Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19ED33C0823111F0B4200986DAE4EC9C.roa
File: 19ED33C0823111F0B4200986DAE4EC9C.roa (raw, json)
Hash identifier: aZ7+Ln+jkmksCiG7DJ4UB7cACYwxKQguIDCZOPBjnRU=
Subject key identifier: 01:86:19:AD:F9:C5:C2:86:C1:E6:2D:B1:6F:DD:4C:B8:76:33:3B:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019791
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19ED33C0823111F0B4200986DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 03:59:45 +0000
ROA not before: Tue 26 Aug 2025 03:59:41 +0000
ROA not after: Thu 25 Sep 2025 03:59:41 +0000
asID: 54801
IP address blocks: 154.201.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104337 (0x19791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 03:59:41 2025 GMT
Not After : Sep 25 03:59:41 2025 GMT
Subject: CN=68ad3131-9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:2e:a4:3a:71:7c:f3:b7:c1:35:ab:4c:79:
9f:07:6b:e8:fe:8b:25:64:e2:f5:48:d1:08:e4:65:
03:a3:3f:f6:79:49:b3:98:ff:80:35:89:80:33:51:
10:e5:7a:d3:02:a1:2e:82:bf:7e:90:52:6a:e4:db:
d3:6b:e5:4c:8c:08:ed:cf:2e:45:61:45:bf:a2:eb:
d1:a1:e1:4c:12:c4:52:ac:3e:69:95:da:a7:0f:93:
20:af:84:70:1d:09:25:4a:88:d6:e4:99:88:36:15:
0b:a5:a6:d1:bf:68:c8:42:44:73:18:c0:a0:50:a8:
de:3c:79:92:bf:d1:90:a8:13:d6:cd:ad:aa:13:e5:
0e:21:a3:dc:34:c6:c7:50:e1:50:37:23:b4:a0:b0:
cc:7b:03:07:dc:fa:5e:1c:cf:39:ca:80:61:b6:4f:
2a:2b:2a:f1:e7:ac:50:45:ab:2f:9a:94:97:9c:d7:
62:f0:89:c5:8a:b9:99:81:f5:4d:02:99:7d:ae:ef:
6a:c3:f9:7f:72:97:d9:cc:9a:7e:6f:0d:bb:09:f3:
6f:e7:d1:dd:4b:2c:a1:c1:72:c4:7b:42:0d:da:0e:
56:eb:3d:8c:9c:35:9c:cf:ff:19:8d:02:5a:47:8e:
7c:52:9c:df:d2:12:84:78:69:33:d0:9e:a7:8b:db:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:19:AD:F9:C5:C2:86:C1:E6:2D:B1:6F:DD:4C:B8:76:33:3B:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19ED33C0823111F0B4200986DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.8.0/22
Signature Algorithm: sha256WithRSAEncryption
68:19:34:87:fc:e4:27:86:c4:90:12:7e:df:80:c8:6b:9e:f0:
07:b9:12:46:62:c3:81:2c:08:79:7e:dc:22:72:27:ca:a0:1d:
e9:c7:92:c8:22:5b:ee:86:8e:05:a2:cd:bb:c6:6b:37:c6:79:
d7:1f:24:29:40:3e:50:79:7b:33:87:9f:83:af:d7:9f:2f:c8:
67:bc:39:82:94:d5:15:de:58:cb:6b:d9:73:b1:73:35:f9:f2:
4c:70:84:4e:9e:98:ab:a0:8e:7c:b6:54:3f:dd:d2:38:63:63:
d7:df:4a:37:32:91:b4:14:3f:c8:02:ab:5d:e7:f8:82:50:9d:
ea:81:55:31:0e:03:0a:43:9d:ee:d5:71:35:87:65:08:f8:32:
d5:0d:84:4a:26:69:3a:90:89:ff:97:ff:90:d3:04:99:98:aa:
87:2e:27:ea:21:12:3b:5d:4b:74:80:03:2a:76:88:1e:d5:a8:
a4:f7:cb:f1:a5:e4:27:59:82:75:84:df:4b:df:9e:57:f4:8b:
2f:f0:e1:fd:19:f3:94:5b:bf:4d:49:8a:2d:8b:bd:d0:76:57:
6c:5e:ae:84:b6:fd:1d:59:06:0b:49:4c:f3:14:7b:b6:b1:69:
6e:ae:a1:1b:b1:e9:d2:c0:95:50:c3:0d:bd:0b:50:ac:1f:c3:
df:ce:7e:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZeRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI2MDM1OTQxWhcNMjUwOTI1MDM1OTQxWjAYMRYw
FAYDVQQDEw02OGFkMzEzMS05NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArjAupDpxfPO3wTWrTHmfB2vo/oslZOL1SNEI5GUDoz/2eUmzmP+ANYmA
M1EQ5XrTAqEugr9+kFJq5NvTa+VMjAjtzy5FYUW/ouvRoeFMEsRSrD5pldqnD5Mg
r4RwHQklSojW5JmINhULpabRv2jIQkRzGMCgUKjePHmSv9GQqBPWza2qE+UOIaPc
NMbHUOFQNyO0oLDMewMH3PpeHM85yoBhtk8qKyrx56xQRasvmpSXnNdi8InFirmZ
gfVNApl9ru9qw/l/cpfZzJp+bw27CfNv59HdSyyhwXLEe0IN2g5W6z2MnDWcz/8Z
jQJaR458Upzf0hKEeGkz0J6ni9t5uQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAGG
Ga35xcKGweYtsW/dTLh2Mzv6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOUVEMzNDMDgyMzExMUYwQjQyMDA5ODZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmskIMA0GCSqGSIb3DQEB
CwUAA4IBAQBoGTSH/OQnhsSQEn7fgMhrnvAHuRJGYsOBLAh5ftwicifKoB3px5LI
Ilvuho4Fos27xms3xnnXHyQpQD5QeXszh5+Dr9efL8hnvDmClNUV3ljLa9lzsXM1
+fJMcIROnpiroI58tlQ/3dI4Y2PX30o3MpG0FD/IAqtd5/iCUJ3qgVUxDgMKQ53u
1XE1h2UI+DLVDYRKJmk6kIn/l/+Q0wSZmKqHLifqIRI7XUt0gAMqdoge1aik98vx
peQnWYJ1hN9L355X9Isv8OH9GfOUW79NSYoti73QdldsXq6Etv0dWQYLSUzzFHu2
sWlurqEbsenSwJVQww29C1CsH8Pfzn48
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:30 2025 by rpki-client