Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7585C434A36211F0B49A83AADAE4EC9C.roa
File: 7585C434A36211F0B49A83AADAE4EC9C.roa (raw, json)
Hash identifier: mzEcLu+I7zJJUaAnBgEPPDoKGrDo3rYdMmkKp6vkaKk=
Subject key identifier: E4:74:96:A2:94:B3:37:D5:DB:51:63:77:C0:9E:53:02:79:35:18:21
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0416
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7585C434A36211F0B49A83AADAE4EC9C.roa
Signing time: Tue 07 Oct 2025 09:46:13 +0000
ROA not before: Tue 07 Oct 2025 09:46:07 +0000
ROA not after: Tue 31 Dec 2030 09:46:07 +0000
asID: 15964
IP address blocks: 154.72.128.0/18 maxlen: 18
154.72.128.0/24 maxlen: 24
154.72.129.0/24 maxlen: 24
154.72.144.0/24 maxlen: 24
154.72.145.0/24 maxlen: 24
154.72.148.0/24 maxlen: 24
154.72.149.0/24 maxlen: 24
154.72.150.0/24 maxlen: 24
154.72.151.0/24 maxlen: 24
154.72.152.0/24 maxlen: 24
154.72.153.0/24 maxlen: 24
154.72.154.0/24 maxlen: 24
154.72.155.0/24 maxlen: 24
154.72.156.0/24 maxlen: 24
154.72.157.0/24 maxlen: 24
154.72.158.0/24 maxlen: 24
154.72.159.0/24 maxlen: 24
154.72.167.0/24 maxlen: 24
154.72.168.0/24 maxlen: 24
154.72.169.0/24 maxlen: 24
154.72.170.0/24 maxlen: 24
154.72.171.0/24 maxlen: 24
154.72.172.0/24 maxlen: 24
154.72.173.0/24 maxlen: 24
154.72.174.0/24 maxlen: 24
154.72.175.0/24 maxlen: 24
154.72.185.0/24 maxlen: 24
154.72.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1046 (0x416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 7 09:46:07 2025 GMT
Not After : Dec 31 09:46:07 2030 GMT
Subject: CN=68e4e164-888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:02:62:7a:65:0e:af:63:ca:9a:ce:20:84:
80:08:2e:e6:de:c7:73:98:58:ef:89:cb:b7:01:f5:
33:6f:e7:b0:91:d2:4d:95:a0:ff:8f:8b:67:e3:69:
1c:9e:b9:0b:62:a0:a3:58:4e:da:9e:08:9c:e5:33:
a0:e2:1c:d6:05:f0:be:c6:6d:18:93:2d:aa:ae:42:
72:23:26:bf:25:00:52:17:6f:94:04:f6:63:23:e8:
7a:ef:5f:ea:96:13:5e:b2:5e:e8:ed:71:e3:34:07:
1f:d7:22:8e:bd:67:04:15:61:45:c0:19:bb:d6:ec:
77:58:71:5f:3a:9f:05:93:5b:74:a3:14:bd:7f:fb:
17:99:dd:d6:e8:09:1b:31:e6:98:fc:de:41:d1:d7:
bc:db:d6:7b:c7:88:8a:ac:a6:06:f1:f2:18:97:37:
34:2d:fd:90:9c:ff:2b:8e:34:d5:82:fa:6a:09:b4:
03:ae:4e:41:0f:13:ba:98:6c:72:2b:de:1a:56:a2:
96:6f:93:a2:37:f9:a3:e8:70:9e:26:f9:a5:5f:0d:
00:18:4b:4e:18:fd:db:33:91:fe:fc:ad:a6:d0:38:
9d:1c:14:6a:df:f3:40:c4:a7:06:87:e0:7f:eb:43:
da:08:df:b3:b6:76:4f:ba:d6:ba:65:dc:3f:7b:c0:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:96:A2:94:B3:37:D5:DB:51:63:77:C0:9E:53:02:79:35:18:21
