Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22EABC368E2011F0AAE56AF2DAE4EC9C.roa
File: 22EABC368E2011F0AAE56AF2DAE4EC9C.roa (raw, json)
Hash identifier: pF/w+WeMUcO1EE5ZvH0AioOSXJ4d+lDJWC1DHZdkfYY=
Subject key identifier: 49:2E:F8:0C:71:8D:EC:C1:E4:F8:B2:26:12:9E:A0:EB:93:10:59:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22EABC368E2011F0AAE56AF2DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 08:28:33 +0000
ROA not before: Wed 10 Sep 2025 08:28:28 +0000
ROA not after: Fri 17 Oct 2025 08:28:28 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106296 (0x19f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 10 08:28:28 2025 GMT
Not After : Oct 17 08:28:28 2025 GMT
Subject: CN=68c136b1-514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:6d:8f:65:66:fe:91:e3:54:16:aa:52:b0:
65:eb:a9:65:f0:e8:02:4d:7a:07:2f:50:38:54:af:
32:f2:37:81:98:16:a4:95:45:44:b8:59:af:aa:3e:
b0:92:00:db:45:e3:26:e1:18:54:4f:a6:06:b6:81:
74:05:5d:d1:fd:8a:57:23:a6:c0:72:54:d2:90:ba:
45:f8:d1:cc:12:be:5a:a6:5f:c1:10:2b:fc:9f:78:
8f:ef:c4:ed:67:05:cc:c9:54:1d:aa:98:c5:8c:9f:
12:8a:ac:98:6c:46:5e:96:ef:f9:c2:8d:0d:2b:db:
b6:1e:19:91:aa:74:f7:0d:e5:d8:70:b8:06:70:01:
43:6d:c2:31:ce:8b:49:68:79:e2:e4:c1:b9:76:37:
44:a6:cb:03:db:93:a0:05:f9:90:79:63:20:5f:c0:
29:67:c8:f2:31:c8:85:f7:5a:6c:12:ca:08:94:06:
4b:7a:a3:27:a7:a0:6e:f3:7c:8d:df:26:9e:e7:45:
2e:34:2a:db:97:ae:0c:df:61:69:b4:42:e8:dd:d5:
14:bc:cd:cd:1a:92:a1:59:7d:24:f1:a3:0a:4b:e3:
0e:3e:b8:cc:02:54:b8:2c:c2:34:df:7e:ef:ab:a9:
fc:7a:37:2e:4b:6e:99:23:96:1a:92:72:9c:2b:cd:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:F8:0C:71:8D:EC:C1:E4:F8:B2:26:12:9E:A0:EB:93:10:59:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22EABC368E2011F0AAE56AF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c9:a6:53:5c:09:a5:3e:a0:24:83:87:f6:9b:30:f1:c2:b1:
f8:8b:31:d0:04:d1:66:7e:dd:5b:bf:50:b1:2c:d9:25:ff:b1:
d8:5a:d5:29:8b:7f:45:3d:a5:0d:88:5d:11:b1:cc:32:80:f0:
58:30:2c:b6:ab:f1:cc:31:e3:c8:1c:2c:6a:66:cb:b1:ca:ec:
45:d2:86:e5:ab:37:ff:13:ac:44:0d:33:b4:a1:39:51:c1:f5:
cd:30:9f:0e:66:73:cc:f5:27:d2:71:4d:ee:e1:88:e9:e4:1c:
72:fe:6b:94:ad:41:b9:cc:9e:b7:a4:70:bb:bc:64:7e:cd:43:
71:d5:21:eb:86:8e:c3:d6:29:88:3c:c1:ea:ec:63:5a:98:3f:
50:aa:63:ac:e9:24:7a:31:95:57:22:15:c4:2d:61:f1:9d:0c:
1a:7a:fc:66:0c:3d:cc:5e:9c:a6:8b:6a:71:a6:23:96:c3:da:
a8:f4:79:9a:bc:e2:fb:41:8e:c1:82:75:e7:24:ef:42:1b:1f:
2f:30:8e:78:e5:8c:5b:1b:7a:0d:0f:33:5e:fe:ce:20:5a:0c:
63:6d:d0:e5:4d:66:bc:09:48:7a:c3:21:47:a8:39:b0:40:0c:
a3:5d:03:a8:25:a0:c2:6e:0c:1b:9f:18:80:a9:93:84:ac:52:
a3:49:27:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ84MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTEwMDgyODI4WhcNMjUxMDE3MDgyODI4WjAYMRYw
FAYDVQQDEw02OGMxMzZiMS01MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9Rtj2Vm/pHjVBaqUrBl66ll8OgCTXoHL1A4VK8y8jeBmBaklUVEuFmv
qj6wkgDbReMm4RhUT6YGtoF0BV3R/YpXI6bAclTSkLpF+NHMEr5apl/BECv8n3iP
78TtZwXMyVQdqpjFjJ8SiqyYbEZelu/5wo0NK9u2HhmRqnT3DeXYcLgGcAFDbcIx
zotJaHni5MG5djdEpssD25OgBfmQeWMgX8ApZ8jyMciF91psEsoIlAZLeqMnp6Bu
83yN3yae50UuNCrbl64M32FptELo3dUUvM3NGpKhWX0k8aMKS+MOPrjMAlS4LMI0
337vq6n8ejcuS26ZI5YaknKcK82r1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEku
+AxxjezB5PiyJhKeoOuTEFkTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMkVBQkMzNjhFMjAxMUYwQUFFNTZBRjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmscBMA0GCSqGSIb3DQEB
CwUAA4IBAQAQyaZTXAmlPqAkg4f2mzDxwrH4izHQBNFmft1bv1CxLNkl/7HYWtUp
i39FPaUNiF0RscwygPBYMCy2q/HMMePIHCxqZsuxyuxF0oblqzf/E6xEDTO0oTlR
wfXNMJ8OZnPM9SfScU3u4Yjp5Bxy/muUrUG5zJ63pHC7vGR+zUNx1SHrho7D1imI
PMHq7GNamD9QqmOs6SR6MZVXIhXELWHxnQwaevxmDD3MXpymi2pxpiOWw9qo9Hma
vOL7QY7BgnXnJO9CGx8vMI545YxbG3oNDzNe/s4gWgxjbdDlTWa8CUh6wyFHqDmw
QAyjXQOoJaDCbgwbnxiAqZOErFKjSSdW
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:34:01 2025 by rpki-client