Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B6843B45CC811F0949978D7DAE4EC9C.roa
File: 5B6843B45CC811F0949978D7DAE4EC9C.roa (raw, json)
Hash identifier: sjVjs3r2M4Q4HnaSO+5ln3a3FiohLT+OqviqnuzE8jc=
Subject key identifier: 87:C4:60:16:65:55:3A:18:91:B8:6B:66:E7:EE:F7:50:10:5D:F1:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B6843B45CC811F0949978D7DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 13:26:45 +0000
ROA not before: Wed 09 Jul 2025 13:26:38 +0000
ROA not after: Sun 10 Aug 2025 13:26:38 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101584 (0x18cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 13:26:38 2025 GMT
Not After : Aug 10 13:26:38 2025 GMT
Subject: CN=686e6e15-8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:22:60:15:3d:26:d5:3c:60:67:71:f8:e4:
fa:e8:d6:3c:92:6d:67:89:1d:15:45:ec:02:1b:25:
88:98:89:4b:f0:0d:ae:ff:88:6f:4d:49:14:28:c0:
85:59:5b:ca:34:7f:a1:2c:ce:45:a8:b8:c2:8d:30:
23:37:8b:b7:88:de:ea:eb:97:b8:28:24:ca:60:7d:
09:3a:30:a9:e3:00:41:e4:51:04:c0:2f:c0:fc:4f:
4b:1c:78:7c:52:9f:9c:ff:05:5c:4a:e4:cb:45:2a:
05:94:b0:48:e1:4d:3a:07:25:04:e7:84:38:cd:8a:
53:6a:6d:10:56:42:ce:2d:2c:1c:f9:a1:6b:fd:4d:
ff:ba:8a:cb:7d:3c:e6:56:40:c6:60:f3:89:02:c4:
b6:ef:30:4e:16:35:cb:e5:62:e0:cc:0a:ca:a4:54:
8c:40:a1:de:50:80:ba:d3:1a:54:1a:5a:4b:aa:f7:
ef:27:78:d7:df:25:df:42:59:cd:f9:17:a2:d2:72:
02:0b:b7:9b:4f:dd:6f:53:70:e9:51:40:e4:bf:10:
eb:f9:0e:4a:6e:79:b7:87:18:2d:26:25:f5:3b:a7:
96:16:94:85:62:a0:aa:f4:e2:8d:3f:a2:2f:21:34:
19:60:a8:45:b1:9f:20:7d:af:c6:f2:31:3a:01:85:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:60:16:65:55:3A:18:91:B8:6B:66:E7:EE:F7:50:10:5D:F1:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B6843B45CC811F0949978D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:96:17:61:eb:22:0d:19:93:e6:b7:1d:5b:dd:d0:3f:bf:85:
54:86:88:1f:5c:7d:a3:ac:5f:28:69:4c:f9:7f:ab:d6:1d:45:
b0:c0:a8:e1:aa:cf:3a:00:50:b7:31:87:9b:9d:f4:b2:8f:12:
28:0c:b6:37:cf:a5:7b:5a:b2:6c:8f:ba:72:36:7c:cc:72:cd:
c9:04:3d:0e:66:67:ac:27:6d:cf:34:42:ff:51:38:33:b7:dd:
53:15:60:e3:d5:4c:5f:0b:27:0a:ae:6d:a1:20:80:fc:f1:60:
1b:e8:27:65:67:9c:98:d0:ea:9b:29:53:9e:01:f6:75:55:d2:
cb:87:07:dd:e5:d4:99:6e:ad:95:71:9d:6c:ad:bc:10:78:aa:
83:58:08:2a:e7:3b:55:64:f9:84:f9:18:b0:5d:21:e8:de:94:
53:f9:47:cb:e3:0f:48:20:a5:28:5f:17:8e:65:96:1b:52:bc:
a2:44:28:5f:b1:ac:4b:8d:21:d7:f3:36:47:f1:dd:9d:a6:63:
8e:b3:32:b0:7f:76:df:69:e6:de:e5:f1:46:bc:5f:63:02:b7:
00:a6:23:ec:7f:ba:da:80:78:af:f3:6f:39:c7:18:6c:e0:28:
86:ee:36:b4:47:5e:43:28:22:42:f6:00:69:78:c8:36:60:fd:
23:07:bd:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYzQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA5MTMyNjM4WhcNMjUwODEwMTMyNjM4WjAYMRYw
FAYDVQQDEw02ODZlNmUxNS04YmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLQiYBU9JtU8YGdx+OT66NY8km1niR0VRewCGyWImIlL8A2u/4hvTUkU
KMCFWVvKNH+hLM5FqLjCjTAjN4u3iN7q65e4KCTKYH0JOjCp4wBB5FEEwC/A/E9L
HHh8Up+c/wVcSuTLRSoFlLBI4U06ByUE54Q4zYpTam0QVkLOLSwc+aFr/U3/uorL
fTzmVkDGYPOJAsS27zBOFjXL5WLgzArKpFSMQKHeUIC60xpUGlpLqvfvJ3jX3yXf
QlnN+Rei0nICC7ebT91vU3DpUUDkvxDr+Q5Kbnm3hxgtJiX1O6eWFpSFYqCq9OKN
P6IvITQZYKhFsZ8gfa/G8jE6AYVmuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIfE
YBZlVToYkbhrZufu91AQXfFGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QjY4NDNCNDVDQzgxMUYwOTQ5OTc4RDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQB7lhdh6yINGZPmtx1b3dA/v4VUhogfXH2jrF8oaUz5f6vWHUWwwKjh
qs86AFC3MYebnfSyjxIoDLY3z6V7WrJsj7pyNnzMcs3JBD0OZmesJ23PNEL/UTgz
t91TFWDj1UxfCycKrm2hIID88WAb6CdlZ5yY0OqbKVOeAfZ1VdLLhwfd5dSZbq2V
cZ1srbwQeKqDWAgq5ztVZPmE+RiwXSHo3pRT+UfL4w9IIKUoXxeOZZYbUryiRChf
saxLjSHX8zZH8d2dpmOOszKwf3bfaebe5fFGvF9jArcApiPsf7ragHiv8285xxhs
4CiG7ja0R15DKCJC9gBpeMg2YP0jB71z
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:35:52 2025 by rpki-client