Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D92FD40963911F09C4AB5D4DAE4EC9C.roa
File: 1D92FD40963911F09C4AB5D4DAE4EC9C.roa (raw, json)
Hash identifier: hx1iSAdUtQpbo5h0fJpR6C0E384dEaDbeziKc6as7tI=
Subject key identifier: 7E:14:F3:D3:05:8C:DC:D4:2D:4B:3F:EA:B3:3C:80:C4:70:59:86:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A036
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D92FD40963911F09C4AB5D4DAE4EC9C.roa
Signing time: Sat 20 Sep 2025 15:47:30 +0000
ROA not before: Sat 20 Sep 2025 15:47:25 +0000
ROA not after: Sun 26 Oct 2025 15:47:25 +0000
asID: 214483
IP address blocks: 154.202.128.0/24 maxlen: 24
154.202.129.0/24 maxlen: 24
154.202.130.0/24 maxlen: 24
154.202.131.0/24 maxlen: 24
154.202.132.0/24 maxlen: 24
154.202.133.0/24 maxlen: 24
154.202.134.0/24 maxlen: 24
154.202.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106550 (0x1a036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 20 15:47:25 2025 GMT
Not After : Oct 26 15:47:25 2025 GMT
Subject: CN=68cecc92-52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:94:47:eb:bb:07:ae:4f:35:f9:69:c7:00:
a4:f9:2d:5a:af:67:08:00:fa:12:3d:f2:fc:3d:5e:
c7:8f:12:01:2b:24:67:c5:09:dd:95:fa:97:50:a5:
ba:31:15:ff:72:18:e1:ae:0e:2f:5c:b7:d0:d2:02:
f9:c7:22:69:4a:0f:49:e2:f7:e4:e7:33:40:78:41:
a2:d1:e8:0c:f9:d6:a1:30:14:50:29:75:7b:3c:bd:
a5:41:80:90:a4:7a:be:d7:5b:cd:f4:b2:71:45:9e:
ae:79:dd:ca:68:c5:31:5c:67:01:6d:26:93:94:20:
ff:2f:98:66:8e:93:7c:d8:09:d4:28:b3:11:b4:02:
03:fa:a6:e1:fb:f0:9f:74:bc:b5:7b:92:1b:1a:ea:
b5:7f:cd:9b:a2:bf:3a:3a:c4:ea:ed:71:37:ba:d1:
15:5a:f7:67:d4:de:6c:c9:e4:c0:e6:3a:00:be:d0:
ac:d7:30:e3:08:9b:82:00:e6:ef:a3:c2:ed:4e:a7:
9d:2f:a4:08:d8:59:32:a8:d5:53:a3:af:bf:98:98:
b2:ee:3f:45:8b:84:a9:59:b4:64:29:bd:43:68:e8:
80:80:33:0f:a3:1b:38:53:7d:31:45:c3:34:6d:55:
b7:66:37:80:d0:b4:29:65:3f:30:83:9d:e2:b7:70:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:F3:D3:05:8C:DC:D4:2D:4B:3F:EA:B3:3C:80:C4:70:59:86:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D92FD40963911F09C4AB5D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.128.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:9e:fd:6d:8e:87:91:18:ea:19:9c:9d:9a:56:49:c1:8a:39:
5e:cd:01:23:c0:a0:ee:5a:15:0a:e9:14:4e:92:11:8d:83:12:
a6:de:ac:22:8d:90:30:75:9a:c8:3e:ee:37:92:a4:ec:cf:97:
f2:b0:e9:6c:6a:52:93:c4:54:e4:9f:45:e3:cd:ca:b2:30:bb:
71:8b:e1:06:e4:9f:7b:25:2c:e0:f5:7f:bd:a3:10:7c:23:a3:
fb:2e:45:bb:20:98:0f:2b:3d:27:ac:5a:17:4b:17:a0:72:e2:
ac:0c:8a:b9:b2:8b:bf:f6:28:f0:9a:6c:8e:c8:f8:4a:16:6f:
bd:64:88:32:ac:21:5f:61:7d:b9:57:67:38:ec:26:37:a7:7f:
be:7b:e0:96:31:3e:f2:b1:dd:f8:3f:7e:cb:13:41:90:32:b1:
fc:32:32:0b:7b:9c:53:ff:27:3a:a8:13:07:3c:e3:82:bb:b5:
03:dd:96:3f:ed:d9:a1:68:ba:51:ae:26:f4:e7:88:b3:34:a4:
29:18:55:ab:12:25:7e:1f:a3:3a:28:a3:91:fd:06:e0:66:4a:
bd:4e:d4:0b:55:bc:0f:b0:3f:38:83:f1:fb:1c:f6:30:b4:cf:
5a:ec:f7:38:58:21:2f:15:00:7e:b0:f9:7e:c3:ca:0a:20:2d:
59:07:be:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaA2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTIwMTU0NzI1WhcNMjUxMDI2MTU0NzI1WjAYMRYw
FAYDVQQDEw02OGNlY2M5Mi01MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtiOUR+u7B65PNflpxwCk+S1ar2cIAPoSPfL8PV7HjxIBKyRnxQndlfqX
UKW6MRX/chjhrg4vXLfQ0gL5xyJpSg9J4vfk5zNAeEGi0egM+dahMBRQKXV7PL2l
QYCQpHq+11vN9LJxRZ6ued3KaMUxXGcBbSaTlCD/L5hmjpN82AnUKLMRtAID+qbh
+/CfdLy1e5IbGuq1f82bor86OsTq7XE3utEVWvdn1N5syeTA5joAvtCs1zDjCJuC
AObvo8LtTqedL6QI2FkyqNVTo6+/mJiy7j9Fi4SpWbRkKb1DaOiAgDMPoxs4U30x
RcM0bVW3ZjeA0LQpZT8wg53it3A+ewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH4U
89MFjNzULUs/6rM8gMRwWYYeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDkyRkQ0MDk2MzkxMUYwOUM0QUI1RDREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsqAMA0GCSqGSIb3DQEB
CwUAA4IBAQClnv1tjoeRGOoZnJ2aVknBijlezQEjwKDuWhUK6RROkhGNgxKm3qwi
jZAwdZrIPu43kqTsz5fysOlsalKTxFTkn0XjzcqyMLtxi+EG5J97JSzg9X+9oxB8
I6P7LkW7IJgPKz0nrFoXSxegcuKsDIq5sou/9ijwmmyOyPhKFm+9ZIgyrCFfYX25
V2c47CY3p3++e+CWMT7ysd34P37LE0GQMrH8MjILe5xT/yc6qBMHPOOCu7UD3ZY/
7dmhaLpRrib054izNKQpGFWrEiV+H6M6KKOR/QbgZkq9TtQLVbwPsD84g/H7HPYw
tM9a7Pc4WCEvFQB+sPl+w8oKIC1ZB75Y
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:20 2025 by rpki-client