Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA9406C8598D11F0899231D0DAE4EC9C.roa
File: AA9406C8598D11F0899231D0DAE4EC9C.roa (raw, json)
Hash identifier: 7JZz7haLs4cGnD8LXTK7bGOdAV658fL+k8sisFY668U=
Subject key identifier: 11:BD:B3:6D:5D:93:0F:A5:5F:4B:4A:B8:62:88:CB:82:4B:D9:02:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018ADC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA9406C8598D11F0899231D0DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 10:49:04 +0000
ROA not before: Sat 05 Jul 2025 10:48:59 +0000
ROA not after: Sun 10 Aug 2025 10:48:59 +0000
asID: 150698
IP address blocks: 154.197.72.0/24 maxlen: 24
154.197.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101084 (0x18adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 10:48:59 2025 GMT
Not After : Aug 10 10:48:59 2025 GMT
Subject: CN=68690320-ee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:ec:1b:03:76:a0:4c:9b:ab:18:6b:5a:58:
cc:e4:22:e7:ca:71:48:65:16:f3:8c:07:a4:e4:ba:
0b:57:62:84:ec:b4:3b:e3:31:19:d4:46:08:f7:92:
6c:01:26:c1:03:4f:81:79:07:f5:af:eb:8d:98:19:
2a:0a:ef:7c:96:bf:4f:62:bf:5c:eb:13:ff:ee:ba:
06:58:85:13:31:59:be:a9:1d:c6:64:38:4e:f2:55:
f5:43:a8:e4:47:00:6d:36:d1:32:76:3d:5b:f9:96:
3c:cf:da:5d:2f:66:d4:00:a8:ee:e4:1c:28:84:e8:
84:dc:90:7e:6a:fc:3b:b9:2d:9a:e0:60:c8:02:74:
ca:8c:92:ab:ee:4f:ac:ab:98:58:cb:94:c3:09:58:
c2:19:c7:76:c8:e1:e2:19:31:97:2a:e5:c7:71:70:
7d:8a:5f:ce:19:10:85:b5:35:88:c1:f3:84:ff:64:
c2:f9:61:48:e5:99:97:95:d2:7e:3c:16:53:43:75:
1b:e9:35:eb:69:8d:4d:cd:94:5a:90:46:3c:85:03:
e9:65:94:e2:01:99:bc:90:20:1b:05:87:5e:ec:c9:
10:47:75:64:ed:cf:0a:6d:78:19:5d:b6:7e:55:d5:
a9:94:19:d8:a1:f1:8e:94:e0:dd:90:69:88:6f:08:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:B3:6D:5D:93:0F:A5:5F:4B:4A:B8:62:88:CB:82:4B:D9:02:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA9406C8598D11F0899231D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.72.0/23
Signature Algorithm: sha256WithRSAEncryption
84:ed:7e:9d:a0:98:c5:f7:95:0d:4d:3d:a0:34:9e:1f:cb:3e:
b8:8a:b3:47:db:cb:f7:12:12:1c:f7:34:62:1f:87:78:da:ff:
46:9f:9f:1a:cc:a8:5c:87:18:c6:2d:2a:03:9a:48:ac:8a:e2:
99:bb:aa:96:4e:a7:cb:c5:51:6a:db:11:fe:90:3b:f6:8d:97:
d8:95:ef:c2:03:fd:9a:59:87:69:13:9c:7f:67:fc:75:c5:64:
47:be:80:60:6d:a2:bb:08:b4:d9:0b:88:6f:e9:8b:8d:f7:b7:
a0:9e:97:5f:8b:f3:ba:3b:3e:5a:33:3b:65:75:b3:89:13:c9:
f5:f6:95:20:eb:3c:2f:38:a9:bd:60:0f:d7:3f:6a:c8:03:ff:
94:e0:78:88:6a:86:61:ad:44:ee:6b:07:40:cd:a6:2a:7e:de:
91:d1:30:2b:77:46:4b:1b:14:19:34:30:c2:36:41:89:fe:a9:
c6:91:e9:f1:36:26:b2:3e:ba:50:bc:53:31:6f:1d:f2:81:e6:
f3:00:38:e0:49:f7:28:7f:50:17:76:d7:fc:f2:d2:08:11:d9:
4c:75:ea:92:4c:00:f9:0d:19:74:34:02:66:f0:3f:0b:c6:ae:
35:e3:a1:bd:2c:6d:dd:cf:e3:d9:d4:63:d4:b0:ca:e8:e9:d6:
1f:43:0e:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYrcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTA0ODU5WhcNMjUwODEwMTA0ODU5WjAYMRYw
FAYDVQQDEw02ODY5MDMyMC1lZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtUHsGwN2oEybqxhrWljM5CLnynFIZRbzjAek5LoLV2KE7LQ74zEZ1EYI
95JsASbBA0+BeQf1r+uNmBkqCu98lr9PYr9c6xP/7roGWIUTMVm+qR3GZDhO8lX1
Q6jkRwBtNtEydj1b+ZY8z9pdL2bUAKju5BwohOiE3JB+avw7uS2a4GDIAnTKjJKr
7k+sq5hYy5TDCVjCGcd2yOHiGTGXKuXHcXB9il/OGRCFtTWIwfOE/2TC+WFI5ZmX
ldJ+PBZTQ3Ub6TXraY1NzZRakEY8hQPpZZTiAZm8kCAbBYde7MkQR3Vk7c8KbXgZ
XbZ+VdWplBnYofGOlODdkGmIbwhhswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBG9
s21dkw+lX0tKuGKIy4JL2QJjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQTk0MDZDODU5OEQxMUYwODk5MjMxRDBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsVIMA0GCSqGSIb3DQEB
CwUAA4IBAQCE7X6doJjF95UNTT2gNJ4fyz64irNH28v3EhIc9zRiH4d42v9Gn58a
zKhchxjGLSoDmkisiuKZu6qWTqfLxVFq2xH+kDv2jZfYle/CA/2aWYdpE5x/Z/x1
xWRHvoBgbaK7CLTZC4hv6YuN97egnpdfi/O6Oz5aMztldbOJE8n19pUg6zwvOKm9
YA/XP2rIA/+U4HiIaoZhrUTuawdAzaYqft6R0TArd0ZLGxQZNDDCNkGJ/qnGkenx
NiayPrpQvFMxbx3ygebzADjgSfcof1AXdtf88tIIEdlMdeqSTAD5DRl0NAJm8D8L
xq4146G9LG3dz+PZ1GPUsMro6dYfQw7x
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:56 2025 by rpki-client