Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E0A19E828711F0BBFC7DB5DAE4EC9C.roa
File: 33E0A19E828711F0BBFC7DB5DAE4EC9C.roa (raw, json)
Hash identifier: YAfIl0AlrV2bNzihNbXt0+9CZfT4H52cNA0XW7DzFEU=
Subject key identifier: C6:FE:15:FC:22:11:AC:40:58:FB:83:C7:78:EB:9E:FA:C8:E8:B7:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E0A19E828711F0BBFC7DB5DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 14:16:05 +0000
ROA not before: Tue 26 Aug 2025 14:16:00 +0000
ROA not after: Thu 02 Oct 2025 14:16:00 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.84.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104392 (0x197c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 14:16:00 2025 GMT
Not After : Oct 2 14:16:00 2025 GMT
Subject: CN=68adc1a5-502a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:87:7b:fe:e9:8d:cb:76:0a:c8:78:dc:f0:
11:1b:0a:59:d5:6f:13:4f:7c:9a:1f:3a:b4:f8:0d:
06:34:4d:1e:79:fe:98:ea:40:d2:09:1e:1c:74:a6:
73:6f:42:b4:69:ba:e5:06:97:0a:cf:35:eb:5f:30:
e9:18:13:9f:39:d6:a6:65:3e:b6:f2:db:76:87:6c:
83:e1:84:d4:8c:a1:a8:1e:9e:0c:a6:a4:89:3d:b9:
89:65:4b:1a:d9:ef:d0:e7:c6:91:38:36:18:2c:01:
41:83:02:db:b0:4d:20:dc:6e:d1:79:a8:95:d4:d0:
6b:a0:c0:5c:7d:16:dc:c8:2a:53:ae:a1:b7:84:fa:
5e:b7:70:6b:42:ee:fd:8c:ff:68:e6:25:df:7b:73:
db:9b:68:c0:b1:c4:2f:f6:e3:e8:db:93:29:d4:0c:
fe:66:da:41:a2:0b:a0:a0:ed:79:ea:68:62:71:b2:
9e:71:b8:a9:5e:dc:d0:c7:d4:99:6d:69:14:da:49:
51:ae:88:97:59:52:34:4f:37:07:ed:0b:ec:85:50:
9b:7e:f9:62:5d:1d:ed:bb:9d:0f:c9:ab:1f:de:7f:
71:e5:b7:73:ac:a0:87:67:f4:ed:82:d8:e4:a6:1c:
63:fe:e7:5f:50:e3:97:33:85:42:32:07:0d:5b:3e:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FE:15:FC:22:11:AC:40:58:FB:83:C7:78:EB:9E:FA:C8:E8:B7:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E0A19E828711F0BBFC7DB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.84.0/23
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:83:02:f6:0d:72:0c:99:8a:8f:3e:d6:6c:16:4b:55:53:5c:
08:f0:ae:ac:c4:36:41:e9:c2:d9:d3:a7:12:0e:dd:a0:27:65:
e6:a8:c6:77:9b:a6:c0:3a:66:99:57:3e:b7:56:fa:c1:98:e9:
1d:40:ee:4e:d7:8f:83:7a:7b:03:a5:09:3b:7d:40:fe:42:53:
0b:b3:b3:cf:aa:75:7b:40:76:e5:bd:1f:da:61:04:35:df:66:
cd:76:8f:e6:20:4b:b2:3a:10:17:2e:c5:c8:e1:60:c3:69:d9:
c7:5e:9a:d0:5f:ea:64:6d:52:f3:dc:8c:d5:c3:79:f6:9f:d8:
46:12:18:7f:54:f5:33:f1:e5:c6:65:93:9f:8d:73:e6:91:a9:
98:01:25:51:1b:06:71:b9:88:32:ad:c7:48:9d:4a:89:75:fb:
82:de:51:64:e7:96:d5:b4:42:9d:69:e1:bc:5b:86:2d:f1:84:
67:17:ca:fe:30:2b:1e:20:01:5e:09:d2:2f:67:5c:77:f0:f1:
44:67:ce:18:1b:d2:b3:8e:5d:c2:fb:e0:7c:e1:54:1a:6a:af:
7c:be:08:75:23:19:e4:0c:d4:af:dc:b6:5f:5d:a8:8b:75:b0:
46:9b:27:3c:4e:34:57:00:49:fb:2d:4a:b5:a1:00:b8:64:4b:
d2:e1:2c:0b
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAZfIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI2MTQxNjAwWhcNMjUxMDAyMTQxNjAwWjAYMRYw
FAYDVQQDEw02OGFkYzFhNS01MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2m2He/7pjct2Csh43PARGwpZ1W8TT3yaHzq0+A0GNE0eef6Y6kDSCR4c
dKZzb0K0abrlBpcKzzXrXzDpGBOfOdamZT628tt2h2yD4YTUjKGoHp4MpqSJPbmJ
ZUsa2e/Q58aRODYYLAFBgwLbsE0g3G7ReaiV1NBroMBcfRbcyCpTrqG3hPpet3Br
Qu79jP9o5iXfe3Pbm2jAscQv9uPo25Mp1Az+ZtpBogugoO156mhicbKecbipXtzQ
x9SZbWkU2klRroiXWVI0TzcH7QvshVCbfvliXR3tu50Pyasf3n9x5bdzrKCHZ/Tt
gtjkphxj/udfUOOXM4VCMgcNWz7wbwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMb+
FfwiEaxAWPuDx3jrnvrI6Le+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zM0UwQTE5RTgyODcxMUYwQkJGQzdEQjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAmsE+AwQBmsFUAwQAmsSF
AwQAmsShAwQAmsibMA0GCSqGSIb3DQEBCwUAA4IBAQC7gwL2DXIMmYqPPtZsFktV
U1wI8K6sxDZB6cLZ06cSDt2gJ2XmqMZ3m6bAOmaZVz63VvrBmOkdQO5O14+DensD
pQk7fUD+QlMLs7PPqnV7QHblvR/aYQQ132bNdo/mIEuyOhAXLsXI4WDDadnHXprQ
X+pkbVLz3IzVw3n2n9hGEhh/VPUz8eXGZZOfjXPmkamYASVRGwZxuYgyrcdInUqJ
dfuC3lFk55bVtEKdaeG8W4Yt8YRnF8r+MCseIAFeCdIvZ1x38PFEZ84YG9Kzjl3C
++B84VQaaq98vgh1IxnkDNSv3LZfXaiLdbBGmyc8TjRXAEn7LUq1oQC4ZEvS4SwL
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:25 2025 by rpki-client