Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A6B9DB4617C11F0B063A1C7DAE4EC9C.roa
File: 9A6B9DB4617C11F0B063A1C7DAE4EC9C.roa (raw, json)
Hash identifier: rA6qSzRfT8xjstoosU2fXumWCVOyE8n1u7LxzVGeAdU=
Subject key identifier: 87:2D:88:99:A5:13:AE:4C:5E:41:EF:40:8B:06:99:46:9A:39:D0:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A6B9DB4617C11F0B063A1C7DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 13:07:05 +0000
ROA not before: Tue 15 Jul 2025 13:07:00 +0000
ROA not after: Wed 20 Aug 2025 13:07:00 +0000
asID: 214413
IP address blocks: 154.205.253.0/24 maxlen: 24
154.205.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101854 (0x18dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 13:07:00 2025 GMT
Not After : Aug 20 13:07:00 2025 GMT
Subject: CN=68765279-401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:0b:e6:3d:85:04:03:5d:59:ac:56:ba:aa:
06:c2:bc:e8:09:42:54:4d:4a:a8:df:2a:4d:9d:fd:
6b:08:97:eb:31:f4:26:82:11:66:04:f3:b2:3f:d1:
0c:bd:98:a3:5d:c1:ff:bb:f4:97:2e:83:13:10:9c:
8a:2a:bd:78:1b:fb:be:15:93:5d:d4:ba:f9:d2:29:
d9:f9:40:c0:2b:ae:a9:cd:e2:16:27:85:3b:b6:33:
80:e6:b9:fd:0f:a7:c3:31:cd:30:a4:51:0f:f0:b5:
c5:ca:a7:b1:dd:f1:42:28:9e:e1:a7:56:d7:8d:c7:
e4:9e:20:93:10:ae:d8:85:09:64:20:2d:1f:0d:c4:
cf:a6:54:d4:08:af:6d:c2:d6:09:f2:f4:6c:dd:72:
32:8f:89:d1:62:9a:ac:5d:fd:6e:66:fd:33:50:48:
9b:05:52:14:7a:b5:d5:6c:b8:23:13:ed:72:97:2a:
7b:d7:ae:c0:10:9c:33:ae:da:c1:74:b7:57:31:8f:
3c:f6:ad:7f:5d:21:86:95:2e:20:75:9f:34:d6:fc:
81:24:df:ca:45:8d:b8:4b:56:33:ea:24:d9:5a:38:
23:df:3c:87:83:d5:eb:e1:e2:40:6f:c0:26:2b:ef:
3d:ea:bd:46:e6:ed:6e:60:26:3e:f5:1d:08:d4:f4:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2D:88:99:A5:13:AE:4C:5E:41:EF:40:8B:06:99:46:9A:39:D0:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A6B9DB4617C11F0B063A1C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.253.0-154.205.254.255
Signature Algorithm: sha256WithRSAEncryption
d6:8d:83:97:37:e0:da:a9:5d:4d:51:ad:cb:9f:7e:8a:fb:1f:
54:61:a0:3b:76:1d:4b:38:fb:a6:13:fc:95:0d:11:50:a2:50:
e5:bf:08:3e:63:a6:c2:f9:44:a7:5a:4f:99:f4:01:06:59:13:
77:14:94:35:5c:76:ab:bc:7c:5f:f1:fd:de:d9:d1:6a:d6:3e:
15:fb:8c:51:a4:d1:6d:a0:06:d3:53:8d:69:ed:b2:45:b6:d0:
f6:8f:bb:93:9d:b3:8a:3c:65:72:01:36:0b:62:81:fd:14:50:
4b:2d:ff:c8:6a:6d:74:1a:88:73:b5:60:b7:33:7f:62:27:df:
cc:b1:a6:e0:e4:ff:bd:ac:87:0a:45:8a:66:11:b8:66:43:c3:
ca:74:b2:f0:1b:73:be:d8:56:8d:bc:0f:74:00:c4:c7:06:53:
b7:92:a4:b9:05:e4:b1:74:19:2e:1b:9c:e5:3e:21:86:f3:16:
7f:67:bc:f3:ef:18:a5:dc:88:9b:c4:41:7c:7c:0b:53:98:8c:
92:cb:99:05:11:56:cf:62:de:87:dc:be:73:88:05:2c:b8:e8:
fe:cf:56:c0:aa:61:e1:68:7e:25:3c:9a:4b:6f:97:78:a3:ad:
3f:00:fe:e2:9e:98:ce:7e:ea:7f:aa:ca:be:21:73:d5:e0:50:
52:46:3e:af
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAY3eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE1MTMwNzAwWhcNMjUwODIwMTMwNzAwWjAYMRYw
FAYDVQQDEw02ODc2NTI3OS00MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv2YL5j2FBANdWaxWuqoGwrzoCUJUTUqo3ypNnf1rCJfrMfQmghFmBPOy
P9EMvZijXcH/u/SXLoMTEJyKKr14G/u+FZNd1Lr50inZ+UDAK66pzeIWJ4U7tjOA
5rn9D6fDMc0wpFEP8LXFyqex3fFCKJ7hp1bXjcfkniCTEK7YhQlkIC0fDcTPplTU
CK9twtYJ8vRs3XIyj4nRYpqsXf1uZv0zUEibBVIUerXVbLgjE+1ylyp7167AEJwz
rtrBdLdXMY889q1/XSGGlS4gdZ801vyBJN/KRY24S1Yz6iTZWjgj3zyHg9Xr4eJA
b8AmK+896r1G5u1uYCY+9R0I1PTxEwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIct
iJmlE65MXkHvQIsGmUaaOdDmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTZCOURCNDYxN0MxMUYwQjA2M0ExQzdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazf0DBACazf4wDQYJ
KoZIhvcNAQELBQADggEBANaNg5c34NqpXU1Rrcuffor7H1RhoDt2HUs4+6YT/JUN
EVCiUOW/CD5jpsL5RKdaT5n0AQZZE3cUlDVcdqu8fF/x/d7Z0WrWPhX7jFGk0W2g
BtNTjWntskW20PaPu5Ods4o8ZXIBNgtigf0UUEst/8hqbXQaiHO1YLczf2In38yx
puDk/72shwpFimYRuGZDw8p0svAbc77YVo28D3QAxMcGU7eSpLkF5LF0GS4bnOU+
IYbzFn9nvPPvGKXciJvEQXx8C1OYjJLLmQURVs9i3ofcvnOIBSy46P7PVsCqYeFo
fiU8mktvl3ijrT8A/uKemM5+6n+qyr4hc9XgUFJGPq8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:01 2025 by rpki-client