Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA7B54258EF11F08A6BFAC0DAE4EC9C.roa
File: 1CA7B54258EF11F08A6BFAC0DAE4EC9C.roa (raw, json)
Hash identifier: rpRrjqbmOFSNSmi+6tjLUKW0nmFC8LlLP2Flce/gAYA=
Subject key identifier: 92:6F:F4:98:E8:24:08:2E:77:80:9D:B5:DA:9D:C7:C2:00:B7:7A:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA7B54258EF11F08A6BFAC0DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 15:54:05 +0000
ROA not before: Fri 04 Jul 2025 15:54:00 +0000
ROA not after: Sun 24 Aug 2025 15:54:00 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100986 (0x18a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 15:54:00 2025 GMT
Not After : Aug 24 15:54:00 2025 GMT
Subject: CN=6867f91d-790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:3d:26:b7:1e:f9:6d:58:7b:db:2b:aa:1b:
3e:59:b1:9f:47:cc:91:69:47:fa:47:1b:f8:be:9f:
b2:f2:3d:e0:22:36:bc:1b:ec:51:48:25:bc:1a:ea:
5b:a2:64:61:24:f3:0f:28:36:d2:4d:88:53:aa:67:
4f:28:95:0c:58:24:37:eb:c4:75:cc:82:80:36:79:
d0:f6:95:0f:57:e3:99:ec:90:2a:29:4a:79:cf:33:
4f:fc:55:96:d9:a7:15:7c:3c:dc:86:2b:de:03:d7:
51:4c:b1:d5:47:46:68:02:74:66:06:4b:47:b8:62:
1f:93:26:b7:af:b0:34:a8:4c:27:13:f9:4d:18:31:
32:9d:96:e2:c0:75:be:34:d4:45:3e:5a:b2:8a:06:
b4:75:8a:1f:7c:92:18:c2:19:b2:71:dd:cb:da:0c:
30:0d:3a:81:28:0d:fa:7e:19:a9:46:59:c5:e3:67:
7e:68:06:39:59:b1:5f:9f:a2:3b:3d:3c:3f:fa:6b:
be:b1:cb:9b:e0:b0:6b:45:ea:7b:ca:c2:21:7b:7c:
42:4f:53:19:ad:19:36:ff:0b:f2:f8:07:16:e1:75:
14:df:42:c5:86:38:0a:a0:e8:85:9f:22:41:2b:9f:
e2:32:b4:84:78:14:47:91:7e:e5:ad:22:2b:d5:97:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6F:F4:98:E8:24:08:2E:77:80:9D:B5:DA:9D:C7:C2:00:B7:7A:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA7B54258EF11F08A6BFAC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:49:37:fc:56:02:af:02:21:7c:4a:e0:1a:4c:aa:c8:e0:31:
fa:ef:fc:5f:3d:1b:26:2b:7b:95:d1:85:4f:de:d6:84:53:c1:
9c:85:38:86:14:72:66:98:77:99:51:05:88:6f:1a:af:63:01:
23:3e:b0:15:9d:2a:73:a9:7d:df:da:af:45:55:a0:b9:fd:0b:
50:a1:5e:2c:9f:e1:f0:1b:35:d8:59:28:7e:47:04:fa:3f:8e:
4d:70:0c:1b:8d:52:68:06:c0:93:76:d7:a3:4c:52:d5:86:a5:
d7:0f:ad:bd:63:c8:ad:df:3d:9e:93:8e:98:fc:36:dd:25:72:
02:aa:b6:4d:4b:59:35:35:c2:6e:27:56:a7:58:c3:8e:5d:04:
de:17:62:ba:7f:ab:49:43:8d:8c:be:f6:5a:f3:cb:0c:19:bc:
ec:c3:ae:14:40:06:2d:40:b4:6c:19:b4:7e:27:9d:af:e1:ac:
64:ce:61:aa:0c:c0:bd:b6:83:b1:4d:10:41:0c:b7:75:94:34:
df:06:f0:b6:d7:a9:24:9c:85:aa:91:b3:8c:61:93:0b:b5:93:
7d:6a:ab:10:1e:dc:dd:31:f8:94:2c:fd:e7:13:b9:f2:a3:37:
79:5b:c1:bb:4c:dc:39:dc:cb:a4:8a:4f:a4:4c:ce:a5:9c:41:
83:bf:a1:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYp6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA0MTU1NDAwWhcNMjUwODI0MTU1NDAwWjAYMRYw
FAYDVQQDEw02ODY3ZjkxZC03OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4s49Jrce+W1Ye9srqhs+WbGfR8yRaUf6Rxv4vp+y8j3gIja8G+xRSCW8
GupbomRhJPMPKDbSTYhTqmdPKJUMWCQ368R1zIKANnnQ9pUPV+OZ7JAqKUp5zzNP
/FWW2acVfDzchiveA9dRTLHVR0ZoAnRmBktHuGIfkya3r7A0qEwnE/lNGDEynZbi
wHW+NNRFPlqyiga0dYoffJIYwhmycd3L2gwwDTqBKA36fhmpRlnF42d+aAY5WbFf
n6I7PTw/+mu+scub4LBrRep7ysIhe3xCT1MZrRk2/wvy+AcW4XUU30LFhjgKoOiF
nyJBK5/iMrSEeBRHkX7lrSIr1ZdWSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJJv
9JjoJAgud4Cdtdqdx8IAt3q9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQ0E3QjU0MjU4RUYxMUYwOEE2QkZBQzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQDHSTf8VgKvAiF8SuAaTKrI4DH67/xfPRsmK3uV0YVP3taEU8GchTiG
FHJmmHeZUQWIbxqvYwEjPrAVnSpzqX3f2q9FVaC5/QtQoV4sn+HwGzXYWSh+RwT6
P45NcAwbjVJoBsCTdtejTFLVhqXXD629Y8it3z2ek46Y/DbdJXICqrZNS1k1NcJu
J1anWMOOXQTeF2K6f6tJQ42MvvZa88sMGbzsw64UQAYtQLRsGbR+J52v4axkzmGq
DMC9toOxTRBBDLd1lDTfBvC216kknIWqkbOMYZMLtZN9aqsQHtzdMfiULP3nE7ny
ozd5W8G7TNw53Mukik+kTM6lnEGDv6F9
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:42 2025 by rpki-client