Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA25A9A624A11F09AEFB887DAE4EC9C.roa
File: CEA25A9A624A11F09AEFB887DAE4EC9C.roa (raw, json)
Hash identifier: dZ4gDTRqoXzawLFQiWp7JL9GbsW3rLrSCXMlsTd27oQ=
Subject key identifier: 01:65:44:7F:E3:CC:D9:55:12:58:2D:8E:F8:BA:A9:8E:EC:A8:15:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA25A9A624A11F09AEFB887DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 13:43:09 +0000
ROA not before: Wed 16 Jul 2025 13:43:02 +0000
ROA not after: Fri 25 Jul 2025 13:43:02 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101895 (0x18e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 13:43:02 2025 GMT
Not After : Jul 25 13:43:02 2025 GMT
Subject: CN=6877ac6d-1c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:b8:46:58:c2:7f:1b:8f:5c:f7:bd:a6:bd:
b6:4e:6b:73:8e:df:97:2d:fa:6d:d5:3d:fd:94:76:
28:ab:cd:19:50:05:d7:3d:42:d7:60:d0:4f:b3:6c:
00:98:9b:ac:e5:23:2c:ca:e1:68:f0:47:de:6d:b2:
03:23:32:80:94:53:b9:88:d3:b2:de:d9:b8:e4:3d:
c4:47:a6:8d:41:00:a9:72:63:16:97:5c:3d:ad:c9:
86:cd:dd:7e:0f:20:dd:9b:2a:15:d2:d0:b5:f7:0b:
e3:24:3f:5c:b4:70:26:b1:9d:5d:94:75:41:68:6b:
0f:db:94:77:2e:48:fe:7d:7d:ef:d5:2d:f4:ad:5e:
83:12:c8:4b:c2:6c:bc:c8:17:78:0e:92:0d:97:2c:
c3:14:4b:2b:64:df:15:9b:89:dd:11:97:aa:4f:1a:
be:35:71:8f:1d:04:6c:06:ba:31:58:27:fd:47:ab:
fa:5d:32:22:ca:ff:d6:ad:a4:bd:3b:1d:4a:00:aa:
5e:70:13:32:5f:ca:f0:51:fb:ee:49:b8:35:98:6e:
f8:6e:ae:5f:3b:94:b2:2d:95:c1:80:fb:84:23:ad:
99:07:12:c4:a5:91:09:d0:1c:1c:31:3f:96:2d:66:
18:14:f8:22:f8:8c:8d:98:d4:a9:02:a6:6a:02:aa:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:44:7F:E3:CC:D9:55:12:58:2D:8E:F8:BA:A9:8E:EC:A8:15:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA25A9A624A11F09AEFB887DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:99:fe:3d:3b:c9:26:14:9f:28:76:ce:de:0e:2e:d0:e2:7d:
7a:e5:b1:98:07:02:8e:a6:e4:38:05:c2:5e:e9:55:7d:2e:f5:
bf:be:a9:32:55:3b:e1:a5:5d:89:26:3f:cd:92:7b:f2:70:61:
5e:b7:a9:f2:1c:1c:d0:31:76:cb:08:ee:9a:75:0b:71:71:79:
a1:17:a1:0e:3d:52:02:9c:88:08:2d:69:e2:31:ec:ec:12:3c:
11:69:de:7f:1e:98:54:d4:03:3f:6a:e3:49:ff:2d:b4:f2:6b:
27:20:5c:ed:18:0e:f5:69:5b:3d:94:93:f0:6a:0c:72:d9:b4:
f0:5d:53:6d:37:ef:4d:80:9d:91:36:77:ca:02:c6:34:1b:d5:
15:06:fe:ef:e2:7e:1a:be:76:78:d9:11:2c:25:34:11:0e:01:
4f:be:e2:fe:4c:85:18:73:e4:4b:c4:5c:71:44:bf:b4:d5:8c:
ce:93:73:9b:3c:f9:1c:6e:ac:a8:86:3b:7e:83:87:bc:c0:91:
b9:52:1a:ac:81:16:74:c8:a8:79:f3:91:bd:96:d7:e0:b2:52:
fb:53:a0:a7:29:d0:86:f9:79:22:55:7a:a8:c7:1a:d7:80:27:
c1:c9:13:77:84:2e:23:62:e1:7e:68:38:b9:18:07:62:80:bf:
2c:1e:63:41
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAY4HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE2MTM0MzAyWhcNMjUwNzI1MTM0MzAyWjAYMRYw
FAYDVQQDEw02ODc3YWM2ZC0xYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApMS4RljCfxuPXPe9pr22Tmtzjt+XLfpt1T39lHYoq80ZUAXXPULXYNBP
s2wAmJus5SMsyuFo8EfebbIDIzKAlFO5iNOy3tm45D3ER6aNQQCpcmMWl1w9rcmG
zd1+DyDdmyoV0tC19wvjJD9ctHAmsZ1dlHVBaGsP25R3Lkj+fX3v1S30rV6DEshL
wmy8yBd4DpINlyzDFEsrZN8Vm4ndEZeqTxq+NXGPHQRsBroxWCf9R6v6XTIiyv/W
raS9Ox1KAKpecBMyX8rwUfvuSbg1mG74bq5fO5SyLZXBgPuEI62ZBxLEpZEJ0Bwc
MT+WLWYYFPgi+IyNmNSpAqZqAqplYwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAFl
RH/jzNlVElgtjvi6qY7sqBUbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRUEyNUE5QTYyNEExMUYwOUFFRkI4ODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsIQAwQCmsIYMA0GCSqG
SIb3DQEBCwUAA4IBAQA+mf49O8kmFJ8ods7eDi7Q4n165bGYBwKOpuQ4BcJe6VV9
LvW/vqkyVTvhpV2JJj/NknvycGFet6nyHBzQMXbLCO6adQtxcXmhF6EOPVICnIgI
LWniMezsEjwRad5/HphU1AM/auNJ/y208msnIFztGA71aVs9lJPwagxy2bTwXVNt
N+9NgJ2RNnfKAsY0G9UVBv7v4n4avnZ42REsJTQRDgFPvuL+TIUYc+RLxFxxRL+0
1YzOk3ObPPkcbqyohjt+g4e8wJG5UhqsgRZ0yKh585G9ltfgslL7U6CnKdCG+Xki
VXqoxxrXgCfByRN3hC4jYuF+aDi5GAdigL8sHmNB
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:43 2025 by rpki-client