Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA23BBA664411F0B31FECF3DAE4EC9C.roa
File: 0CA23BBA664411F0B31FECF3DAE4EC9C.roa (raw, json)
Hash identifier: DKfFijIrqerBrz+MF0A7HYoNqppyfTw0KX+eyCag9iw=
Subject key identifier: 06:F6:5D:84:A2:C1:90:9B:FC:89:9D:E6:75:A8:E7:D4:F2:C3:7B:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA23BBA664411F0B31FECF3DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 15:04:51 +0000
ROA not before: Mon 21 Jul 2025 15:04:46 +0000
ROA not after: Sun 31 Aug 2025 15:04:46 +0000
asID: 214238
IP address blocks: 154.81.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Jul 2025 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102015 (0x18e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 15:04:46 2025 GMT
Not After : Aug 31 15:04:46 2025 GMT
Subject: CN=687e5713-39fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:c0:f3:08:59:b4:5f:ca:84:8a:99:e3:5a:
c8:05:6d:9a:13:c2:b9:70:bc:70:92:b3:4e:09:15:
43:72:44:a5:48:5d:1b:15:a3:c6:aa:88:85:7b:d2:
7b:97:76:5d:2e:bc:65:fb:c1:4b:0a:c5:95:cc:ea:
ed:64:23:7d:65:91:4f:e8:19:8d:b0:45:37:66:b0:
1a:ae:d2:ce:90:d5:58:7c:d7:3f:c5:7d:50:e1:ec:
d8:d8:dc:71:0e:cb:f6:f4:67:3a:6d:51:40:1c:66:
2f:f8:e3:2d:5f:63:c4:22:73:e1:27:c5:bd:f7:33:
1d:ba:95:99:a3:85:03:49:73:8a:a7:b7:28:1c:77:
a5:64:c6:89:7a:34:8b:02:cc:7b:58:e3:63:0d:c6:
43:c7:97:e3:29:b3:a4:ce:db:31:b6:ed:66:2f:70:
4a:ab:df:7f:cc:7a:09:05:c5:ff:15:17:ca:37:e4:
19:d9:3c:c7:83:e9:4b:90:a5:9c:b5:1e:03:7e:b8:
f5:07:8c:2e:21:60:b3:09:59:85:32:89:2b:e9:33:
c5:73:c0:37:ee:91:63:d7:dd:55:a0:d0:1a:df:88:
6b:72:49:a2:d2:2f:fd:33:26:5f:43:b1:2d:99:57:
2f:73:dd:9c:2a:ed:f1:7c:5e:5d:52:69:bc:91:29:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:5D:84:A2:C1:90:9B:FC:89:9D:E6:75:A8:E7:D4:F2:C3:7B:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA23BBA664411F0B31FECF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a9:00:a0:78:37:1a:07:76:6b:45:64:87:fa:55:b5:a7:cc:
ea:83:eb:b8:20:66:d3:14:96:26:6c:ef:59:ac:5d:40:fc:71:
c8:09:8f:9e:d3:65:4c:0f:d4:37:4b:c8:bb:ae:a3:97:5c:5a:
36:fa:26:cd:79:84:1a:4d:be:96:65:20:f9:ac:64:77:2b:29:
c8:ca:7d:f7:ba:6e:1a:08:36:78:ba:04:a8:b8:ec:6e:0e:c3:
1b:01:c2:91:40:c3:d8:af:a1:9d:52:8e:bf:d5:91:29:09:ea:
50:dd:2f:65:3f:d3:6a:08:8b:7b:25:4b:bf:1d:ac:74:25:a8:
be:da:c7:07:57:08:62:94:88:4f:f1:67:2f:2f:4b:88:97:3e:
50:ed:b8:15:cd:45:1b:80:15:6b:5a:c0:19:a3:aa:34:c7:80:
38:70:5b:fa:46:fd:7a:50:eb:82:d7:c0:55:3a:61:6a:a3:67:
c1:0d:e5:20:64:16:95:41:df:86:07:dd:70:a9:dc:4e:ce:6f:
98:fa:3d:6a:b3:1d:cb:36:53:5a:50:ee:22:57:4d:c2:eb:7d:
aa:c8:92:44:b8:bf:58:e6:3d:be:c8:df:bb:4f:f9:ce:bf:e5:
1b:c5:43:53:1f:fe:00:0a:c7:2d:6e:01:1b:82:20:5b:64:4f:
6b:41:46:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY5/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIxMTUwNDQ2WhcNMjUwODMxMTUwNDQ2WjAYMRYw
FAYDVQQDEw02ODdlNTcxMy0zOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxTjA8whZtF/KhIqZ41rIBW2aE8K5cLxwkrNOCRVDckSlSF0bFaPGqoiF
e9J7l3ZdLrxl+8FLCsWVzOrtZCN9ZZFP6BmNsEU3ZrAartLOkNVYfNc/xX1Q4ezY
2NxxDsv29Gc6bVFAHGYv+OMtX2PEInPhJ8W99zMdupWZo4UDSXOKp7coHHelZMaJ
ejSLAsx7WONjDcZDx5fjKbOkztsxtu1mL3BKq99/zHoJBcX/FRfKN+QZ2TzHg+lL
kKWctR4Dfrj1B4wuIWCzCVmFMokr6TPFc8A37pFj191VoNAa34hrckmi0i/9MyZf
Q7EtmVcvc92cKu3xfF5dUmm8kSk1XwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAb2
XYSiwZCb/Imd5nWo59Tyw3uZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQ0EyM0JCQTY2NDQxMUYwQjMxRkVDRjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlHBMA0GCSqGSIb3DQEB
CwUAA4IBAQADqQCgeDcaB3ZrRWSH+lW1p8zqg+u4IGbTFJYmbO9ZrF1A/HHICY+e
02VMD9Q3S8i7rqOXXFo2+ibNeYQaTb6WZSD5rGR3KynIyn33um4aCDZ4ugSouOxu
DsMbAcKRQMPYr6GdUo6/1ZEpCepQ3S9lP9NqCIt7JUu/Hax0Jai+2scHVwhilIhP
8WcvL0uIlz5Q7bgVzUUbgBVrWsAZo6o0x4A4cFv6Rv16UOuC18BVOmFqo2fBDeUg
ZBaVQd+GB91wqdxOzm+Y+j1qsx3LNlNaUO4iV03C632qyJJEuL9Y5j2+yN+7T/nO
v+UbxUNTH/4ACsctbgEbgiBbZE9rQUYx
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:59:46 2025 by rpki-client