Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78A279285B8711F0B81086A3DAE4EC9C.roa
File: 78A279285B8711F0B81086A3DAE4EC9C.roa (raw, json)
Hash identifier: AY9GdDnNViLt4bDMt4IAdPhFPRj75/ND9j9kWaBB6Ik=
Subject key identifier: A7:F9:C1:42:69:35:2A:B7:05:A7:46:51:4A:3C:B0:25:6C:A2:A7:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78A279285B8711F0B81086A3DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 23:09:46 +0000
ROA not before: Mon 07 Jul 2025 23:09:41 +0000
ROA not after: Fri 17 Jul 2026 23:09:41 +0000
asID: 153706
IP address blocks: 154.193.208.0/24 maxlen: 24
154.193.209.0/24 maxlen: 24
154.193.210.0/24 maxlen: 24
154.193.211.0/24 maxlen: 24
154.193.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101506 (0x18c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 23:09:41 2025 GMT
Not After : Jul 17 23:09:41 2026 GMT
Subject: CN=686c53b9-2a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:f1:29:b3:b9:10:a3:9e:66:84:7f:14:17:
2e:ac:7f:e2:f0:f3:a2:08:86:9d:48:54:7e:2d:07:
03:e3:42:1c:9c:83:5c:46:dc:db:ff:82:b7:27:3f:
e9:19:cd:73:c6:6b:ff:33:0e:9a:b9:fc:15:11:cb:
b7:5b:d3:80:fa:b3:e8:fc:7e:77:51:ce:bb:0e:61:
90:bf:81:bf:29:6b:a9:a8:8b:68:b7:2c:22:55:4f:
5b:4a:a1:c3:6e:0c:7f:13:5c:37:dc:0d:61:d9:5d:
9d:9d:53:d6:fb:e1:20:2f:d8:b2:b7:92:60:77:1e:
1e:c3:36:63:2d:d0:d5:16:75:46:c0:3b:27:42:da:
fd:9a:84:93:31:b0:83:07:dd:8d:00:e9:df:09:00:
df:70:1a:84:b1:b6:3c:1b:f5:cc:6c:7d:e5:de:f6:
70:58:3b:ed:4f:50:f1:d3:b8:98:3c:c7:9b:ab:54:
99:66:30:99:08:fc:51:9b:83:7c:81:fa:a5:48:37:
18:cf:89:9e:42:46:b8:75:5b:67:ef:15:35:f8:ca:
9f:78:26:a6:de:6c:e7:c1:2d:fa:e8:3b:cf:b4:14:
bd:09:f1:91:87:11:36:04:18:81:a7:f6:5c:d5:8c:
78:3a:25:ab:7f:0a:de:14:79:24:22:23:84:8e:80:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F9:C1:42:69:35:2A:B7:05:A7:46:51:4A:3C:B0:25:6C:A2:A7:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78A279285B8711F0B81086A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.208.0/22
154.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f4:6a:df:6b:bd:fd:b0:ce:4b:82:6e:44:4f:7a:f7:17:c7:
2b:af:ca:69:4e:a1:34:c3:56:91:b8:2b:4b:8c:d9:7d:63:59:
49:07:a4:c0:29:29:18:df:4d:6e:f2:20:48:7a:ba:68:dc:b3:
f3:97:50:19:15:8b:d2:19:06:9c:0d:02:c3:5d:17:83:f1:d4:
5e:30:13:35:f9:15:3a:39:6a:13:ef:bc:71:ca:b0:99:e5:27:
27:6a:92:58:76:bb:4c:d9:ab:9b:ff:c1:5c:b5:50:ce:2d:e3:
28:d5:f5:cf:ad:9b:3d:ad:91:a4:09:1e:af:15:5d:e1:18:a9:
4f:fe:aa:3a:cb:1a:2f:5c:c6:f5:f6:f0:e2:8c:23:3c:7c:10:
d5:b8:53:28:79:c1:55:64:a3:b4:28:34:bc:ab:da:b5:f9:82:
ee:5c:15:23:c8:9d:fe:ee:be:2c:ca:7f:59:a9:43:94:c8:a4:
0a:7b:59:d3:1f:0d:48:91:75:dc:cf:85:5f:c3:8d:46:4c:e8:
dd:60:be:21:7e:9e:79:ab:d8:43:32:6c:0e:d2:dc:71:73:f0:
7d:9c:81:32:bb:52:0f:04:35:bf:b0:68:12:d0:e0:6f:e9:fa:
7c:24:1e:3a:86:f2:29:f4:21:26:8a:02:de:cf:7f:fc:32:a9:
01:54:04:ae
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYyCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA3MjMwOTQxWhcNMjYwNzE3MjMwOTQxWjAYMRYw
FAYDVQQDEw02ODZjNTNiOS0yYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApYXxKbO5EKOeZoR/FBcurH/i8POiCIadSFR+LQcD40IcnINcRtzb/4K3
Jz/pGc1zxmv/Mw6aufwVEcu3W9OA+rPo/H53Uc67DmGQv4G/KWupqItotywiVU9b
SqHDbgx/E1w33A1h2V2dnVPW++EgL9iyt5Jgdx4ewzZjLdDVFnVGwDsnQtr9moST
MbCDB92NAOnfCQDfcBqEsbY8G/XMbH3l3vZwWDvtT1Dx07iYPMebq1SZZjCZCPxR
m4N8gfqlSDcYz4meQka4dVtn7xU1+MqfeCam3mznwS366DvPtBS9CfGRhxE2BBiB
p/Zc1Yx4OiWrfwreFHkkIiOEjoDRFwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKf5
wUJpNSq3BadGUUo8sCVsoqe0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEEyNzkyODVCODcxMUYwQjgxMDg2QTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsHQAwQAmsH3MA0GCSqG
SIb3DQEBCwUAA4IBAQA59Grfa739sM5Lgm5ET3r3F8crr8ppTqE0w1aRuCtLjNl9
Y1lJB6TAKSkY301u8iBIerpo3LPzl1AZFYvSGQacDQLDXReD8dReMBM1+RU6OWoT
77xxyrCZ5ScnapJYdrtM2aub/8FctVDOLeMo1fXPrZs9rZGkCR6vFV3hGKlP/qo6
yxovXMb19vDijCM8fBDVuFMoecFVZKO0KDS8q9q1+YLuXBUjyJ3+7r4syn9ZqUOU
yKQKe1nTHw1IkXXcz4Vfw41GTOjdYL4hfp55q9hDMmwO0txxc/B9nIEyu1IPBDW/
sGgS0OBv6fp8JB46hvIp9CEmigLez3/8MqkBVASu
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:42:45 2025 by rpki-client