Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93A9A174625311F09BAF2AC0DAE4EC9C.roa
File: 93A9A174625311F09BAF2AC0DAE4EC9C.roa (raw, json)
Hash identifier: Xg99jG8NoXmbwoMEzWBrYhQoLPikit44xEcrdNaq1uI=
Subject key identifier: 31:50:1E:1C:90:D5:96:5D:38:09:99:F2:F0:1A:25:19:54:5D:96:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93A9A174625311F09BAF2AC0DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 14:45:55 +0000
ROA not before: Wed 16 Jul 2025 14:45:48 +0000
ROA not after: Fri 25 Jul 2025 14:45:48 +0000
asID: 7029
IP address blocks: 154.194.16.0/21 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101899 (0x18e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 14:45:48 2025 GMT
Not After : Jul 25 14:45:48 2025 GMT
Subject: CN=6877bb23-7012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:ca:ab:c9:d2:18:56:a6:87:9d:56:17:69:
34:87:fa:b6:2d:ba:eb:f1:78:ce:f3:2f:11:fe:a9:
44:30:ee:f3:7e:b9:9c:89:a9:47:3f:85:82:7b:40:
c2:ce:5e:46:6f:0f:42:b7:66:22:04:1d:20:33:1d:
12:9f:b9:cf:4c:88:ac:e3:27:52:fa:c2:0c:fa:dd:
63:da:e8:66:a6:3c:69:10:6c:40:d4:1b:43:3f:ff:
df:34:8d:62:73:c2:c4:35:04:8c:cb:30:eb:68:68:
29:d9:a2:9e:48:ef:b3:aa:72:25:79:bd:fe:51:cb:
0e:c9:25:d6:21:2a:b8:89:1a:af:c3:97:e9:0a:d1:
40:58:b7:59:fc:f3:d6:9d:bb:cc:97:46:e8:29:5c:
87:64:ca:4a:e9:ce:51:7a:be:05:15:92:3a:31:a5:
14:4a:e5:df:fc:4a:3e:3e:ff:fb:8f:d0:d7:1a:1f:
ee:0c:68:e5:fd:db:f8:c1:69:7f:c9:66:ec:18:38:
19:1a:89:09:76:26:0e:d7:b6:e5:86:f0:1e:7c:3e:
3e:ca:07:44:d8:a6:b9:e7:12:68:7b:4b:cf:ad:77:
ba:90:dd:18:89:72:fe:2a:44:c0:79:43:40:68:a7:
ec:79:67:82:71:bd:29:99:b9:7a:4c:35:5d:85:68:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:1E:1C:90:D5:96:5D:38:09:99:F2:F0:1A:25:19:54:5D:96:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93A9A174625311F09BAF2AC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0-154.194.27.255
Signature Algorithm: sha256WithRSAEncryption
31:78:7d:de:72:4c:7d:04:82:4d:3e:a6:26:49:32:eb:46:22:
da:92:39:8f:08:be:70:84:b0:b8:f8:f6:b8:31:52:73:60:cc:
30:08:c6:3d:3f:71:44:ba:a7:82:bf:6a:53:78:d8:ae:b0:3c:
57:38:c8:00:d9:55:97:9d:59:19:d7:b8:4c:75:6c:36:f0:c8:
e5:3f:d0:20:15:ae:42:83:e4:09:58:9c:52:71:2d:8a:38:dc:
05:2b:79:ba:31:e1:88:ef:97:16:ba:7a:60:d6:ba:05:5f:cf:
d7:ca:b5:ff:dc:dd:cd:a8:d2:6a:19:bc:83:c1:ba:60:d8:7e:
af:48:48:15:85:9c:79:b7:47:cd:26:a1:ec:a1:20:a8:d9:71:
56:e3:17:ec:11:f1:93:7b:85:d1:f4:19:b3:92:29:03:2d:3d:
50:d2:00:b4:81:37:20:b9:58:8b:7b:30:7d:95:9a:a4:ba:9d:
90:15:71:97:de:cf:69:bb:b8:01:93:1d:e5:43:8e:81:b8:24:
00:dc:59:bd:8c:68:6e:fc:74:81:c7:8c:2e:b1:0e:bd:cf:31:
eb:2d:fa:0d:3c:fc:3e:ab:9e:4f:0d:f4:38:2d:b9:0f:64:12:
72:2c:17:18:a5:da:6b:e7:74:0b:05:47:37:70:30:75:b1:50:
68:1e:7e:ed
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAY4LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE2MTQ0NTQ4WhcNMjUwNzI1MTQ0NTQ4WjAYMRYw
FAYDVQQDEw02ODc3YmIyMy03MDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyq3Kq8nSGFamh51WF2k0h/q2Lbrr8XjO8y8R/qlEMO7zfrmcialHP4WC
e0DCzl5Gbw9Ct2YiBB0gMx0Sn7nPTIis4ydS+sIM+t1j2uhmpjxpEGxA1BtDP//f
NI1ic8LENQSMyzDraGgp2aKeSO+zqnIleb3+UcsOySXWISq4iRqvw5fpCtFAWLdZ
/PPWnbvMl0boKVyHZMpK6c5Rer4FFZI6MaUUSuXf/Eo+Pv/7j9DXGh/uDGjl/dv4
wWl/yWbsGDgZGokJdiYO17blhvAefD4+ygdE2Ka55xJoe0vPrXe6kN0YiXL+KkTA
eUNAaKfseWeCcb0pmbl6TDVdhWimUwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDFQ
HhyQ1ZZdOAmZ8vAaJRlUXZYeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85M0E5QTE3NDYyNTMxMUYwOUJBRjJBQzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASawhADBAKawhgwDQYJ
KoZIhvcNAQELBQADggEBADF4fd5yTH0Egk0+piZJMutGItqSOY8IvnCEsLj49rgx
UnNgzDAIxj0/cUS6p4K/alN42K6wPFc4yADZVZedWRnXuEx1bDbwyOU/0CAVrkKD
5AlYnFJxLYo43AUrebox4Yjvlxa6emDWugVfz9fKtf/c3c2o0moZvIPBumDYfq9I
SBWFnHm3R80moeyhIKjZcVbjF+wR8ZN7hdH0GbOSKQMtPVDSALSBNyC5WIt7MH2V
mqS6nZAVcZfez2m7uAGTHeVDjoG4JADcWb2MaG78dIHHjC6xDr3PMest+g08/D6r
nk8N9DgtuQ9kEnIsFxil2mvndAsFRzdwMHWxUGgefu0=
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:36 2025 by rpki-client