Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C5378AC599311F0849737F4DAE4EC9C.roa
File: 1C5378AC599311F0849737F4DAE4EC9C.roa (raw, json)
Hash identifier: OVnYeRwDqRUMgUKchdG4+jq7jySxgWn37DvXodd/W04=
Subject key identifier: E5:E8:C3:A8:C1:14:25:59:B1:BA:04:07:DF:97:77:7F:FB:0F:BD:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C5378AC599311F0849737F4DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 11:28:02 +0000
ROA not before: Sat 05 Jul 2025 11:27:58 +0000
ROA not after: Sun 12 Oct 2025 11:27:58 +0000
asID: 20473
IP address blocks: 154.197.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101094 (0x18ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 11:27:58 2025 GMT
Not After : Oct 12 11:27:58 2025 GMT
Subject: CN=68690c42-e4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:5d:25:90:4a:fb:7c:52:84:5b:27:4c:44:
d3:41:14:93:7d:47:82:b3:d9:91:77:15:88:cb:72:
dd:63:85:90:e6:92:ce:f7:b2:e4:f0:25:ac:65:d0:
39:f9:51:a3:e5:52:65:c6:12:db:bc:4d:0f:f7:29:
1f:d2:4d:99:e5:11:7a:ae:f0:4d:3d:a2:40:0b:29:
9e:d5:73:e1:37:37:d5:2f:e6:29:cb:61:28:c0:59:
83:3a:1a:fa:1c:f6:31:d1:ca:11:16:f8:a8:58:3a:
ca:fb:77:6f:61:61:91:ed:5e:db:77:0a:af:d9:8d:
c9:e4:aa:c1:47:19:30:d9:9e:35:78:61:18:a4:d9:
68:aa:82:17:e6:0c:c6:fa:12:4d:95:eb:b7:c9:6e:
30:c4:58:dd:50:1e:9c:3c:d9:79:e8:35:e4:10:26:
80:6e:05:77:fe:7f:a5:01:58:c5:52:d0:e9:15:24:
f6:4f:6c:cd:96:81:96:35:79:78:1f:81:57:e0:97:
6f:43:82:04:7b:06:ea:40:30:53:c8:47:4a:ff:54:
5b:f2:13:29:bf:57:b8:b0:0d:dc:d0:fc:32:69:01:
c9:63:ab:0d:f5:7b:4a:3c:88:6c:75:c3:fa:0b:e0:
69:06:0f:c4:3f:82:06:c0:a0:60:bf:f7:d4:d9:63:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:C3:A8:C1:14:25:59:B1:BA:04:07:DF:97:77:7F:FB:0F:BD:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C5378AC599311F0849737F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:be:84:3e:d3:76:ae:3e:5a:dd:d5:5a:59:39:f4:78:71:c3:
cf:fd:b1:59:8e:7d:c3:e2:af:33:e2:b7:e5:04:39:0a:fb:57:
43:93:b7:7d:db:35:45:19:9f:b4:d7:dd:8d:62:05:3d:2a:c0:
7a:ac:d6:14:66:e9:00:63:a6:4a:a8:ee:34:14:df:32:48:e3:
f4:45:06:6c:53:26:00:3e:3b:15:1e:d3:e1:f3:25:b6:38:78:
64:68:c6:dc:10:e4:4a:33:39:f7:37:1c:08:57:82:f0:9e:8b:
92:e6:f7:df:cc:af:53:97:35:d1:6a:3d:23:1a:ca:09:83:5d:
d4:ee:30:f5:1a:ad:69:4b:be:ef:8f:14:0c:e0:5a:0d:28:cf:
76:82:7f:d0:2d:0b:d6:d3:5c:87:f2:d4:2a:31:05:d0:6b:6e:
70:f8:51:d0:b0:fe:db:95:37:c1:28:0e:87:99:34:6a:5d:dc:
1f:f6:9a:46:12:79:39:46:20:d8:32:4c:fe:09:2b:24:72:cc:
f7:33:c0:91:f4:18:bb:a7:44:43:94:e0:b2:77:f7:4f:ac:b6:
af:23:43:4d:74:69:44:13:71:cb:29:d8:78:45:bd:15:92:1b:
2e:bc:36:58:23:f3:bc:51:73:af:4d:9d:c5:57:b2:dd:08:4a:
df:e1:7b:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYrmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTEyNzU4WhcNMjUxMDEyMTEyNzU4WjAYMRYw
FAYDVQQDEw02ODY5MGM0Mi1lNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw1ldJZBK+3xShFsnTETTQRSTfUeCs9mRdxWIy3LdY4WQ5pLO97Lk8CWs
ZdA5+VGj5VJlxhLbvE0P9ykf0k2Z5RF6rvBNPaJACyme1XPhNzfVL+Ypy2EowFmD
Ohr6HPYx0coRFvioWDrK+3dvYWGR7V7bdwqv2Y3J5KrBRxkw2Z41eGEYpNloqoIX
5gzG+hJNleu3yW4wxFjdUB6cPNl56DXkECaAbgV3/n+lAVjFUtDpFST2T2zNloGW
NXl4H4FX4JdvQ4IEewbqQDBTyEdK/1Rb8hMpv1e4sA3c0PwyaQHJY6sN9XtKPIhs
dcP6C+BpBg/EP4IGwKBgv/fU2WP/WQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOXo
w6jBFCVZsboEB9+Xd3/7D70DMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQzUzNzhBQzU5OTMxMUYwODQ5NzM3RjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUtMA0GCSqGSIb3DQEB
CwUAA4IBAQDEvoQ+03auPlrd1VpZOfR4ccPP/bFZjn3D4q8z4rflBDkK+1dDk7d9
2zVFGZ+0192NYgU9KsB6rNYUZukAY6ZKqO40FN8ySOP0RQZsUyYAPjsVHtPh8yW2
OHhkaMbcEORKMzn3NxwIV4LwnouS5vffzK9TlzXRaj0jGsoJg13U7jD1Gq1pS77v
jxQM4FoNKM92gn/QLQvW01yH8tQqMQXQa25w+FHQsP7blTfBKA6HmTRqXdwf9ppG
Enk5RiDYMkz+CSskcsz3M8CR9Bi7p0RDlOCyd/dPrLavI0NNdGlEE3HLKdh4Rb0V
khsuvDZYI/O8UXOvTZ3FV7LdCErf4Xuk
-----END CERTIFICATE-----
Generated at Mon Jul 7 03:48:32 2025 by rpki-client