Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2B6166AB88A11F081511DC6DAE4EC9C.roa
File: F2B6166AB88A11F081511DC6DAE4EC9C.roa (raw, json)
Hash identifier: jMqxSZerJ5pg26AbguS4Lka2D8E0eVnoF7pjUd2MY38=
Subject key identifier: FD:17:E8:EF:DA:F3:D2:2A:A2:EC:1B:20:04:BB:F6:A2:9A:89:23:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2B6166AB88A11F081511DC6DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 07:58:57 +0000
ROA not before: Mon 03 Nov 2025 07:58:52 +0000
ROA not after: Sun 09 Nov 2025 07:58:52 +0000
asID: 7029
IP address blocks: 154.194.16.0/21 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108282 (0x1a6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 07:58:52 2025 GMT
Not After : Nov 9 07:58:52 2025 GMT
Subject: CN=690860c1-45cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:25:15:03:0f:e3:38:73:3d:d7:b8:46:78:
93:05:e9:0c:8d:d9:d0:ac:2e:bb:25:05:8a:25:ea:
3d:c2:e1:df:15:91:9d:ce:83:d6:7c:49:25:99:13:
dd:76:78:30:84:7e:65:3d:0d:1a:d1:d0:24:dd:27:
7f:0a:c3:d7:eb:01:3f:e6:e5:05:2e:f1:9e:62:40:
7a:22:2f:3f:31:a0:7a:1f:21:d5:e3:71:54:bb:16:
62:8e:33:67:fa:1c:35:25:f8:4c:fb:b1:5f:b6:20:
f9:65:5a:5f:7d:66:44:3a:3e:5b:a7:84:3b:55:95:
4a:86:b5:fc:27:2f:9c:12:35:46:d8:f5:3f:21:f5:
1b:ce:d9:fa:08:b8:11:c6:59:eb:ba:79:0b:ef:91:
60:05:dd:68:02:da:ad:e5:ce:67:b9:f3:3c:c6:83:
cc:43:2c:b7:46:eb:a5:3e:61:64:d3:27:88:7a:cb:
32:00:19:fe:1c:6c:de:af:fd:2f:3c:ba:44:ac:3a:
c7:b2:01:82:db:1d:67:ad:b1:e5:22:dd:cd:22:52:
e7:45:c1:84:ce:f2:c7:d1:a6:ce:25:6c:4a:06:53:
72:61:f3:ec:a2:55:a8:86:f5:0a:68:87:2a:09:a0:
ec:d7:65:5b:6e:51:6a:cd:4d:7b:90:3e:aa:48:47:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:17:E8:EF:DA:F3:D2:2A:A2:EC:1B:20:04:BB:F6:A2:9A:89:23:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2B6166AB88A11F081511DC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0-154.194.27.255
Signature Algorithm: sha256WithRSAEncryption
b5:d7:6f:11:8f:04:d4:8c:4a:d1:62:e8:3e:90:66:20:64:76:
0d:2e:78:3b:06:e8:82:1e:88:9b:3e:5f:f0:0f:ff:58:c9:5c:
be:d9:69:6c:94:81:25:d4:59:64:b6:71:af:a0:a5:6b:e8:50:
3b:c7:d5:ba:fe:2f:70:b9:47:28:52:c2:fb:49:b7:47:39:90:
b0:d5:d5:c4:c1:06:6f:cf:6d:9c:37:26:f1:b9:a7:b3:b5:58:
69:e3:45:db:34:84:9d:63:f7:b7:25:6b:2e:27:4e:dd:37:df:
b9:c6:1b:67:25:ec:f9:78:11:19:21:36:98:52:dd:f3:39:ff:
00:d7:d3:bf:2f:ce:e0:8e:12:b2:e2:c2:c1:9f:c0:04:09:8f:
86:39:2c:bf:77:8e:80:1d:d9:ad:bc:3e:40:73:2c:93:df:2a:
68:75:1c:48:84:c7:66:1b:40:27:34:44:fb:de:a9:2f:6f:3a:
b8:09:c2:bf:c8:31:14:a9:2e:9c:ee:9f:8e:75:25:a1:25:a9:
ac:f7:6e:97:03:58:2f:8a:e1:b9:7c:c7:8e:fe:8d:09:10:5f:
3f:e5:48:9f:56:4e:d2:c9:4d:5b:8d:95:6f:5b:1e:af:d9:5a:
17:8b:14:1d:21:45:fd:47:00:5c:74:3e:3e:4d:14:c4:28:bf:
22:b1:8d:78
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAab6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTAzMDc1ODUyWhcNMjUxMTA5MDc1ODUyWjAYMRYw
FAYDVQQDEw02OTA4NjBjMS00NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxOUlFQMP4zhzPde4RniTBekMjdnQrC67JQWKJeo9wuHfFZGdzoPWfEkl
mRPddngwhH5lPQ0a0dAk3Sd/CsPX6wE/5uUFLvGeYkB6Ii8/MaB6HyHV43FUuxZi
jjNn+hw1JfhM+7FftiD5ZVpffWZEOj5bp4Q7VZVKhrX8Jy+cEjVG2PU/IfUbztn6
CLgRxlnrunkL75FgBd1oAtqt5c5nufM8xoPMQyy3RuulPmFk0yeIessyABn+HGze
r/0vPLpErDrHsgGC2x1nrbHlIt3NIlLnRcGEzvLH0abOJWxKBlNyYfPsolWohvUK
aIcqCaDs12VbblFqzU17kD6qSEcppQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFP0X
6O/a89IqouwbIAS79qKaiSNYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMkI2MTY2QUI4OEExMUYwODE1MTFEQzZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASawhADBAKawhgwDQYJ
KoZIhvcNAQELBQADggEBALXXbxGPBNSMStFi6D6QZiBkdg0ueDsG6IIeiJs+X/AP
/1jJXL7ZaWyUgSXUWWS2ca+gpWvoUDvH1br+L3C5RyhSwvtJt0c5kLDV1cTBBm/P
bZw3JvG5p7O1WGnjRds0hJ1j97clay4nTt0337nGG2cl7Pl4ERkhNphS3fM5/wDX
078vzuCOErLiwsGfwAQJj4Y5LL93joAd2a28PkBzLJPfKmh1HEiEx2YbQCc0RPve
qS9vOrgJwr/IMRSpLpzun451JaElqaz3bpcDWC+K4bl8x47+jQkQXz/lSJ9WTtLJ
TVuNlW9bHq/ZWheLFB0hRf1HAFx0Pj5NFMQovyKxjXg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:53:42 2025 by rpki-client