Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A110DF8059CA11F0A30B47D5DAE4EC9C.roa
File: A110DF8059CA11F0A30B47D5DAE4EC9C.roa (raw, json)
Hash identifier: QbrnPD94EmBB8mMv12eD9mZCh5fCsSITxD3Xaiyi1i8=
Subject key identifier: 80:84:4D:B7:03:E5:00:6D:3B:DB:4A:12:75:DE:97:16:83:4B:8F:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A110DF8059CA11F0A30B47D5DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 18:05:27 +0000
ROA not before: Sat 05 Jul 2025 18:05:22 +0000
ROA not after: Thu 04 Sep 2025 18:05:22 +0000
asID: 398993
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101182 (0x18b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 18:05:22 2025 GMT
Not After : Sep 4 18:05:22 2025 GMT
Subject: CN=68696967-9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:56:0a:e5:8c:eb:8a:a8:17:93:86:90:bc:
f9:54:f7:ef:63:4a:90:2c:1e:5a:70:25:9c:61:16:
ba:fc:0f:9b:01:f0:00:b9:fc:2a:44:7c:6a:f4:b9:
66:99:7d:fe:f2:76:34:05:2d:83:a4:39:5f:f7:ef:
76:6c:9c:39:94:1f:63:4b:70:e6:a2:7b:67:86:75:
90:e9:1f:7f:f5:d4:fd:9a:b6:69:c0:3c:72:d0:e2:
2b:ec:b6:9e:c4:d1:32:0f:d8:73:96:e8:aa:c1:ae:
9b:85:30:df:2e:50:c3:31:f5:a6:4c:07:56:bc:55:
8c:1f:14:59:16:72:f6:97:ef:44:43:96:a1:ef:a0:
fe:9b:13:da:6d:45:19:f6:44:87:21:7c:66:0b:45:
4f:19:cd:96:e5:e7:92:19:8d:38:4b:3e:cc:7c:d2:
8c:c9:b3:f3:3f:6b:40:78:69:e0:87:6b:12:32:66:
3b:82:b0:d6:9d:f6:33:0c:84:e1:f4:1d:50:b6:22:
61:a9:9f:32:41:97:38:e2:79:23:5d:15:c0:d3:b9:
4c:9d:e4:99:3d:b4:e2:fd:20:c9:05:6f:e7:24:31:
f9:ea:5d:b3:b8:01:36:5e:3d:14:8a:18:93:6a:29:
51:0a:de:97:c0:0d:31:55:41:46:28:40:05:3d:2b:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:84:4D:B7:03:E5:00:6D:3B:DB:4A:12:75:DE:97:16:83:4B:8F:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A110DF8059CA11F0A30B47D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
46:dc:e0:a9:6a:65:51:3c:fa:43:ba:44:99:3d:57:71:fa:a7:
01:c7:05:3f:87:c5:52:63:37:a5:33:36:61:dd:d0:56:02:33:
ec:00:2a:5f:ce:6e:22:66:cd:8f:f8:9b:94:60:23:87:cb:30:
28:a1:17:ce:10:33:3f:e4:67:fd:29:b7:ca:14:b2:b4:bc:d8:
de:47:9c:9b:d8:93:cf:26:c3:2d:ae:70:16:56:1d:ea:85:23:
a4:51:98:24:72:5b:51:3d:d1:80:d0:cf:ce:42:a2:fb:6e:54:
ec:83:d3:f0:d3:7d:d8:46:e1:3e:11:0a:52:20:1e:8b:8b:c0:
42:c1:b9:7c:00:94:4b:90:ec:f0:74:0a:a9:a8:e7:cb:0f:2f:
29:f1:f5:e7:21:ed:ec:03:7f:98:b0:17:99:75:b2:ce:d8:0a:
19:56:b0:63:04:ed:47:51:c8:49:a4:ca:76:9d:19:cb:66:26:
d9:84:b2:67:db:4e:08:8c:36:60:dc:f8:bd:d5:9d:46:cb:1d:
69:48:ac:96:fa:48:b4:7d:78:92:f8:1a:72:b6:bb:0c:fc:04:
a4:2c:86:a8:09:74:9e:17:2c:06:f9:0b:4e:bb:ea:b3:1f:5e:
21:7f:e6:da:64:c5:d1:40:eb:7d:39:44:b2:97:5c:ba:f9:96:
3e:20:16:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYs+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTgwNTIyWhcNMjUwOTA0MTgwNTIyWjAYMRYw
FAYDVQQDEw02ODY5Njk2Ny05MTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzytWCuWM64qoF5OGkLz5VPfvY0qQLB5acCWcYRa6/A+bAfAAufwqRHxq
9LlmmX3+8nY0BS2DpDlf9+92bJw5lB9jS3DmontnhnWQ6R9/9dT9mrZpwDxy0OIr
7LaexNEyD9hzluiqwa6bhTDfLlDDMfWmTAdWvFWMHxRZFnL2l+9EQ5ah76D+mxPa
bUUZ9kSHIXxmC0VPGc2W5eeSGY04Sz7MfNKMybPzP2tAeGngh2sSMmY7grDWnfYz
DITh9B1QtiJhqZ8yQZc44nkjXRXA07lMneSZPbTi/SDJBW/nJDH56l2zuAE2Xj0U
ihiTailRCt6XwA0xVUFGKEAFPSs2bwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFICE
TbcD5QBtO9tKEnXelxaDS483MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMTEwREY4MDU5Q0ExMUYwQTMwQjQ3RDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQBG3OCpamVRPPpDukSZPVdx+qcBxwU/h8VSYzelMzZh3dBWAjPsACpf
zm4iZs2P+JuUYCOHyzAooRfOEDM/5Gf9KbfKFLK0vNjeR5yb2JPPJsMtrnAWVh3q
hSOkUZgkcltRPdGA0M/OQqL7blTsg9Pw033YRuE+EQpSIB6Li8BCwbl8AJRLkOzw
dAqpqOfLDy8p8fXnIe3sA3+YsBeZdbLO2AoZVrBjBO1HUchJpMp2nRnLZibZhLJn
204IjDZg3Pi91Z1Gyx1pSKyW+ki0fXiS+BpytrsM/ASkLIaoCXSeFywG+QtOu+qz
H14hf+baZMXRQOt9OUSyl1y6+ZY+IBZg
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client