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/7585C434A36211F0B49A83AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
30:c8:99:b4:5b:2a:a3:32:4c:42:e5:d0:f2:16:69:1b:31:e8:
85:7f:d1:79:f5:47:66:5b:a8:dd:2e:ec:11:df:05:df:78:9a:
1a:d8:5e:6a:ae:bb:8b:9d:55:33:43:57:9b:0e:8b:1c:62:0b:
f9:1a:3d:8d:87:55:10:4d:33:f6:b3:87:44:63:87:18:f9:a4:
a1:e9:8a:d5:6e:8e:ff:a7:42:fb:80:96:a9:d0:bb:41:d7:77:
4b:45:87:9e:c6:8d:69:43:d7:09:87:af:ed:33:fe:ca:ad:ac:
83:ae:a4:c0:bd:58:4b:0e:ae:7e:ff:07:97:ed:57:a1:6f:ff:
77:81:31:04:9f:09:c1:74:34:65:58:e6:64:7d:70:25:cc:da:
b2:00:bc:5b:54:99:25:62:d3:6d:74:b8:2f:5e:9b:11:b4:59:
80:d2:30:45:a4:71:11:fa:a3:4c:64:e2:c2:8c:48:4e:2f:c4:
52:55:e3:6e:d1:21:bb:08:f5:68:0b:8e:39:d4:d2:cc:18:d8:
61:3d:20:69:b4:1f:e1:ea:d9:0f:64:14:36:28:81:0f:ad:a0:
04:29:c1:41:c6:4d:97:82:6e:f8:d0:7b:88:c1:c6:2b:21:b5:
cc:90:0a:1d:b4:25:1a:5f:35:6f:ec:4d:52:d6:ca:a2:a7:66:
aa:0b:44:83
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNBRjExMC8GA1UEBRMoQzEwOTBEMzdEQTlGRkVFRTFBOUMyMjlCQUZGMTE5
MEJEMjJFODkzNDAeFw0yNTEwMDcwOTQ2MDdaFw0zMDEyMzEwOTQ2MDdaMBgxFjAU
BgNVBAMTDTY4ZTRlMTY0LTg4OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCi5QJiemUOr2PKms4ghIAILubex3OYWO+Jy7cB9TNv57CR0k2VoP+Pi2fj
aRyeuQtioKNYTtqeCJzlM6DiHNYF8L7GbRiTLaquQnIjJr8lAFIXb5QE9mMj6Hrv
X+qWE16yXujtceM0Bx/XIo69ZwQVYUXAGbvW7HdYcV86nwWTW3SjFL1/+xeZ3dbo
CRsx5pj83kHR17zb1nvHiIqspgbx8hiXNzQt/ZCc/yuONNWC+moJtAOuTkEPE7qY
bHIr3hpWopZvk6I3+aPocJ4m+aVfDQAYS04Y/dszkf78rabQOJ0cFGrf80DEpwaH
4H/rQ9oI37O2dk+61rpl3D97wPEjAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5HSW
opSzN9XbUWN3wJ5TAnk1GCEwHwYDVR0jBBgwFoAUwQkNN9qf/u4anCKbr/EZC9Iu
iTQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYxMjIyNDY4L3dRa05O
OXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dRa05OOXFmX3U0YW5DS2JyX0VaQzlJdWlUUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk1OTFDLzM0NzQwMzJFQzI0NzExRURBRkE2Qzc5RkYx
MjIyNDY4Lzc1ODVDNDM0QTM2MjExRjBCNDlBODNBQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaaSIAwDQYJKoZIhvcNAQEL
BQADggEBADDImbRbKqMyTELl0PIWaRsx6IV/0Xn1R2ZbqN0u7BHfBd94mhrYXmqu
u4udVTNDV5sOixxiC/kaPY2HVRBNM/azh0Rjhxj5pKHpitVujv+nQvuAlqnQu0HX
d0tFh57GjWlD1wmHr+0z/sqtrIOupMC9WEsOrn7/B5ftV6Fv/3eBMQSfCcF0NGVY
5mR9cCXM2rIAvFtUmSVi0210uC9emxG0WYDSMEWkcRH6o0xk4sKMSE4vxFJV427R
IbsI9WgLjjnU0swY2GE9IGm0H+Hq2Q9kFDYogQ+toAQpwUHGTZeCbvjQe4jBxish
tcyQCh20JRpfNW/sTVLWyqKnZqoLRIM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:16:14 2025 by rpki-client