Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A97C30870111F0BE32247EDAE4EC9C.roa
File: 11A97C30870111F0BE32247EDAE4EC9C.roa (raw, json)
Hash identifier: Lp9Ggh8TW7FlNtUD6MCVP7mU28K3wpzRH8/xjQGuD74=
Subject key identifier: 88:54:DF:27:0D:6A:6A:46:11:F1:C1:A7:20:65:B5:7A:98:7A:4D:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A97C30870111F0BE32247EDAE4EC9C.roa
Signing time: Mon 01 Sep 2025 06:58:31 +0000
ROA not before: Mon 01 Sep 2025 06:58:26 +0000
ROA not after: Wed 08 Oct 2025 06:58:26 +0000
asID: 57043
IP address blocks: 154.83.149.0/24 maxlen: 24
154.83.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105259 (0x19b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 06:58:26 2025 GMT
Not After : Oct 8 06:58:26 2025 GMT
Subject: CN=68b54417-0b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:e7:03:63:4a:84:49:1e:d4:0e:97:2e:64:
c0:af:9d:76:bb:18:6f:2a:36:97:f4:50:78:b0:0a:
af:9d:bf:09:bb:b2:bd:c9:dc:5f:73:31:bb:da:70:
cd:6e:86:29:20:b0:57:5d:76:df:5f:4f:e8:54:4a:
56:7f:e8:63:aa:34:fa:a9:90:3d:d0:74:0d:2c:5e:
2a:87:c3:f4:f7:61:9f:56:b2:1b:88:13:80:19:cc:
4e:09:76:6b:65:ef:a6:5e:a5:a9:d2:f4:52:8e:89:
0a:1a:20:4e:f0:e2:72:61:d9:b2:da:5d:f5:ea:d3:
ad:21:0b:c0:f8:28:7c:00:62:d3:a5:25:3a:7f:7f:
55:c0:d7:c5:ab:c7:5e:a2:42:f6:40:23:58:96:8b:
1b:bc:67:3b:82:1b:bc:e5:97:39:48:92:e4:fe:be:
a3:15:53:55:15:95:25:66:6a:ff:7c:c7:8d:aa:27:
4c:4d:cb:59:74:eb:53:72:6a:ec:93:4d:48:af:cc:
b9:f1:e7:f5:5f:09:5c:ee:6a:0e:42:db:24:a6:46:
02:3b:34:79:72:70:41:56:0e:af:2c:a8:ae:a5:77:
2c:17:4b:8d:bd:23:77:73:ef:86:71:ab:38:88:fe:
bf:3d:1c:3a:ec:16:9c:98:35:e5:2c:c1:c9:9b:c1:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:DF:27:0D:6A:6A:46:11:F1:C1:A7:20:65:B5:7A:98:7A:4D:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A97C30870111F0BE32247EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.149.0/24
154.83.156.0/24
Signature Algorithm: sha256WithRSAEncryption
02:43:1f:ed:e8:5a:9d:25:d4:e8:ff:d4:3c:bf:9f:fb:4b:26:
53:33:f8:30:30:de:e8:dd:d7:ae:4c:04:a2:62:81:df:3b:70:
c5:f7:76:68:60:9f:f2:68:77:53:88:ec:c2:5a:b0:1c:db:67:
88:74:1d:88:c3:c4:6d:e4:b6:91:7f:44:6f:8a:ad:a3:ea:82:
7c:1e:28:70:08:4f:e4:22:d3:c4:71:a2:d8:19:b6:3d:5f:93:
ea:5a:aa:bb:d8:fa:47:ad:4b:11:4d:ad:62:be:94:79:c5:1b:
15:9e:95:7a:4c:80:e9:4c:56:28:06:61:69:02:9d:63:5f:12:
a1:6b:e1:34:71:61:cb:9d:75:b9:49:8e:f4:2f:da:13:3f:85:
5e:f9:23:ea:a9:fc:55:07:dc:36:ef:11:7e:0d:d6:9c:52:c8:
89:94:44:58:42:9e:ce:65:39:df:5c:81:d2:bc:a0:61:54:34:
90:04:b4:be:83:e7:98:ab:a3:bf:d1:d0:3b:81:59:83:61:45:
19:05:cd:fd:db:37:48:ee:18:7d:e2:57:4a:f8:97:0b:89:d4:
d7:a7:07:1c:a1:95:b5:ad:51:ac:bf:0a:d3:17:0f:26:5d:3f:
4a:63:8f:b8:82:f8:79:29:0e:33:fe:6c:7e:75:0c:d6:1c:93:
23:e7:3d:c3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZsrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAxMDY1ODI2WhcNMjUxMDA4MDY1ODI2WjAYMRYw
FAYDVQQDEw02OGI1NDQxNy0wYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArLrnA2NKhEke1A6XLmTAr512uxhvKjaX9FB4sAqvnb8Ju7K9ydxfczG7
2nDNboYpILBXXXbfX0/oVEpWf+hjqjT6qZA90HQNLF4qh8P092GfVrIbiBOAGcxO
CXZrZe+mXqWp0vRSjokKGiBO8OJyYdmy2l316tOtIQvA+Ch8AGLTpSU6f39VwNfF
q8deokL2QCNYlosbvGc7ghu85Zc5SJLk/r6jFVNVFZUlZmr/fMeNqidMTctZdOtT
cmrsk01Ir8y58ef1Xwlc7moOQtskpkYCOzR5cnBBVg6vLKiupXcsF0uNvSN3c++G
cas4iP6/PRw67BacmDXlLMHJm8HgDwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIhU
3ycNampGEfHBpyBltXqYek29MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUE5N0MzMDg3MDExMUYwQkUzMjI0N0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlOVAwQAmlOcMA0GCSqG
SIb3DQEBCwUAA4IBAQACQx/t6FqdJdTo/9Q8v5/7SyZTM/gwMN7o3deuTASiYoHf
O3DF93ZoYJ/yaHdTiOzCWrAc22eIdB2Iw8Rt5LaRf0Rviq2j6oJ8HihwCE/kItPE
caLYGbY9X5PqWqq72PpHrUsRTa1ivpR5xRsVnpV6TIDpTFYoBmFpAp1jXxKha+E0
cWHLnXW5SY70L9oTP4Ve+SPqqfxVB9w27xF+DdacUsiJlERYQp7OZTnfXIHSvKBh
VDSQBLS+g+eYq6O/0dA7gVmDYUUZBc392zdI7hh94ldK+JcLidTXpwccoZW1rVGs
vwrTFw8mXT9KY4+4gvh5KQ4z/mx+dQzWHJMj5z3D
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:42 2025 by rpki-client