Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D9520A5CDE11F0BBBCEAE5DAE4EC9C.roa
File: 83D9520A5CDE11F0BBBCEAE5DAE4EC9C.roa (raw, json)
Hash identifier: d06R85VnOygan+2It5TwO+y4+n459oSyh403nucs5Lo=
Subject key identifier: D5:29:9C:95:0D:C4:48:F0:8E:4D:FF:C0:C1:BA:04:69:B7:3C:04:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D9520A5CDE11F0BBBCEAE5DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 16:05:22 +0000
ROA not before: Wed 09 Jul 2025 16:05:17 +0000
ROA not after: Wed 13 Aug 2025 16:05:17 +0000
asID: 57043
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101610 (0x18cea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 16:05:17 2025 GMT
Not After : Aug 13 16:05:17 2025 GMT
Subject: CN=686e9342-4afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:b0:2a:79:ee:32:23:81:a2:95:a4:78:c6:
7c:38:26:fb:53:ad:26:ad:21:d3:42:93:55:e2:0d:
7b:bf:c4:1a:43:1b:f0:86:9a:ff:a2:34:f3:52:f6:
86:8e:69:d1:61:bc:50:11:d6:02:79:85:42:c1:d4:
78:5a:48:02:47:c7:30:60:90:f9:99:44:16:3d:c7:
3f:cd:40:4c:d6:da:5f:f9:ae:b4:4e:86:29:39:05:
d1:82:40:c9:d4:2c:cd:14:31:fd:74:dc:c7:2e:ae:
12:fa:72:96:5b:dd:da:7a:fd:f9:81:dd:45:3c:a6:
bb:15:02:00:fd:ff:52:99:00:d7:24:88:c3:eb:77:
14:3e:7a:7c:8d:d1:43:3f:5a:8e:26:b1:c0:32:2a:
45:04:b6:0a:bc:20:bf:e8:50:7d:e7:25:2a:01:79:
d4:02:8a:96:c8:b9:8a:0a:68:71:91:98:5f:11:92:
60:93:cd:3a:f7:29:d4:e1:54:fa:76:b6:5b:d9:47:
6b:ae:12:26:67:dd:a3:e3:28:6a:33:ff:6d:5a:1f:
b1:c1:67:92:01:b6:4e:b5:c5:10:03:6a:eb:9a:7c:
31:2d:3d:9e:58:11:24:2a:a5:76:7b:58:f0:e4:3d:
6e:4f:4e:1d:29:e3:bc:cb:89:0e:c9:81:5b:bb:c7:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:9C:95:0D:C4:48:F0:8E:4D:FF:C0:C1:BA:04:69:B7:3C:04:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D9520A5CDE11F0BBBCEAE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0a:39:29:91:26:1a:ee:cf:ae:a6:15:b7:d1:f7:7c:4b:93:
80:8b:69:6d:80:0f:cf:2e:94:d5:93:b8:8e:68:9c:bc:c4:5b:
82:80:5b:12:18:a5:0f:ae:5a:60:e6:a5:ec:a0:aa:46:49:50:
af:75:84:07:62:e3:bc:55:79:12:21:ed:f5:b7:a2:fb:1b:9e:
26:7a:ca:f4:e5:e3:8b:1b:f7:f3:e0:cb:99:6e:ed:f7:86:64:
28:ea:1a:62:c1:9c:77:68:77:af:24:d5:55:ff:b2:41:22:e9:
54:c7:22:ae:aa:b4:b0:57:eb:92:c7:f7:da:30:73:68:e0:88:
d5:b1:31:83:43:20:30:c9:32:cd:83:c2:a9:ee:7d:f7:e8:17:
4c:72:91:2a:80:86:8d:46:67:1f:27:81:db:fa:df:30:40:4f:
0c:70:dc:db:79:ac:e8:1e:4f:41:fe:10:50:4e:e4:58:cb:69:
52:f4:71:d9:32:a2:72:82:6d:2e:66:b1:6b:7d:e0:41:97:a7:
85:bf:2a:7a:25:b7:cc:e3:5e:06:b6:44:e8:18:26:c8:d5:f2:
2a:08:d1:4a:e5:ae:58:fb:a9:20:97:f2:9f:d6:6b:30:95:26:
67:91:40:d6:d0:92:8e:94:6f:6b:d1:d1:d2:90:27:c1:55:91:
1c:94:05:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYzqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA5MTYwNTE3WhcNMjUwODEzMTYwNTE3WjAYMRYw
FAYDVQQDEw02ODZlOTM0Mi00YWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2DiwKnnuMiOBopWkeMZ8OCb7U60mrSHTQpNV4g17v8QaQxvwhpr/ojTz
UvaGjmnRYbxQEdYCeYVCwdR4WkgCR8cwYJD5mUQWPcc/zUBM1tpf+a60ToYpOQXR
gkDJ1CzNFDH9dNzHLq4S+nKWW93aev35gd1FPKa7FQIA/f9SmQDXJIjD63cUPnp8
jdFDP1qOJrHAMipFBLYKvCC/6FB95yUqAXnUAoqWyLmKCmhxkZhfEZJgk8069ynU
4VT6drZb2UdrrhImZ92j4yhqM/9tWh+xwWeSAbZOtcUQA2rrmnwxLT2eWBEkKqV2
e1jw5D1uT04dKeO8y4kOyYFbu8fIWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNUp
nJUNxEjwjk3/wMG6BGm3PAQYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84M0Q5NTIwQTVDREUxMUYwQkJCQ0VBRTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt5MMA0GCSqGSIb3DQEB
CwUAA4IBAQAyCjkpkSYa7s+uphW30fd8S5OAi2ltgA/PLpTVk7iOaJy8xFuCgFsS
GKUPrlpg5qXsoKpGSVCvdYQHYuO8VXkSIe31t6L7G54mesr05eOLG/fz4MuZbu33
hmQo6hpiwZx3aHevJNVV/7JBIulUxyKuqrSwV+uSx/faMHNo4IjVsTGDQyAwyTLN
g8Kp7n336BdMcpEqgIaNRmcfJ4Hb+t8wQE8McNzbeazoHk9B/hBQTuRYy2lS9HHZ
MqJygm0uZrFrfeBBl6eFvyp6JbfM414GtkToGCbI1fIqCNFK5a5Y+6kgl/Kf1msw
lSZnkUDW0JKOlG9r0dHSkCfBVZEclAXi
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:32:03 2025 by rpki-client