Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22130A06604F11F0BD882A92DAE4EC9C.roa
File: 22130A06604F11F0BD882A92DAE4EC9C.roa (raw, json)
Hash identifier: pJ4U6DfTUvA7yFtSv5ergMtB8x5DjL5LGOsR4zpA2Xw=
Subject key identifier: B6:4A:6E:6F:F2:8E:D8:43:B7:E6:62:3A:2C:EE:08:FB:1B:9B:B2:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22130A06604F11F0BD882A92DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 01:09:04 +0000
ROA not before: Mon 14 Jul 2025 01:08:59 +0000
ROA not after: Sat 09 Aug 2025 01:08:59 +0000
asID: 29066
IP address blocks: 154.194.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101772 (0x18d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 01:08:59 2025 GMT
Not After : Aug 9 01:08:59 2025 GMT
Subject: CN=687458b0-a9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:41:93:1c:5f:b7:87:9a:08:ce:2d:3a:96:
d4:2b:1a:f8:ec:d3:bc:4a:92:d8:4c:a3:c6:7b:4c:
f2:1f:22:b0:0c:96:48:10:ab:ca:b5:43:af:3d:41:
ed:c2:1b:d0:ea:b1:aa:22:94:c3:e3:45:67:d7:df:
a9:67:6e:4c:3b:81:dc:c2:76:03:1a:c5:05:27:18:
ce:8c:13:da:51:9e:7f:88:21:fb:ca:47:ab:76:bf:
04:c5:6e:ee:1a:5a:bb:bd:e4:9a:15:09:3c:c4:7c:
21:20:3d:9e:b3:79:d8:87:03:11:ae:33:71:06:7f:
e0:3d:e5:79:ee:f9:ab:79:84:0b:55:42:60:ba:63:
39:9e:3a:ab:f9:e1:4e:76:c0:d2:aa:6c:21:44:45:
17:f7:3c:fe:eb:1b:f2:2b:b5:14:12:68:bb:e4:1f:
f7:92:37:74:3f:29:56:90:b1:96:bc:b9:13:63:31:
d8:3a:6d:20:05:0c:c3:7e:74:ed:2c:bf:19:30:6c:
e2:50:1e:58:c1:ab:36:6d:c7:88:ff:53:53:c0:e2:
83:f3:de:c0:0d:9d:53:d0:24:87:65:3f:cc:2b:dc:
d6:21:7a:8f:74:2c:bc:33:51:9e:41:3a:10:43:7d:
f2:b2:47:2c:58:5c:0e:3d:cf:56:96:68:b1:59:b1:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:6E:6F:F2:8E:D8:43:B7:E6:62:3A:2C:EE:08:FB:1B:9B:B2:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22130A06604F11F0BD882A92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/23
Signature Algorithm: sha256WithRSAEncryption
77:d5:a5:4a:3b:12:17:a5:dc:5d:16:44:5d:17:d7:bf:59:a7:
23:61:52:69:ae:43:a7:dd:71:c4:ec:24:78:61:7d:e0:17:40:
82:da:71:38:f5:a2:47:bc:b8:5a:94:7f:fb:ef:48:59:fb:d0:
34:10:b3:2e:8f:ed:c2:d6:4e:eb:46:ed:89:37:e0:fb:60:e9:
35:b7:c2:d4:f1:be:a4:b8:08:bf:f9:05:2d:f6:48:f3:c3:fc:
dc:ce:89:4b:8c:2f:60:65:a2:93:67:ce:d2:82:00:da:c5:ae:
ba:2b:56:1b:fb:b1:72:7f:46:b4:d3:0f:34:d6:dd:3e:67:6e:
37:cc:dc:e3:75:2c:6b:08:ea:23:6b:f5:78:73:5e:b5:65:f6:
cf:44:3d:3a:46:ca:db:c6:c4:04:79:24:03:ec:1d:c8:24:c6:
61:9c:95:90:04:c3:a3:3f:25:ba:9f:75:19:f4:08:71:09:42:
4d:1c:92:ae:4a:7c:b5:fb:b1:1b:dc:b2:15:6f:13:ae:e5:cb:
c9:df:fd:67:67:d0:92:59:59:01:dd:7e:3d:50:fb:f7:9c:3b:
46:e6:49:6e:ab:8f:56:a3:84:20:ff:50:22:cc:7a:75:f1:a9:
c2:a4:ba:6b:14:d1:d4:e2:12:9f:c3:61:98:1c:c7:68:29:12:
78:06:ad:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY2MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE0MDEwODU5WhcNMjUwODA5MDEwODU5WjAYMRYw
FAYDVQQDEw02ODc0NThiMC1hOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsiJBkxxft4eaCM4tOpbUKxr47NO8SpLYTKPGe0zyHyKwDJZIEKvKtUOv
PUHtwhvQ6rGqIpTD40Vn19+pZ25MO4HcwnYDGsUFJxjOjBPaUZ5/iCH7ykerdr8E
xW7uGlq7veSaFQk8xHwhID2es3nYhwMRrjNxBn/gPeV57vmreYQLVUJgumM5njqr
+eFOdsDSqmwhREUX9zz+6xvyK7UUEmi75B/3kjd0PylWkLGWvLkTYzHYOm0gBQzD
fnTtLL8ZMGziUB5Ywas2bceI/1NTwOKD897ADZ1T0CSHZT/MK9zWIXqPdCy8M1Ge
QToQQ33yskcsWFwOPc9WlmixWbHaNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLZK
bm/yjthDt+ZiOizuCPsbm7I3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjEzMEEwNjYwNEYxMUYwQkQ4ODJBOTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsLgMA0GCSqGSIb3DQEB
CwUAA4IBAQB31aVKOxIXpdxdFkRdF9e/WacjYVJprkOn3XHE7CR4YX3gF0CC2nE4
9aJHvLhalH/770hZ+9A0ELMuj+3C1k7rRu2JN+D7YOk1t8LU8b6kuAi/+QUt9kjz
w/zczolLjC9gZaKTZ87SggDaxa66K1Yb+7Fyf0a00w801t0+Z243zNzjdSxrCOoj
a/V4c161ZfbPRD06RsrbxsQEeSQD7B3IJMZhnJWQBMOjPyW6n3UZ9AhxCUJNHJKu
Sny1+7Eb3LIVbxOu5cvJ3/1nZ9CSWVkB3X49UPv3nDtG5kluq49Wo4Qg/1AizHp1
8anCpLprFNHU4hKfw2GYHMdoKRJ4Bq1Z
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:01 2025 by rpki-client