Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A528DA1A591A11F09FDEEED5DAE4EC9C.roa
File: A528DA1A591A11F09FDEEED5DAE4EC9C.roa (raw, json)
Hash identifier: 6gXG76Pj0S/Z3HsZl/eQAFRMLT3vsmqa0On0hZKCOiE=
Subject key identifier: 22:81:AA:DD:9D:FD:94:39:F9:49:93:4C:E7:42:E4:ED:49:07:74:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ABA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A528DA1A591A11F09FDEEED5DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 21:05:43 +0000
ROA not before: Fri 04 Jul 2025 21:05:38 +0000
ROA not after: Fri 17 Jul 2026 21:05:38 +0000
asID: 61112
IP address blocks: 154.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101050 (0x18aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 21:05:38 2025 GMT
Not After : Jul 17 21:05:38 2026 GMT
Subject: CN=68684227-da5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:f0:27:d6:43:4d:f8:f6:ff:b7:82:4a:0b:
68:7a:d0:c0:11:18:de:d0:34:89:67:62:12:bc:a2:
48:4e:9b:d8:5b:7f:39:bd:26:9c:0d:11:6f:65:27:
8c:10:b1:51:1c:54:a0:7f:a1:ff:8c:0e:ee:10:c2:
1a:5e:5f:c7:4b:d9:66:67:b3:e1:12:8a:94:f4:28:
87:d2:04:00:46:4e:e9:7a:ff:e4:e4:0b:70:85:10:
05:7c:e9:01:13:94:2c:73:3f:c6:89:20:59:ff:e0:
83:f1:56:c0:e1:e3:2c:6f:6c:c2:c4:05:50:1c:5d:
33:55:33:bd:da:f0:42:fb:fc:94:c6:74:2e:bd:3d:
93:c4:62:eb:a3:cf:9b:78:3f:75:f8:3e:66:aa:ed:
a8:1e:f3:a3:62:fa:2c:cb:e6:fa:27:8f:6a:00:a3:
f8:51:7c:49:d5:02:0c:22:fd:f7:5a:9a:bb:ac:4f:
53:94:bb:da:46:0c:e4:a6:2f:9a:8b:4f:b3:09:20:
c6:d4:ac:5f:c3:d8:e6:d9:e7:50:c6:9a:b5:f1:60:
ea:57:31:37:f6:1a:31:5f:0b:46:a7:7e:1c:07:00:
a2:41:13:a6:cd:ba:08:b3:3f:4e:af:8d:46:d1:b6:
99:08:c6:78:04:43:7e:c6:cb:75:e0:8f:3d:1c:38:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:81:AA:DD:9D:FD:94:39:F9:49:93:4C:E7:42:E4:ED:49:07:74:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A528DA1A591A11F09FDEEED5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8a:2f:09:cf:26:93:09:86:32:3b:2d:fa:0c:e0:e9:26:27:
03:bb:5e:53:fa:3f:55:41:9a:5b:a3:39:78:0a:2b:9e:03:77:
a2:fe:0b:63:e7:f7:2b:37:b3:c3:a2:a7:d9:d8:01:ce:ab:b9:
1f:4b:cd:2f:d5:18:37:51:d4:1b:f7:f3:ae:28:1a:25:48:93:
a3:1d:1e:75:3a:2f:4e:46:9d:aa:44:6d:e9:f3:48:2c:7d:16:
e9:56:53:cd:e1:7d:cd:e4:19:67:15:65:76:ce:00:81:7a:b2:
8e:1b:68:e0:17:eb:84:2c:a9:91:94:f6:b1:25:79:1a:95:69:
a2:b3:b2:79:51:be:6a:5a:13:6c:cc:3b:63:d9:b7:d6:e9:ac:
58:84:c6:cd:65:96:6b:be:62:70:88:b0:dc:4a:62:8d:79:e2:
27:dc:23:5f:72:4d:25:f6:dc:de:d2:03:2b:2c:50:75:eb:21:
19:6d:38:71:9a:3b:e1:ef:52:44:91:95:d3:f2:1d:92:af:2d:
f6:e9:b8:41:14:e8:a1:06:d2:c7:2b:4f:f4:7f:c3:54:14:4f:
a1:af:88:fb:99:06:40:2f:ae:49:20:4e:cc:2c:70:f3:46:42:
3d:54:c7:9b:b4:70:3b:82:15:6f:54:36:5a:d3:88:34:b9:44:
3f:03:af:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYq6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA0MjEwNTM4WhcNMjYwNzE3MjEwNTM4WjAYMRYw
FAYDVQQDEw02ODY4NDIyNy1kYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsBnwJ9ZDTfj2/7eCSgtoetDAERje0DSJZ2ISvKJITpvYW385vSacDRFv
ZSeMELFRHFSgf6H/jA7uEMIaXl/HS9lmZ7PhEoqU9CiH0gQARk7pev/k5AtwhRAF
fOkBE5Qscz/GiSBZ/+CD8VbA4eMsb2zCxAVQHF0zVTO92vBC+/yUxnQuvT2TxGLr
o8+beD91+D5mqu2oHvOjYvosy+b6J49qAKP4UXxJ1QIMIv33Wpq7rE9TlLvaRgzk
pi+ai0+zCSDG1Kxfw9jm2edQxpq18WDqVzE39hoxXwtGp34cBwCiQROmzboIsz9O
r41G0baZCMZ4BEN+xst14I89HDghyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCKB
qt2d/ZQ5+UmTTOdC5O1JB3TeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTI4REExQTU5MUExMUYwOUZERUVFRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsy3MA0GCSqGSIb3DQEB
CwUAA4IBAQBLii8JzyaTCYYyOy36DODpJicDu15T+j9VQZpbozl4CiueA3ei/gtj
5/crN7PDoqfZ2AHOq7kfS80v1Rg3UdQb9/OuKBolSJOjHR51Oi9ORp2qRG3p80gs
fRbpVlPN4X3N5BlnFWV2zgCBerKOG2jgF+uELKmRlPaxJXkalWmis7J5Ub5qWhNs
zDtj2bfW6axYhMbNZZZrvmJwiLDcSmKNeeIn3CNfck0l9tze0gMrLFB16yEZbThx
mjvh71JEkZXT8h2Sry326bhBFOihBtLHK0/0f8NUFE+hr4j7mQZAL65JIE7MLHDz
RkI9VMebtHA7ghVvVDZa04g0uUQ/A699
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:01 2025 by rpki-client