Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0193C6DE664011F0B864E4D9DAE4EC9C.roa
File: 0193C6DE664011F0B864E4D9DAE4EC9C.roa (raw, json)
Hash identifier: 1946YXwo8q/KpEz7tbnlKeEY8DbrHYuDP6swfVYu6rI=
Subject key identifier: F2:1A:FB:AE:A0:38:04:50:FF:20:AB:8A:98:FF:84:13:96:83:8B:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0193C6DE664011F0B864E4D9DAE4EC9C.roa
Signing time: Mon 21 Jul 2025 14:35:54 +0000
ROA not before: Mon 21 Jul 2025 14:35:49 +0000
ROA not after: Tue 29 Jul 2025 14:35:49 +0000
asID: 271990
IP address blocks: 154.223.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102007 (0x18e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 14:35:49 2025 GMT
Not After : Jul 29 14:35:49 2025 GMT
Subject: CN=687e504a-c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:41:8c:c1:69:44:9b:b4:48:e1:6a:49:fb:
25:9f:ad:7e:dd:93:02:b8:7e:4d:d0:16:1a:06:ad:
d0:92:81:bc:93:a2:c5:2a:d1:f4:a5:16:56:b0:18:
e6:04:35:8b:f3:d9:b9:fc:8d:19:60:f5:8f:9f:bc:
19:ad:25:04:ef:a8:80:28:bc:67:ce:d9:d8:23:51:
0f:a4:e9:99:da:61:e9:60:cc:26:c7:6b:1a:c2:02:
4b:a4:75:ab:7c:94:6f:94:fa:e7:9c:14:62:06:f8:
a6:60:df:47:4d:83:d2:31:f7:97:f2:eb:d8:ad:44:
29:af:f6:63:e7:49:3c:19:2a:88:6d:9e:49:36:f9:
c4:76:85:41:8e:a7:5f:14:a5:f5:04:4d:fb:5a:5b:
8f:d1:7d:4d:ee:08:21:ef:07:59:b8:ac:b4:83:45:
07:11:8e:4d:38:cb:b1:7b:16:a0:d6:d4:b9:06:f6:
3a:91:a0:17:85:ae:07:d0:ed:ae:f4:a9:a0:5b:29:
ae:90:22:2a:b3:6d:28:79:9b:59:80:c1:4c:63:c3:
55:fa:36:a8:b9:fb:33:b0:fd:48:6e:0a:95:c7:35:
86:14:69:38:00:1f:ed:5f:95:e9:0f:a8:19:8b:18:
6b:ac:d5:0e:71:ac:15:65:e2:ed:a2:77:a8:bc:c7:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:FB:AE:A0:38:04:50:FF:20:AB:8A:98:FF:84:13:96:83:8B:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0193C6DE664011F0B864E4D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cf:50:2a:5c:e3:13:c4:77:f8:e7:b0:fd:d4:d8:b4:2d:db:
4f:b9:44:ca:44:5a:6c:ea:f2:97:38:80:f0:25:e8:81:22:f7:
84:f2:b0:c5:68:cd:16:6d:2f:4a:3b:89:ce:f5:52:c2:49:bb:
6f:58:b0:17:ac:8d:7c:71:94:c1:c3:e8:8e:0b:06:b2:d5:e3:
ea:0f:c8:c5:e0:01:68:54:64:81:b3:ed:82:4f:b2:0f:37:41:
39:1e:21:e0:a1:2b:66:b5:e0:39:36:df:2b:08:73:3a:a8:6f:
5c:98:e6:74:61:9a:d2:a4:d2:cd:dc:d9:f6:06:dd:14:44:d5:
f2:80:ea:84:54:43:de:d8:63:a6:ab:b7:25:82:9e:fb:4a:67:
59:46:54:93:47:0a:43:ec:dc:f4:cf:7a:50:ac:23:84:af:d4:
39:23:37:b4:1b:0c:1d:ba:4b:2b:fb:73:3d:5f:16:ed:30:1c:
5f:c3:d2:6f:32:7c:e0:23:49:b5:af:23:00:8f:69:73:75:4c:
d7:d7:c5:20:d9:ab:94:9d:e8:64:36:72:c7:68:84:4f:8c:0a:
e4:27:ce:01:d5:87:2e:d3:7e:68:ce:1a:c0:ae:67:e9:8f:16:
62:96:ba:88:a5:4b:8e:12:01:93:b6:4e:9e:50:b1:8c:b7:1c:
76:17:fb:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY53MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIxMTQzNTQ5WhcNMjUwNzI5MTQzNTQ5WjAYMRYw
FAYDVQQDEw02ODdlNTA0YS1jNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3XJBjMFpRJu0SOFqSfsln61+3ZMCuH5N0BYaBq3QkoG8k6LFKtH0pRZW
sBjmBDWL89m5/I0ZYPWPn7wZrSUE76iAKLxnztnYI1EPpOmZ2mHpYMwmx2sawgJL
pHWrfJRvlPrnnBRiBvimYN9HTYPSMfeX8uvYrUQpr/Zj50k8GSqIbZ5JNvnEdoVB
jqdfFKX1BE37WluP0X1N7ggh7wdZuKy0g0UHEY5NOMuxexag1tS5BvY6kaAXha4H
0O2u9KmgWymukCIqs20oeZtZgMFMY8NV+jaoufszsP1IbgqVxzWGFGk4AB/tX5Xp
D6gZixhrrNUOcawVZeLtoneovMcZaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPIa
+66gOARQ/yCripj/hBOWg4sjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTkzQzZERTY2NDAxMUYwQjg2NEU0RDlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+AMA0GCSqGSIb3DQEB
CwUAA4IBAQBqz1AqXOMTxHf457D91Ni0LdtPuUTKRFps6vKXOIDwJeiBIveE8rDF
aM0WbS9KO4nO9VLCSbtvWLAXrI18cZTBw+iOCway1ePqD8jF4AFoVGSBs+2CT7IP
N0E5HiHgoStmteA5Nt8rCHM6qG9cmOZ0YZrSpNLN3Nn2Bt0URNXygOqEVEPe2GOm
q7clgp77SmdZRlSTRwpD7Nz0z3pQrCOEr9Q5Ize0Gwwduksr+3M9XxbtMBxfw9Jv
MnzgI0m1ryMAj2lzdUzX18Ug2auUnehkNnLHaIRPjArkJ84B1Ycu035ozhrArmfp
jxZilrqIpUuOEgGTtk6eULGMtxx2F/vL
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:02 2025 by rpki-client