Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077FC83A87F711F08101DEC2DAE4EC9C.roa
File: 077FC83A87F711F08101DEC2DAE4EC9C.roa (raw, json)
Hash identifier: 4edy6VNmfJvrhlWXYaATjQoHnVhfQ7I8bXjMT29Btx8=
Subject key identifier: 0E:B0:B0:80:72:96:CA:71:69:7C:72:39:4E:54:B0:84:80:37:47:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077FC83A87F711F08101DEC2DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 12:19:10 +0000
ROA not before: Tue 02 Sep 2025 12:19:05 +0000
ROA not after: Fri 10 Oct 2025 12:19:05 +0000
asID: 395886
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105512 (0x19c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 12:19:05 2025 GMT
Not After : Oct 10 12:19:05 2025 GMT
Subject: CN=68b6e0be-65ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:a7:5c:42:fb:1a:ce:41:ee:5f:9e:75:25:
25:00:1e:c2:44:ae:e2:e4:e2:11:20:56:59:0d:17:
3e:32:ac:00:29:8c:b3:36:d8:2c:00:20:2e:68:ec:
c3:14:88:9e:ae:f0:18:93:66:6d:14:53:0c:60:c6:
b1:7f:84:58:01:f5:d8:4d:9f:3e:b2:a7:08:e2:91:
ca:d6:dd:c5:8b:e0:dc:82:41:12:53:2e:10:d8:80:
fb:36:ca:a6:6a:75:a0:14:bc:74:f2:47:06:cb:15:
7d:0a:f2:ca:1b:aa:6d:df:17:e6:17:f2:4a:d6:c1:
29:aa:6b:09:73:a7:89:03:82:bf:85:b1:73:07:ab:
29:d5:ce:d7:ec:95:e3:16:6a:f5:70:75:2c:d0:6d:
ae:04:54:8d:80:27:d6:62:cc:4b:a9:fd:6d:2d:6e:
ae:3c:e2:f7:86:92:0f:77:90:3c:b4:ed:55:a9:7f:
eb:57:2d:35:27:c6:60:06:7b:5d:5e:23:51:bd:e4:
e0:7b:5e:b3:92:7f:0a:e0:2d:c9:3b:0f:d4:ea:19:
74:ee:7a:10:fa:8e:91:f7:41:e3:52:cb:cb:d2:bf:
db:57:20:84:cb:77:bc:ef:b6:1b:cf:6c:ac:39:0d:
ba:b4:78:e1:2b:bc:d4:34:b4:5d:b8:38:d7:b0:ca:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:B0:80:72:96:CA:71:69:7C:72:39:4E:54:B0:84:80:37:47:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077FC83A87F711F08101DEC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:88:54:2b:5e:ee:cf:cc:ec:a4:a0:81:92:09:0c:f0:c7:59:
99:5b:79:1a:bc:dd:fc:ff:42:f2:e5:ae:5d:34:d0:de:6b:b8:
43:c1:83:46:d6:d6:f5:82:c7:19:d5:a8:59:0c:2e:86:6c:9f:
ae:2a:e3:64:06:0a:20:de:99:4a:b8:94:20:34:47:d6:4b:1d:
d7:4c:b0:7c:87:24:1c:c6:28:d1:ea:73:52:3b:80:ca:2c:19:
df:74:93:1a:86:ac:89:eb:60:65:9b:13:79:81:39:9a:ad:b1:
20:7b:e9:3c:19:ec:f0:13:0d:bd:ee:24:60:09:dc:64:51:b5:
95:d3:10:e1:91:c0:d0:37:09:56:a0:6e:05:7d:fb:17:f9:0a:
20:02:79:df:eb:5c:ab:ee:29:d9:d2:9e:cd:9e:e7:52:9b:43:
ec:99:e1:cb:c4:07:a5:f2:c3:de:64:b5:8e:79:ce:cf:55:7a:
62:3d:85:6d:d7:6f:f8:ff:1b:09:21:85:22:d9:3e:26:43:41:
2b:ea:ca:7a:41:c8:ab:5f:b0:ac:13:41:d6:15:a3:b7:49:43:
c8:99:a0:00:d6:1a:7a:ed:a7:aa:d1:15:22:55:5e:f9:52:59:
08:c9:da:28:b8:c7:f9:5c:7e:64:a5:f8:1f:6a:62:b8:01:04:
26:a3:86:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZwoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAyMTIxOTA1WhcNMjUxMDEwMTIxOTA1WjAYMRYw
FAYDVQQDEw02OGI2ZTBiZS02NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw5OnXEL7Gs5B7l+edSUlAB7CRK7i5OIRIFZZDRc+MqwAKYyzNtgsACAu
aOzDFIiervAYk2ZtFFMMYMaxf4RYAfXYTZ8+sqcI4pHK1t3Fi+DcgkESUy4Q2ID7
NsqmanWgFLx08kcGyxV9CvLKG6pt3xfmF/JK1sEpqmsJc6eJA4K/hbFzB6sp1c7X
7JXjFmr1cHUs0G2uBFSNgCfWYsxLqf1tLW6uPOL3hpIPd5A8tO1VqX/rVy01J8Zg
BntdXiNRveTge16zkn8K4C3JOw/U6hl07noQ+o6R90HjUsvL0r/bVyCEy3e877Yb
z2ysOQ26tHjhK7zUNLRduDjXsMp6dQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA6w
sIBylspxaXxyOU5UsISAN0clMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzdGQzgzQTg3RjcxMUYwODEwMURFQzJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQDBiFQrXu7PzOykoIGSCQzwx1mZW3kavN38/0Ly5a5dNNDea7hDwYNG
1tb1gscZ1ahZDC6GbJ+uKuNkBgog3plKuJQgNEfWSx3XTLB8hyQcxijR6nNSO4DK
LBnfdJMahqyJ62BlmxN5gTmarbEge+k8GezwEw297iRgCdxkUbWV0xDhkcDQNwlW
oG4FffsX+QogAnnf61yr7inZ0p7NnudSm0PsmeHLxAel8sPeZLWOec7PVXpiPYVt
12/4/xsJIYUi2T4mQ0Er6sp6QcirX7CsE0HWFaO3SUPImaAA1hp67aeq0RUiVV75
UlkIydoouMf5XH5kpfgfamK4AQQmo4Yk
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:38 2025 by rpki-client