Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19B636058BC11F0ACA2A180DAE4EC9C.roa
File: C19B636058BC11F0ACA2A180DAE4EC9C.roa (raw, json)
Hash identifier: Yh31/JtpzUqt9ZVU7EMF5pZDGd8vF56C31lb3wMgJuI=
Subject key identifier: 04:B5:92:BF:1A:1D:E3:BB:93:FE:8F:1E:EF:A2:4E:6C:8B:D2:D6:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19B636058BC11F0ACA2A180DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 09:53:38 +0000
ROA not before: Fri 04 Jul 2025 09:53:33 +0000
ROA not after: Tue 05 Aug 2025 09:53:33 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100928 (0x18a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 09:53:33 2025 GMT
Not After : Aug 5 09:53:33 2025 GMT
Subject: CN=6867a4a2-34c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:4c:f3:a7:40:18:f7:b7:77:ac:01:87:68:
10:14:89:6b:40:28:5e:e5:61:c8:0c:c7:ec:16:66:
7d:d1:b2:98:9e:d7:ff:19:07:dc:3b:54:ba:d1:af:
bf:2c:00:4a:7d:01:3f:9d:06:da:12:df:70:f4:bf:
0b:4a:60:43:d6:ac:0e:25:e6:5a:0d:b5:fb:40:f3:
93:1e:cf:d2:2a:68:72:3f:66:9b:95:72:5d:19:6d:
b4:c6:13:a1:cd:48:af:c5:1b:e5:d9:01:f9:0b:da:
93:d4:70:95:cc:8a:c6:3f:cd:ca:39:9e:63:bb:c9:
4f:b5:d1:ff:97:19:71:d8:9e:79:39:e2:f2:68:f8:
21:ab:8d:57:c5:6e:a7:5b:49:2d:16:87:cd:dc:d3:
a0:4e:8f:e2:9c:e8:15:71:e2:93:54:86:2e:7a:aa:
97:b2:f1:22:3c:bb:3e:c0:b5:e8:97:53:ad:4e:76:
2b:e7:e9:e6:37:b6:3d:ac:f5:fa:34:f9:0c:35:90:
28:ac:ca:f3:54:be:03:dc:29:a7:2a:cc:51:e2:eb:
12:7e:bd:8a:5e:0b:7e:91:fc:8f:c3:9b:d6:8c:56:
6c:b1:17:47:03:1d:96:be:d4:fc:4a:2b:e0:e4:f7:
50:a2:e5:c2:17:5d:11:b0:19:93:a9:19:ca:43:9c:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:92:BF:1A:1D:E3:BB:93:FE:8F:1E:EF:A2:4E:6C:8B:D2:D6:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19B636058BC11F0ACA2A180DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:e2:cb:bc:72:7c:4a:40:28:e8:46:b8:7b:2d:76:51:ac:57:
d2:8e:17:9b:87:e7:1f:cf:42:3a:ac:92:86:14:2b:54:1e:19:
a6:3a:59:5b:73:f4:73:8d:92:cf:4b:5d:29:ba:af:a5:8a:08:
83:e6:18:fc:d1:c8:53:b0:fa:59:f6:4d:c0:9f:40:5d:a1:51:
40:81:c6:4d:15:de:36:81:aa:5d:58:2b:ba:c6:af:09:7b:e0:
14:9d:bc:30:cc:88:f4:9a:33:95:84:ff:fd:8c:5e:31:52:ad:
47:b5:f9:56:8a:b8:a8:39:5b:d6:88:73:d7:4a:29:a1:ad:45:
ab:2f:f9:a5:45:ef:5a:63:63:e1:c1:76:78:24:d9:1a:2d:f6:
de:53:94:99:37:5d:a4:f7:fe:ed:ca:f4:dd:32:34:ad:52:0a:
3f:79:0a:28:dc:0b:df:ad:73:76:88:99:22:32:5b:2b:03:8a:
72:67:15:c7:63:e4:aa:00:47:49:20:65:2f:d4:43:31:b9:42:
7b:78:8b:e7:72:41:4c:cc:24:c8:0a:58:83:53:71:ef:8e:c9:
ec:4e:c7:69:4c:96:f8:2c:4a:4f:bb:81:46:e0:3f:ab:a6:f0:
a2:42:06:f4:d2:d3:86:7e:db:8c:2e:75:02:94:83:31:7b:5a:
91:bf:1f:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYpAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA0MDk1MzMzWhcNMjUwODA1MDk1MzMzWjAYMRYw
FAYDVQQDEw02ODY3YTRhMi0zNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsHxM86dAGPe3d6wBh2gQFIlrQChe5WHIDMfsFmZ90bKYntf/GQfcO1S6
0a+/LABKfQE/nQbaEt9w9L8LSmBD1qwOJeZaDbX7QPOTHs/SKmhyP2ablXJdGW20
xhOhzUivxRvl2QH5C9qT1HCVzIrGP83KOZ5ju8lPtdH/lxlx2J55OeLyaPghq41X
xW6nW0ktFofN3NOgTo/inOgVceKTVIYueqqXsvEiPLs+wLXol1OtTnYr5+nmN7Y9
rPX6NPkMNZAorMrzVL4D3CmnKsxR4usSfr2KXgt+kfyPw5vWjFZssRdHAx2WvtT8
Sivg5PdQouXCF10RsBmTqRnKQ5znuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAS1
kr8aHeO7k/6PHu+iTmyL0tYCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTlCNjM2MDU4QkMxMUYwQUNBMkExODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtAgMA0GCSqGSIb3DQEB
CwUAA4IBAQC64su8cnxKQCjoRrh7LXZRrFfSjhebh+cfz0I6rJKGFCtUHhmmOllb
c/RzjZLPS10puq+ligiD5hj80chTsPpZ9k3An0BdoVFAgcZNFd42gapdWCu6xq8J
e+AUnbwwzIj0mjOVhP/9jF4xUq1HtflWirioOVvWiHPXSimhrUWrL/mlRe9aY2Ph
wXZ4JNkaLfbeU5SZN12k9/7tyvTdMjStUgo/eQoo3AvfrXN2iJkiMlsrA4pyZxXH
Y+SqAEdJIGUv1EMxuUJ7eIvnckFMzCTICliDU3HvjsnsTsdpTJb4LEpPu4FG4D+r
pvCiQgb00tOGftuMLnUClIMxe1qRvx/J
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:56 2025 by rpki-client