Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7798E985B5911F0B578277EDAE4EC9C.roa
File: C7798E985B5911F0B578277EDAE4EC9C.roa (raw, json)
Hash identifier: 9YvfaU0dXMYy+ZWZt1SRx8cOG8y3xuVv8IqBoWp1dqs=
Subject key identifier: F5:ED:BB:B8:70:86:28:AB:39:0B:01:B2:20:6C:03:BB:1C:F6:12:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7798E985B5911F0B578277EDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 17:42:41 +0000
ROA not before: Mon 07 Jul 2025 17:42:35 +0000
ROA not after: Fri 17 Jul 2026 17:42:35 +0000
asID: 8796
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101434 (0x18c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 17:42:35 2025 GMT
Not After : Jul 17 17:42:35 2026 GMT
Subject: CN=686c0711-7680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:f3:65:7d:4f:ce:4a:d1:64:59:b9:74:ce:
54:9d:5a:59:c1:2c:b1:56:9b:e0:bf:6f:9a:95:d5:
0d:5a:8a:fa:1f:8b:92:19:ca:2e:ff:c1:c8:89:58:
3f:fa:bc:07:d5:26:f6:3d:9c:be:ef:5a:da:6e:e9:
11:90:c1:02:e8:74:7d:14:0f:44:d2:c8:41:b4:b5:
e0:c9:28:8c:f8:dd:c2:37:57:9f:07:f3:e9:9c:3a:
bc:a2:44:8d:9a:5b:af:ef:3e:8b:e5:52:94:c8:0f:
55:f2:4d:91:ef:c1:54:86:1b:2a:0c:7f:4a:d8:65:
f1:2c:48:6b:48:29:5a:43:d6:36:2f:4f:62:d7:12:
d2:b2:b9:cf:71:ae:18:0f:17:9e:9a:58:26:b1:b2:
83:e7:96:61:20:46:5b:22:4a:bd:a2:17:b0:c1:b6:
89:49:9b:38:42:6c:a9:0f:cc:f0:42:94:a6:33:ef:
6b:3c:87:a3:40:5d:e0:29:a4:90:a4:c9:ff:69:b8:
c5:9b:fc:80:bf:4a:a9:cd:6a:23:0b:08:85:a7:b7:
64:e4:12:fe:df:92:84:ba:01:50:d6:42:cf:cf:1e:
d8:b5:71:e2:72:b4:cd:61:7e:75:a9:11:a3:76:6b:
b3:ac:8b:3e:ec:72:cc:ee:62:4b:7e:42:54:e0:0c:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:BB:B8:70:86:28:AB:39:0B:01:B2:20:6C:03:BB:1C:F6:12:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7798E985B5911F0B578277EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
94:64:35:c0:49:8e:48:c0:d6:1d:66:c3:be:90:a8:74:cf:79:
84:1e:31:04:36:2b:91:9e:c2:20:2e:da:0a:9a:59:b6:de:b9:
65:e0:6c:b3:f8:9e:df:d1:b5:7a:bc:de:59:e6:97:51:c6:9a:
b9:d5:98:50:c2:39:98:8a:95:1d:54:81:87:29:0f:20:74:fa:
99:5b:6e:37:e2:1c:9e:5f:f3:db:d2:29:1a:36:6f:79:36:c5:
c6:69:0f:a4:7a:3c:fb:3b:36:55:5b:98:c7:8e:dc:ee:d5:a0:
36:10:fc:d3:ad:bf:e5:66:9e:88:c0:64:b4:18:04:ef:ab:84:
cc:72:6f:9a:4b:8e:53:40:10:ed:de:91:0e:71:6a:ce:16:ae:
1f:0b:fc:70:4a:8c:0b:25:9a:51:86:71:3e:a2:9c:ef:d5:31:
8d:51:c3:05:49:8e:99:0b:4f:79:b7:f8:ed:63:67:f3:15:43:
6b:5b:19:f8:25:cd:fa:1b:e4:f9:af:fd:95:f2:60:68:a9:2b:
55:36:96:a0:f3:96:42:54:91:be:80:2d:a6:44:3b:00:03:ad:
95:8a:5f:e3:45:db:fe:66:ff:b6:c8:3a:6a:14:29:ad:5c:71:
57:e4:67:62:de:90:cd:54:6b:f3:0b:4e:57:a2:a1:b3:a8:e6:
03:86:5b:b9
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAYw6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA3MTc0MjM1WhcNMjYwNzE3MTc0MjM1WjAYMRYw
FAYDVQQDEw02ODZjMDcxMS03NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA06TzZX1PzkrRZFm5dM5UnVpZwSyxVpvgv2+aldUNWor6H4uSGcou/8HI
iVg/+rwH1Sb2PZy+71rabukRkMEC6HR9FA9E0shBtLXgySiM+N3CN1efB/PpnDq8
okSNmluv7z6L5VKUyA9V8k2R78FUhhsqDH9K2GXxLEhrSClaQ9Y2L09i1xLSsrnP
ca4YDxeemlgmsbKD55ZhIEZbIkq9ohewwbaJSZs4QmypD8zwQpSmM+9rPIejQF3g
KaSQpMn/abjFm/yAv0qpzWojCwiFp7dk5BL+35KEugFQ1kLPzx7YtXHicrTNYX51
qRGjdmuzrIs+7HLM7mJLfkJU4AyT9QIDAQABo4ICvjCCArowHQYDVR0OBBYEFPXt
u7hwhiirOQsBsiBsA7sc9hJ1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNzc5OEU5ODVCNTkxMUYwQjU3ODI3N0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQGmsHAAwQAmsp1AwQDmsp4
MAsDBAGa2eoDAwGa2DANBgkqhkiG9w0BAQsFAAOCAQEAlGQ1wEmOSMDWHWbDvpCo
dM95hB4xBDYrkZ7CIC7aCppZtt65ZeBss/ie39G1erzeWeaXUcaaudWYUMI5mIqV
HVSBhykPIHT6mVtuN+Icnl/z29IpGjZveTbFxmkPpHo8+zs2VVuYx47c7tWgNhD8
062/5WaeiMBktBgE76uEzHJvmkuOU0AQ7d6RDnFqzhauHwv8cEqMCyWaUYZxPqKc
79UxjVHDBUmOmQtPebf47WNn8xVDa1sZ+CXN+hvk+a/9lfJgaKkrVTaWoPOWQlSR
voAtpkQ7AAOtlYpf40Xb/mb/tsg6ahQprVxxV+RnYt6QzVRr8wtOV6Khs6jmA4Zb
uQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 23:53:08 2025 by rpki-client