Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28907342AB3511F0B71CC19BDAE4EC9C.roa
File: 28907342AB3511F0B71CC19BDAE4EC9C.roa (raw, json)
Hash identifier: xG8hJAejNHUCC0p3sqVdps2vnnM8sDXzQIv4YWm0r3w=
Subject key identifier: 81:87:10:AB:DE:94:C8:B0:C7:51:12:E9:80:DA:0A:71:CD:F6:A1:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A418
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28907342AB3511F0B71CC19BDAE4EC9C.roa
Signing time: Fri 17 Oct 2025 08:42:05 +0000
ROA not before: Fri 17 Oct 2025 08:42:01 +0000
ROA not after: Mon 24 Nov 2025 08:42:01 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107544 (0x1a418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 17 08:42:01 2025 GMT
Not After : Nov 24 08:42:01 2025 GMT
Subject: CN=68f2015d-ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:d7:14:84:5d:4e:02:32:4d:db:07:1d:03:
3b:59:5b:f4:8f:4a:e9:7e:18:e1:a7:dd:c1:3b:88:
7f:a0:be:4d:b5:3d:95:a8:07:29:6a:e9:f8:2d:fc:
64:5c:1d:d9:41:97:7d:eb:f7:0f:9a:52:4f:24:ad:
5f:cb:28:c3:8d:35:90:b1:7d:39:ee:77:64:c0:8c:
30:e3:c0:58:53:2e:b0:49:7f:42:3c:7b:34:cc:cd:
14:9c:a3:95:a9:7c:9e:cd:3b:8a:30:88:fe:fc:4a:
a5:ec:2d:ba:8d:53:13:ec:74:5b:0d:fe:19:19:a0:
e7:2f:16:83:39:ce:54:ab:03:30:a5:0c:7e:3d:20:
a7:fb:f9:25:6d:f0:ab:0f:2a:99:3a:32:44:0a:43:
b4:15:ce:d4:9b:58:4d:68:5f:ce:d5:e4:04:3f:2a:
a4:f3:cc:be:42:2b:7e:74:dc:db:c2:7a:7d:8f:22:
5f:ae:81:41:67:7a:d6:d2:53:a4:3f:44:3d:40:24:
49:33:36:75:3e:6c:cd:aa:57:df:9e:db:42:e7:98:
1b:5b:83:77:54:85:c4:7d:42:4e:7a:da:48:5f:aa:
0a:ee:6f:67:15:b0:1c:bc:11:cb:c6:aa:58:02:be:
ba:c0:72:ad:14:d5:b9:f4:0a:03:7d:19:62:8d:3c:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:87:10:AB:DE:94:C8:B0:C7:51:12:E9:80:DA:0A:71:CD:F6:A1:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28907342AB3511F0B71CC19BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5e:27:d9:01:a7:b6:04:ec:a1:07:84:f0:3d:45:49:1c:69:
ee:b7:25:54:73:41:df:19:0a:55:c2:ae:74:3b:e5:d2:72:0f:
60:80:6a:bc:34:c8:76:ef:76:43:71:4c:2b:04:48:07:ee:2f:
f5:7f:5a:8e:58:7f:62:42:84:c1:b8:74:d2:5d:03:9c:27:0e:
23:84:af:c1:70:f8:80:f6:78:1e:0d:ab:ee:b4:cb:06:9e:94:
e2:5a:8c:7c:4d:a5:a9:fc:77:1c:93:b8:44:42:17:f7:07:51:
b8:69:ac:0b:e4:7d:bb:3e:c7:fa:6f:78:1a:7a:83:33:a4:94:
d3:a1:08:3b:86:35:36:a0:82:6f:27:78:d5:42:fd:34:04:f2:
f6:1f:fa:c4:a0:9c:d1:bb:9a:98:41:c8:6f:12:11:7b:be:1b:
0f:b3:9f:1a:43:f9:b6:7d:51:c5:a8:30:ac:0a:a2:80:2f:d7:
b5:15:13:75:5d:74:b0:6c:57:02:69:7d:53:21:a9:c2:f4:88:
3e:b4:94:f7:10:4d:bf:9f:ec:be:56:04:62:dd:bd:f9:02:2b:
58:7b:d3:0e:43:21:1d:f6:e2:81:32:e9:54:81:44:75:6d:98:
1b:93:9d:24:f1:97:d3:e4:5c:a7:1a:d8:d5:dc:6a:51:af:63:
6f:b1:0b:07
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAaQYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDE3MDg0MjAxWhcNMjUxMTI0MDg0MjAxWjAYMRYw
FAYDVQQDEw02OGYyMDE1ZC1hZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArfvXFIRdTgIyTdsHHQM7WVv0j0rpfhjhp93BO4h/oL5NtT2VqAcpaun4
LfxkXB3ZQZd96/cPmlJPJK1fyyjDjTWQsX057ndkwIww48BYUy6wSX9CPHs0zM0U
nKOVqXyezTuKMIj+/Eql7C26jVMT7HRbDf4ZGaDnLxaDOc5UqwMwpQx+PSCn+/kl
bfCrDyqZOjJECkO0Fc7Um1hNaF/O1eQEPyqk88y+Qit+dNzbwnp9jyJfroFBZ3rW
0lOkP0Q9QCRJMzZ1PmzNqlffnttC55gbW4N3VIXEfUJOetpIX6oK7m9nFbAcvBHL
xqpYAr66wHKtFNW59AoDfRlijTzT3QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFIGH
EKvelMiwx1ES6YDaCnHN9qFlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yODkwNzM0MkFCMzUxMUYwQjcxQ0MxOUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAFteJ9kBp7YE7KEHhPA9RUkcae63JVRzQd8Z
ClXCrnQ75dJyD2CAarw0yHbvdkNxTCsESAfuL/V/Wo5Yf2JChMG4dNJdA5wnDiOE
r8Fw+ID2eB4Nq+60ywaelOJajHxNpan8dxyTuERCF/cHUbhprAvkfbs+x/pveBp6
gzOklNOhCDuGNTaggm8neNVC/TQE8vYf+sSgnNG7mphByG8SEXu+Gw+znxpD+bZ9
UcWoMKwKooAv17UVE3VddLBsVwJpfVMhqcL0iD60lPcQTb+f7L5WBGLdvfkCK1h7
0w5DIR324oEy6VSBRHVtmBuTnSTxl9PkXKca2NXcalGvY2+xCwc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:33 2025 by rpki-client