Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778E81904B6E11F0A6A91AE0DAE4EC9C.roa
File: 778E81904B6E11F0A6A91AE0DAE4EC9C.roa (raw, json)
Hash identifier: ubU1TVG0nXASkln4vhMMsCOmbpb6+BC1oQc8+dkcDoU=
Subject key identifier: C2:EB:C5:A0:EA:6A:2E:7C:3D:05:28:EA:B6:57:1A:B6:F4:DB:2C:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018711
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778E81904B6E11F0A6A91AE0DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 11:30:28 +0000
ROA not before: Tue 17 Jun 2025 11:30:22 +0000
ROA not after: Thu 24 Jul 2025 11:30:22 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100113 (0x18711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 11:30:22 2025 GMT
Not After : Jul 24 11:30:22 2025 GMT
Subject: CN=685151d4-6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:25:b4:da:45:09:31:dd:8b:e1:36:3f:cb:
96:b2:da:4d:c2:22:5c:f5:42:aa:f1:1f:19:ac:f3:
6c:5c:fd:39:c3:a8:a3:07:0a:c6:e8:59:95:1c:6f:
07:13:8e:4f:3c:8c:1c:19:e0:59:5d:bc:59:67:df:
71:bf:94:7c:d5:07:a3:c7:0d:61:d0:64:74:73:35:
d3:d7:0e:36:e8:6d:0b:02:9d:8f:86:2c:40:da:81:
51:57:40:e8:a2:3a:54:3e:43:32:ee:95:2e:e5:9f:
8d:ac:4f:2b:d0:67:cb:8f:f0:46:c1:59:87:4f:52:
d4:ea:fc:17:e3:20:5c:65:8b:3c:ec:59:b7:8e:0b:
d2:d9:e7:d9:d3:7b:9c:a6:a7:75:f7:cf:b3:7c:bc:
0e:77:c6:5b:0d:cd:59:82:fc:1b:37:e9:c2:2f:a5:
f3:f8:f6:ab:37:b2:8f:75:c9:0f:42:09:bb:06:8b:
70:65:aa:76:d6:65:0d:a1:1a:7b:b9:4c:86:7a:e4:
23:a6:b9:53:66:f4:d1:3e:bc:b2:c2:d6:61:45:4c:
4f:82:d9:e7:9b:a4:37:84:12:f7:92:71:ca:26:f4:
89:d4:c8:a5:e1:19:1d:99:6a:71:e6:48:d2:0e:73:
9e:76:61:52:60:20:17:00:f7:ff:b7:c8:8c:bc:2b:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:C5:A0:EA:6A:2E:7C:3D:05:28:EA:B6:57:1A:B6:F4:DB:2C:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778E81904B6E11F0A6A91AE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
96:8c:a4:e1:b1:c9:e4:d8:86:5d:eb:3f:08:1e:9b:7f:4d:e1:
9c:d8:36:9a:9e:c7:41:3a:82:50:19:1a:39:1f:61:b0:a8:0d:
ad:e0:b7:99:ea:ec:44:6a:dd:b8:83:bb:ec:e7:a9:71:81:e6:
bc:0e:8d:69:f2:70:6b:ab:39:e3:84:7a:36:e0:04:b8:22:ca:
ab:f3:af:c3:f9:ff:05:a0:a8:fe:9b:32:27:a7:3b:52:28:93:
b6:bf:9f:27:3c:be:1e:7b:8c:be:8d:8f:c9:5f:57:48:fe:99:
e7:1b:a4:96:06:df:7c:55:d9:e1:64:ea:72:bd:af:eb:1e:3e:
d0:36:e7:04:57:a0:fe:7f:7d:46:e0:07:af:02:28:31:d1:2b:
17:86:44:9e:ec:55:fb:e0:5e:92:a3:75:2a:db:5e:76:08:45:
92:5b:6c:8e:6a:33:47:59:74:a7:c0:79:df:2f:62:8b:50:c4:
a9:65:cd:01:31:d4:7f:13:18:c3:b1:ea:3f:5a:c3:39:f7:5c:
9a:da:93:64:ba:0d:ac:cf:18:48:75:b1:d1:3f:e6:f7:7d:f7:
a9:53:10:20:6a:9e:f7:80:b4:06:2b:ea:18:ad:3c:e1:cb:ca:
e3:fb:a5:c4:d5:f1:d8:16:ba:97:29:42:d8:e4:9f:98:69:ea:
2b:98:67:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYcRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE3MTEzMDIyWhcNMjUwNzI0MTEzMDIyWjAYMRYw
FAYDVQQDEw02ODUxNTFkNC02MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz8YltNpFCTHdi+E2P8uWstpNwiJc9UKq8R8ZrPNsXP05w6ijBwrG6FmV
HG8HE45PPIwcGeBZXbxZZ99xv5R81Qejxw1h0GR0czXT1w426G0LAp2PhixA2oFR
V0DoojpUPkMy7pUu5Z+NrE8r0GfLj/BGwVmHT1LU6vwX4yBcZYs87Fm3jgvS2efZ
03ucpqd198+zfLwOd8ZbDc1ZgvwbN+nCL6Xz+ParN7KPdckPQgm7BotwZap21mUN
oRp7uUyGeuQjprlTZvTRPryywtZhRUxPgtnnm6Q3hBL3knHKJvSJ1Mil4RkdmWpx
5kjSDnOedmFSYCAXAPf/t8iMvCv77wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMLr
xaDqai58PQUo6rZXGrb02yxoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NzhFODE5MDRCNkUxMUYwQTZBOTFBRTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlmQMA0GCSqGSIb3DQEB
CwUAA4IBAQCWjKThscnk2IZd6z8IHpt/TeGc2DaansdBOoJQGRo5H2GwqA2t4LeZ
6uxEat24g7vs56lxgea8Do1p8nBrqznjhHo24AS4Isqr86/D+f8FoKj+mzInpztS
KJO2v58nPL4ee4y+jY/JX1dI/pnnG6SWBt98VdnhZOpyva/rHj7QNucEV6D+f31G
4AevAigx0SsXhkSe7FX74F6So3Uq2152CEWSW2yOajNHWXSnwHnfL2KLUMSpZc0B
MdR/ExjDseo/WsM591ya2pNkug2szxhIdbHRP+b3ffepUxAgap73gLQGK+oYrTzh
y8rj+6XE1fHYFrqXKULY5J+YaeormGeX
-----END CERTIFICATE-----
Generated at Sun Jul 20 06:24:37 2025 by rpki-client