
Subject: CN=68ff8cdc-5ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:54:35:98:55:96:76:51:56:91:29:80:b5:
a0:aa:cb:7f:e2:75:fc:63:c6:5c:b7:de:23:f7:3a:
63:89:66:b1:ea:13:e4:48:85:09:1a:33:6e:72:15:
d5:21:8a:0e:28:8e:18:d0:88:33:a5:86:af:ef:e2:
23:e0:30:93:0a:81:61:12:e2:e9:f7:a5:f5:e0:02:
1e:76:c2:9e:77:b2:5a:ed:0f:b9:59:fc:13:ee:d4:
48:27:b8:bb:7b:ff:c0:02:2b:ca:aa:43:1e:1f:ed:
3e:64:b8:66:69:51:74:8d:ae:7b:65:96:b8:65:dd:
3d:d4:5d:83:f4:05:ea:af:b2:b6:a4:51:b9:38:8a:
3c:cc:2a:00:64:62:c1:54:35:de:44:20:5c:df:dd:
55:33:22:d7:c4:73:03:fc:dd:e3:85:1b:a9:3e:e6:
66:cf:82:5e:28:fa:3b:ba:3f:de:c1:ed:ce:64:75:
f7:86:b7:25:0a:6e:41:84:be:53:2e:93:ec:d6:f0:
22:65:07:4e:83:0a:57:1d:5e:b2:1e:5b:c7:95:35:
e7:be:12:c8:f0:91:09:f2:56:9b:68:49:74:de:75:
36:30:a4:0d:13:b1:c2:be:b7:16:ac:4b:d2:dd:9e:
b3:aa:b0:5d:34:89:ce:47:99:a8:ab:ff:62:0b:97:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:8F:B7:32:F7:84:1A:3E:F9:32:AE:4D:C0:5C:B5:62:16:ED:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20B5998B34711F0899E88A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
154.81.52.0/24
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4c:b4:c3:4f:86:8d:c3:a8:b1:46:1f:78:19:c3:61:ee:e9:
1d:da:40:b4:57:96:14:36:ee:4b:aa:59:70:bd:d2:dc:09:d1:
a1:48:27:81:45:96:43:01:d5:8e:8c:29:58:b8:40:11:aa:d4:
fe:da:1d:5d:76:2b:53:34:f2:0a:ee:f5:e7:3b:23:0b:8b:41:
26:fa:b8:48:2b:13:91:85:6c:1c:b3:50:7d:44:ad:f2:7e:1f:
da:3f:5b:44:08:6e:94:6c:10:fa:c7:8b:6f:b0:93:eb:92:94:
33:62:1b:b7:1d:96:31:54:0f:0c:ce:d3:81:15:9b:f1:e4:4c:
6d:28:c3:bb:86:f6:12:4b:87:60:26:2b:09:bb:52:ce:c5:2d:
a4:3f:fd:47:31:e4:56:c6:70:51:c6:88:53:64:bb:02:67:9f:
f5:6c:de:7c:b7:5c:ad:22:72:1f:87:f2:f3:c6:dc:76:4a:20:
78:92:90:ae:57:88:44:cb:a4:d3:9b:1a:54:34:6a:c4:f1:11:
da:eb:a3:eb:00:c7:4e:96:2a:65:55:77:93:38:3d:6c:88:98:
92:ce:0f:b8:8c:87:3e:a6:aa:99:af:29:a9:42:90:0f:ae:66:
b1:a7:17:e3:bb:bf:a8:1a:9e:64:07:d9:66:05:6d:a4:1a:ad:
07:24:7b:e8
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAaU5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MTUxNjM5WhcNMjUxMjAxMTUxNjM5WjAYMRYw
FAYDVQQDEw02OGZmOGNkYy01YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs29UNZhVlnZRVpEpgLWgqst/4nX8Y8Zct94j9zpjiWax6hPkSIUJGjNu
chXVIYoOKI4Y0IgzpYav7+Ij4DCTCoFhEuLp96X14AIedsKed7Ja7Q+5WfwT7tRI
J7i7e//AAivKqkMeH+0+ZLhmaVF0ja57ZZa4Zd091F2D9AXqr7K2pFG5OIo8zCoA
ZGLBVDXeRCBc391VMyLXxHMD/N3jhRupPuZmz4JeKPo7uj/ewe3OZHX3hrclCm5B
hL5TLpPs1vAiZQdOgwpXHV6yHlvHlTXnvhLI8JEJ8labaEl03nU2MKQNE7HCvrcW
rEvS3Z6zqrBdNInOR5moq/9iC5ck6QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFJcV
j7cy94QaPvkyrk3AXLViFu1hMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMjBCNTk5OEIzNDcxMUYwODk5RTg4QTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlEoAwQAmlE0AwQAmlHC
MA0GCSqGSIb3DQEBCwUAA4IBAQAZTLTDT4aNw6ixRh94GcNh7ukd2kC0V5YUNu5L
qllwvdLcCdGhSCeBRZZDAdWOjClYuEARqtT+2h1dditTNPIK7vXnOyMLi0Em+rhI
KxORhWwcs1B9RK3yfh/aP1tECG6UbBD6x4tvsJPrkpQzYhu3HZYxVA8MztOBFZvx
5ExtKMO7hvYSS4dgJisJu1LOxS2kP/1HMeRWxnBRxohTZLsCZ5/1bN58t1ytInIf
h/Lzxtx2SiB4kpCuV4hEy6TTmxpUNGrE8RHa66PrAMdOliplVXeTOD1siJiSzg+4
jIc+pqqZrympQpAPrmaxpxfju7+oGp5kB9lmBW2kGq0HJHvo
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:50:22 2025 by rpki-client