Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC079E245CF211F0BA896DE7DAE4EC9C.roa
File: CC079E245CF211F0BA896DE7DAE4EC9C.roa (raw, json)
Hash identifier: ZO6UCnRmpto8wrKICMdBiDHOmlZXf3UPFPHmsVkwRdw=
Subject key identifier: DE:E4:E4:04:A9:E6:CA:C9:BA:B2:BB:49:5B:62:79:D3:53:44:3C:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC079E245CF211F0BA896DE7DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 18:30:33 +0000
ROA not before: Wed 09 Jul 2025 18:30:28 +0000
ROA not after: Sat 16 Aug 2025 18:30:28 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101630 (0x18cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 18:30:28 2025 GMT
Not After : Aug 16 18:30:28 2025 GMT
Subject: CN=686eb549-80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:c6:9b:8b:f1:42:a6:73:24:e4:5d:f9:4f:
f2:0c:80:15:e4:d1:bf:8c:d0:51:4f:a9:e7:2d:65:
9a:1b:0f:0d:9b:bb:67:f5:8e:85:0a:4d:95:f4:f5:
f4:b6:b3:73:b5:9a:a9:6c:d4:84:a4:17:6b:d6:19:
93:e3:b1:f1:2d:c8:0d:87:19:06:e6:61:63:1b:a8:
3b:43:c9:8b:2c:91:82:c3:3c:7e:99:2e:37:0c:5e:
50:99:41:ea:7c:64:74:95:c3:3b:3c:95:c8:0f:e0:
96:90:a1:87:8a:ab:47:8c:fe:3a:ee:70:3f:33:37:
84:71:7c:3d:d6:98:0a:14:12:ea:36:3a:5a:b9:e6:
6e:f5:20:bf:ac:34:39:d2:f9:3d:b1:35:04:06:8b:
2b:74:0f:2e:e3:d1:56:e7:ef:6e:94:f2:62:49:4c:
1b:52:4a:0b:80:07:e6:92:c4:6f:6a:a0:8e:e2:5d:
44:8d:e3:0e:f8:36:54:c9:f0:26:a7:99:12:cc:73:
22:7c:77:b1:12:13:b5:d3:c9:6c:0a:2d:ca:b1:82:
39:2d:96:be:44:c5:26:c8:4b:67:75:7f:0a:4b:24:
70:bb:a0:e1:34:9a:41:57:15:38:a7:75:a6:b7:d4:
5e:75:25:ff:ab:eb:19:b3:90:c6:fd:06:e3:15:2f:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:E4:04:A9:E6:CA:C9:BA:B2:BB:49:5B:62:79:D3:53:44:3C:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC079E245CF211F0BA896DE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
03:49:b9:69:84:90:4b:08:1c:80:da:8d:ee:4b:af:56:59:0e:
2d:43:b2:ca:11:73:a6:c2:03:a2:9e:0f:e3:ac:73:5c:b0:55:
dc:7e:37:39:1f:89:64:bd:16:dd:88:f7:6c:66:72:92:40:19:
18:88:e7:5c:a1:b7:8c:16:0a:54:78:ef:db:85:9d:23:d4:17:
49:f6:25:6d:f5:b1:4c:da:b8:97:a4:63:11:6e:c9:56:e5:a0:
3b:2f:21:39:b6:0c:d7:45:39:b3:0e:15:23:ea:ff:cc:dc:42:
ee:4d:72:43:2f:b2:2a:02:bd:b9:0f:b8:01:9c:45:22:fe:3f:
97:af:8b:4d:8c:8c:1c:87:06:81:81:13:17:0e:71:fc:01:47:
6a:ac:6b:d6:e6:e0:c5:f3:ab:68:9a:ad:63:1d:a3:dc:08:cf:
f9:18:24:5b:10:a7:a8:cd:5a:13:d0:7d:df:ff:8e:eb:d6:d9:
31:bc:74:2b:42:3a:e4:fd:92:c2:ce:bf:ab:18:4a:3f:bc:5a:
89:f9:57:9d:31:40:1c:4b:82:af:0d:bf:3c:fb:c1:31:50:f6:
17:e7:a5:94:f1:c3:ca:15:0a:1e:3d:a5:6e:cf:55:87:68:cb:
40:eb:6a:c7:e4:fa:b0:bc:95:7a:be:6e:ef:d6:3c:cd:83:61:
25:51:9f:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYz+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA5MTgzMDI4WhcNMjUwODE2MTgzMDI4WjAYMRYw
FAYDVQQDEw02ODZlYjU0OS04MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2/zGm4vxQqZzJORd+U/yDIAV5NG/jNBRT6nnLWWaGw8Nm7tn9Y6FCk2V
9PX0trNztZqpbNSEpBdr1hmT47HxLcgNhxkG5mFjG6g7Q8mLLJGCwzx+mS43DF5Q
mUHqfGR0lcM7PJXID+CWkKGHiqtHjP467nA/MzeEcXw91pgKFBLqNjpaueZu9SC/
rDQ50vk9sTUEBosrdA8u49FW5+9ulPJiSUwbUkoLgAfmksRvaqCO4l1EjeMO+DZU
yfAmp5kSzHMifHexEhO108lsCi3KsYI5LZa+RMUmyEtndX8KSyRwu6DhNJpBVxU4
p3Wmt9RedSX/q+sZs5DG/QbjFS/G/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN7k
5ASp5srJurK7SVtiedNTRDyuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzA3OUUyNDVDRjIxMUYwQkE4OTZERTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQADSblphJBLCByA2o3uS69WWQ4tQ7LKEXOmwgOing/jrHNcsFXcfjc5
H4lkvRbdiPdsZnKSQBkYiOdcobeMFgpUeO/bhZ0j1BdJ9iVt9bFM2riXpGMRbslW
5aA7LyE5tgzXRTmzDhUj6v/M3ELuTXJDL7IqAr25D7gBnEUi/j+Xr4tNjIwchwaB
gRMXDnH8AUdqrGvW5uDF86tomq1jHaPcCM/5GCRbEKeozVoT0H3f/47r1tkxvHQr
Qjrk/ZLCzr+rGEo/vFqJ+VedMUAcS4KvDb88+8ExUPYX56WU8cPKFQoePaVuz1WH
aMtA62rH5PqwvJV6vm7v1jzNg2ElUZ83
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:52 2025 by rpki-client