Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA4158488B211F0A4A6BB79DAE4EC9C.roa
File: 2BA4158488B211F0A4A6BB79DAE4EC9C.roa (raw, json)
Hash identifier: krejhI9kwn1W/GMWZixHM9iDa0a8SwFI+usJurBv0Uk=
Subject key identifier: A2:68:EB:E5:5D:35:F0:4E:0C:46:D4:9C:73:2C:A8:C2:17:46:14:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA4158488B211F0A4A6BB79DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 10:38:47 +0000
ROA not before: Wed 03 Sep 2025 10:38:42 +0000
ROA not after: Fri 10 Oct 2025 10:38:42 +0000
asID: 203020
IP address blocks: 154.217.128.0/22 maxlen: 24
154.217.132.0/23 maxlen: 24
154.217.134.0/23 maxlen: 24
154.217.136.0/22 maxlen: 24
154.217.140.0/22 maxlen: 24
154.217.144.0/22 maxlen: 24
154.217.160.0/22 maxlen: 24
154.217.164.0/22 maxlen: 24
154.217.168.0/21 maxlen: 24
154.217.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105696 (0x19ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 10:38:42 2025 GMT
Not After : Oct 10 10:38:42 2025 GMT
Subject: CN=68b81ab7-5740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:06:a2:2d:e5:dd:79:b6:c7:9c:d9:57:0a:
bf:66:6a:09:78:c0:95:83:40:46:a7:a7:5b:fa:0f:
bd:b9:e7:e6:a8:d6:84:cb:dd:48:42:36:59:06:2e:
4f:68:86:96:8b:2c:06:14:9f:cf:19:f5:9d:58:3a:
05:95:38:3e:93:a6:8f:85:a8:68:85:f5:f3:43:a4:
cf:af:a2:fb:52:61:be:bf:5b:c7:fa:d8:0f:80:ad:
60:d0:e9:86:87:bf:8f:c4:96:c2:ae:5f:78:41:25:
07:42:cd:6f:10:ca:a0:0a:2c:6f:f8:f7:55:18:57:
74:78:c0:44:b9:b1:35:6c:ac:38:86:a2:7b:9c:0a:
1e:8d:5e:a2:ee:12:8d:06:2f:f8:27:10:94:9d:2f:
5d:f5:79:8f:2d:dc:94:8b:ff:73:5d:7f:15:be:6c:
0f:28:55:f3:b8:c7:d8:5f:75:cc:73:8f:db:c0:ff:
6f:e8:3c:c1:73:5f:22:d8:97:31:b1:2a:76:3b:6a:
46:46:02:b8:0c:19:a3:68:02:9a:ac:31:a5:fc:4a:
7e:f2:b4:6c:64:f2:f3:45:be:a7:b1:1f:34:62:c8:
83:13:de:e1:4e:1c:62:90:65:eb:50:fc:78:69:82:
9e:4e:34:22:ca:54:01:7c:c2:cf:c5:6d:13:10:8f:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:EB:E5:5D:35:F0:4E:0C:46:D4:9C:73:2C:A8:C2:17:46:14:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA4158488B211F0A4A6BB79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.128.0-154.217.147.255
154.217.160.0/20
154.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
be:84:6d:14:70:ac:39:50:df:de:38:de:c2:3d:c1:29:27:6e:
e9:6e:c1:fa:0c:9e:b8:9d:12:96:f8:b5:66:d5:df:18:38:ee:
06:12:d1:26:4d:b7:4e:1b:77:7f:e7:36:70:86:f7:6c:26:2a:
05:55:d5:1d:cd:27:8e:ce:79:95:8b:8f:ef:d8:56:de:97:9a:
b3:2d:6d:a8:0c:9a:4a:d3:21:2d:be:8b:3a:97:85:6f:de:f9:
36:c3:2c:c6:23:23:ad:8e:a7:1b:49:c6:07:b2:0a:22:f4:25:
da:87:b6:4d:5f:f9:01:1e:31:7d:6d:c0:28:7b:78:11:b2:4c:
9f:12:f0:3a:0d:9e:33:69:ea:ca:46:44:cb:c2:4b:fc:42:b7:
a4:71:3d:d3:c7:95:38:1a:db:9b:23:42:69:ad:6f:4b:5d:33:
50:03:e4:09:8e:59:bb:6c:1d:0d:27:19:3d:6f:c2:12:7e:84:
04:18:3c:14:e9:9a:fa:e4:9c:c2:0d:e2:bd:a1:98:39:3c:a5:
10:10:bd:ea:17:27:1d:13:c7:b9:a7:fc:15:b8:06:9f:b6:a4:
7e:65:87:11:f6:04:39:8e:cd:69:67:68:64:58:ee:7f:91:5f:
16:90:25:d3:be:a6:91:75:cc:be:67:bb:9c:4e:49:1c:83:47:
77:ce:8d:ea
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAZzgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMTAzODQyWhcNMjUxMDEwMTAzODQyWjAYMRYw
FAYDVQQDEw02OGI4MWFiNy01NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoUIGoi3l3Xm2x5zZVwq/ZmoJeMCVg0BGp6db+g+9uefmqNaEy91IQjZZ
Bi5PaIaWiywGFJ/PGfWdWDoFlTg+k6aPhahohfXzQ6TPr6L7UmG+v1vH+tgPgK1g
0OmGh7+PxJbCrl94QSUHQs1vEMqgCixv+PdVGFd0eMBEubE1bKw4hqJ7nAoejV6i
7hKNBi/4JxCUnS9d9XmPLdyUi/9zXX8VvmwPKFXzuMfYX3XMc4/bwP9v6DzBc18i
2JcxsSp2O2pGRgK4DBmjaAKarDGl/Ep+8rRsZPLzRb6nsR80YsiDE97hThxikGXr
UPx4aYKeTjQiylQBfMLPxW0TEI+y6wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKJo
6+VdNfBODEbUnHMsqMIXRhTeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQkE0MTU4NDg4QjIxMUYwQTRBNkJCNzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAea2YADBAKa2ZADBASa
2aADBACa2bIwDQYJKoZIhvcNAQELBQADggEBAL6EbRRwrDlQ39443sI9wSknbulu
wfoMnridEpb4tWbV3xg47gYS0SZNt04bd3/nNnCG92wmKgVV1R3NJ47OeZWLj+/Y
Vt6XmrMtbagMmkrTIS2+izqXhW/e+TbDLMYjI62OpxtJxgeyCiL0JdqHtk1f+QEe
MX1twCh7eBGyTJ8S8DoNnjNp6spGRMvCS/xCt6RxPdPHlTga25sjQmmtb0tdM1AD
5AmOWbtsHQ0nGT1vwhJ+hAQYPBTpmvrknMIN4r2hmDk8pRAQveoXJx0Tx7mn/BW4
Bp+2pH5lhxH2BDmOzWlnaGRY7n+RXxaQJdO+ppF1zL5nu5xOSRyDR3fOjeo=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:00 2025 by rpki-client