Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63422B5C5BE911F0A17684ADDAE4EC9C.roa
File: 63422B5C5BE911F0A17684ADDAE4EC9C.roa (raw, json)
Hash identifier: 2ZOZRoqnWGqKDlTOnMayrb7xWct5/h4djFVCuzOTTOc=
Subject key identifier: 56:35:73:05:E4:EA:7E:90:12:5B:85:AE:D4:9E:7A:DA:A7:B2:17:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63422B5C5BE911F0A17684ADDAE4EC9C.roa
Signing time: Tue 08 Jul 2025 10:50:40 +0000
ROA not before: Tue 08 Jul 2025 10:50:35 +0000
ROA not after: Wed 06 Aug 2025 10:50:35 +0000
asID: 20326
IP address blocks: 154.84.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101523 (0x18c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 10:50:35 2025 GMT
Not After : Aug 6 10:50:35 2025 GMT
Subject: CN=686cf800-9786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:01:ed:f0:1a:3b:34:c5:ce:f1:40:88:7a:
ee:e5:2e:a8:78:52:a8:f3:22:1a:2d:65:04:87:2b:
e2:36:83:58:0b:33:3e:1b:9e:f3:bf:60:8b:61:15:
3c:e3:07:b2:23:5b:7d:b6:6b:d8:1d:b7:a0:93:78:
c8:c0:18:b1:39:f4:fe:85:ce:c9:12:ff:00:64:00:
c7:a7:c9:7e:a9:db:ac:cf:bd:4c:94:89:4f:58:7f:
aa:ed:ff:95:d3:41:77:12:cc:e1:b9:e4:b3:cf:4b:
f1:da:e2:74:88:fc:27:54:02:2c:61:aa:b4:2a:e8:
70:87:e1:b9:12:01:de:1f:a9:2c:e2:6d:17:43:3a:
06:aa:c0:fd:ca:fe:cc:83:58:f0:21:a2:fb:3e:fa:
de:9c:ca:7e:a9:91:68:28:56:b1:8f:39:6b:a6:41:
9b:5f:42:57:5b:f7:e6:08:b5:d8:f4:55:d3:0f:15:
0c:e7:c3:e3:b0:14:24:6c:d8:11:5e:cc:da:8f:e2:
27:2b:1c:da:8f:d7:84:87:3e:56:6e:19:75:48:b6:
bd:e4:cd:df:1a:f9:86:75:02:fd:e6:b5:aa:77:bf:
28:1e:ff:b3:cd:e5:ca:a2:0a:e8:24:3d:2b:e4:76:
2b:25:42:47:b5:fd:5d:87:7c:c0:94:b5:dd:87:8c:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:73:05:E4:EA:7E:90:12:5B:85:AE:D4:9E:7A:DA:A7:B2:17:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63422B5C5BE911F0A17684ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.188.0/23
Signature Algorithm: sha256WithRSAEncryption
af:8f:ad:a6:43:aa:f1:c9:fc:34:49:46:a9:87:63:fb:29:12:
0f:bc:20:16:ed:96:68:41:84:c7:22:4c:f0:c9:cc:56:fd:60:
df:6a:bd:d9:bc:0f:07:b2:67:d5:61:b8:55:55:3a:ca:82:f9:
fc:d7:34:3f:8b:f6:c0:a1:67:31:31:33:fb:02:26:db:7c:1b:
95:b0:99:a5:67:28:55:00:37:c6:3b:c1:72:54:9f:46:d8:34:
a7:54:6d:eb:59:11:70:7a:01:66:5c:5e:73:59:fd:4a:31:b1:
84:9c:19:26:17:18:6e:6a:60:c1:86:da:0e:26:75:e3:9f:03:
87:1a:8d:c3:32:10:78:ea:99:50:14:8e:90:2f:c5:ae:16:8e:
c3:d4:0f:fd:47:32:9b:db:fe:30:48:50:98:62:d1:4c:42:a9:
2b:5e:53:ee:9e:4d:ec:07:be:8e:97:c9:18:1a:6e:df:76:de:
23:87:0e:d7:43:44:3f:64:a0:85:98:c7:11:b7:a3:89:3e:af:
ac:c6:d8:cf:c3:29:8e:ca:4e:93:32:0d:4d:a9:58:69:6b:73:
f3:c2:da:cf:77:dc:1b:0f:0f:e0:74:4e:a7:1a:9b:cd:a9:70:
5f:f8:ae:f0:69:40:4c:2c:5c:08:31:35:9c:8b:ae:75:55:8a:
11:3a:73:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYyTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA4MTA1MDM1WhcNMjUwODA2MTA1MDM1WjAYMRYw
FAYDVQQDEw02ODZjZjgwMC05Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3+oB7fAaOzTFzvFAiHru5S6oeFKo8yIaLWUEhyviNoNYCzM+G57zv2CL
YRU84weyI1t9tmvYHbegk3jIwBixOfT+hc7JEv8AZADHp8l+qdusz71MlIlPWH+q
7f+V00F3EszhueSzz0vx2uJ0iPwnVAIsYaq0Kuhwh+G5EgHeH6ks4m0XQzoGqsD9
yv7Mg1jwIaL7PvrenMp+qZFoKFaxjzlrpkGbX0JXW/fmCLXY9FXTDxUM58PjsBQk
bNgRXszaj+InKxzaj9eEhz5Wbhl1SLa95M3fGvmGdQL95rWqd78oHv+zzeXKogro
JD0r5HYrJUJHtf1dh3zAlLXdh4xtMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFY1
cwXk6n6QEluFrtSeetqnshdBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MzQyMkI1QzVCRTkxMUYwQTE3Njg0QUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlS8MA0GCSqGSIb3DQEB
CwUAA4IBAQCvj62mQ6rxyfw0SUaph2P7KRIPvCAW7ZZoQYTHIkzwycxW/WDfar3Z
vA8HsmfVYbhVVTrKgvn81zQ/i/bAoWcxMTP7AibbfBuVsJmlZyhVADfGO8FyVJ9G
2DSnVG3rWRFwegFmXF5zWf1KMbGEnBkmFxhuamDBhtoOJnXjnwOHGo3DMhB46plQ
FI6QL8WuFo7D1A/9RzKb2/4wSFCYYtFMQqkrXlPunk3sB76Ol8kYGm7fdt4jhw7X
Q0Q/ZKCFmMcRt6OJPq+sxtjPwymOyk6TMg1NqVhpa3PzwtrPd9wbDw/gdE6nGpvN
qXBf+K7waUBMLFwIMTWci651VYoROnNy
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:39 2025 by rpki-client