Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E0F3F6599511F097562A83DAE4EC9C.roa
File: 30E0F3F6599511F097562A83DAE4EC9C.roa (raw, json)
Hash identifier: VMeb+TfP0jGnj3Du8VQthMhxpOMGS7bb6pCmJSRNEH0=
Subject key identifier: BB:77:F5:14:D0:8B:52:81:53:C0:F6:F3:7A:1B:02:16:42:E1:C2:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E0F3F6599511F097562A83DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 11:42:57 +0000
ROA not before: Sat 05 Jul 2025 11:42:51 +0000
ROA not after: Wed 13 Aug 2025 11:42:51 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Jul 2025 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101096 (0x18ae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 11:42:51 2025 GMT
Not After : Aug 13 11:42:51 2025 GMT
Subject: CN=68690fc1-9a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:49:b4:d5:d2:f6:7a:a0:94:7d:64:93:42:
3a:f3:6a:70:41:00:a6:a1:d5:0f:57:4b:18:9b:39:
b7:76:60:e7:cd:b0:21:8e:57:28:fd:5a:41:b2:16:
1f:c0:f7:e9:db:08:bd:69:dd:73:21:6f:4c:81:ac:
15:01:91:ad:b8:60:a8:a2:76:19:c6:c4:9c:73:e1:
2b:5c:0d:d3:31:bd:3f:7f:ad:51:e4:c4:71:41:f8:
38:df:27:a9:40:b9:36:5e:16:96:82:d1:70:08:22:
f7:4e:02:f3:ae:04:2a:3b:a1:a7:e9:36:4d:ce:c6:
f8:a8:e4:8f:d5:b8:a9:ab:3f:e8:7a:f2:f6:6d:06:
4e:61:a5:95:55:ed:90:bd:43:3a:0e:31:81:ac:ca:
46:02:99:51:32:33:d3:6f:99:9f:b0:f8:1f:83:12:
77:17:ad:b9:57:d8:4f:d9:9d:98:f6:09:09:66:00:
9e:47:cd:5c:01:da:ae:ee:70:b4:1d:93:69:91:c0:
80:4c:a9:5e:e8:96:3f:30:88:56:9f:f6:34:f7:7b:
d2:08:cb:58:13:df:ad:86:27:e9:5b:86:61:35:7c:
10:e3:fb:cf:38:d7:32:b2:b9:b8:73:a3:74:30:76:
ab:e7:a9:c5:11:c1:30:0c:ef:fe:db:fb:09:20:38:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:F5:14:D0:8B:52:81:53:C0:F6:F3:7A:1B:02:16:42:E1:C2:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30E0F3F6599511F097562A83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e1:f2:bf:43:39:c8:cf:af:69:27:09:cc:e4:f5:b3:5b:0b:
fa:c4:62:f1:1a:68:04:83:1c:13:c1:23:70:58:51:ca:1c:92:
e4:29:5b:b6:3d:3c:43:37:d5:6a:5a:b7:c7:4e:b3:bc:ee:f8:
95:1e:8d:01:5f:92:30:cc:fc:58:8c:d2:9f:46:46:4e:12:78:
7f:ec:61:be:b1:f9:25:d9:f4:ec:bc:b1:0a:46:0a:6a:fb:29:
96:40:5f:22:d2:ad:bf:ef:22:0b:ea:a0:37:6d:c5:94:fa:ea:
68:01:0b:c4:b3:a9:9a:f7:50:19:60:f5:11:ca:89:2a:30:f4:
77:a6:3d:61:2f:fc:b8:ef:1e:09:9c:ff:da:cb:6e:73:16:6d:
10:35:ca:58:3b:6c:1c:ea:8c:40:60:70:3a:4a:af:d4:f4:be:
f0:1d:3d:29:da:e2:5d:e9:2e:41:0c:3c:b6:e3:ea:38:b4:13:
5e:b4:5e:a6:9b:2c:88:7e:df:86:19:ad:d3:9a:ac:64:b7:c7:
89:db:95:fc:8c:69:c2:a8:f5:0e:2e:ce:26:be:9b:b7:3c:93:
dd:f3:5d:e6:06:55:db:29:2a:7e:cb:c4:ce:d4:26:dd:5b:ff:
e0:bf:02:e5:38:15:eb:ae:7a:f6:9b:1c:d0:4d:fa:88:a2:8c:
a1:fd:98:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYroMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTE0MjUxWhcNMjUwODEzMTE0MjUxWjAYMRYw
FAYDVQQDEw02ODY5MGZjMS05YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtLRJtNXS9nqglH1kk0I682pwQQCmodUPV0sYmzm3dmDnzbAhjlco/VpB
shYfwPfp2wi9ad1zIW9MgawVAZGtuGCoonYZxsScc+ErXA3TMb0/f61R5MRxQfg4
3yepQLk2XhaWgtFwCCL3TgLzrgQqO6Gn6TZNzsb4qOSP1bipqz/oevL2bQZOYaWV
Ve2QvUM6DjGBrMpGAplRMjPTb5mfsPgfgxJ3F625V9hP2Z2Y9gkJZgCeR81cAdqu
7nC0HZNpkcCATKle6JY/MIhWn/Y093vSCMtYE9+thifpW4ZhNXwQ4/vPONcysrm4
c6N0MHar56nFEcEwDO/+2/sJIDiWxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLt3
9RTQi1KBU8D283obAhZC4cIQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMEUwRjNGNjU5OTUxMUYwOTc1NjJBODNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYLMA0GCSqGSIb3DQEB
CwUAA4IBAQDD4fK/QznIz69pJwnM5PWzWwv6xGLxGmgEgxwTwSNwWFHKHJLkKVu2
PTxDN9VqWrfHTrO87viVHo0BX5IwzPxYjNKfRkZOEnh/7GG+sfkl2fTsvLEKRgpq
+ymWQF8i0q2/7yIL6qA3bcWU+upoAQvEs6ma91AZYPURyokqMPR3pj1hL/y47x4J
nP/ay25zFm0QNcpYO2wc6oxAYHA6Sq/U9L7wHT0p2uJd6S5BDDy24+o4tBNetF6m
myyIft+GGa3Tmqxkt8eJ25X8jGnCqPUOLs4mvpu3PJPd813mBlXbKSp+y8TO1Cbd
W//gvwLlOBXrrnr2mxzQTfqIooyh/ZjO
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:18:23 2025 by rpki-client