Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6FC402836411F09294DBDDDAE4EC9C.roa
File: 3B6FC402836411F09294DBDDDAE4EC9C.roa (raw, json)
Hash identifier: cJBCThOTtbzcfToCOogbTUQN6gUVpQ80ixfekKNo0M8=
Subject key identifier: B6:23:F9:6E:3B:FC:22:81:D9:8B:07:6F:E9:7D:89:A7:2D:A3:F2:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6FC402836411F09294DBDDDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 16:38:17 +0000
ROA not before: Wed 27 Aug 2025 16:38:10 +0000
ROA not after: Sat 27 Sep 2025 16:38:10 +0000
asID: 154086
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104667 (0x198db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 16:38:10 2025 GMT
Not After : Sep 27 16:38:10 2025 GMT
Subject: CN=68af3479-e748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:c4:95:6f:d3:1e:41:7c:de:e7:b9:0a:05:
90:c0:51:19:dc:5f:d3:14:9e:58:9a:a8:55:e6:d7:
d3:33:3d:d5:41:5e:15:4f:97:c8:d5:cb:f9:94:29:
c6:2e:7e:42:dc:4e:90:22:31:f0:90:73:c8:f7:34:
ed:4b:b6:e8:02:ff:71:9c:d9:20:02:d1:fd:69:d9:
c4:39:73:4a:c6:ee:fa:63:d3:d6:7e:3e:b8:5c:3d:
46:a4:77:f8:b3:0f:15:67:3d:c8:e6:2f:e7:2b:ed:
16:46:50:52:61:71:e2:62:79:65:f2:f1:18:6e:65:
98:b6:41:c8:8d:27:cf:41:61:06:4e:a4:c2:18:4f:
86:e5:3d:42:49:b2:3c:92:a0:e7:64:e1:54:fb:14:
d2:ac:9c:5e:dd:eb:ef:cd:17:0c:dc:9f:8f:a0:6a:
22:12:35:25:62:cb:50:d0:d9:dd:d1:5a:df:43:61:
bd:61:96:99:77:c8:81:df:fc:b2:43:e0:13:1b:fb:
c5:28:c2:78:a5:98:af:a3:bb:a8:e8:9f:7f:1d:4e:
4a:9e:bb:32:29:ea:0c:07:d9:95:1f:dd:5f:b8:4a:
1c:48:5d:f4:cd:0b:0d:8e:6c:28:d1:65:c3:bd:0d:
bd:11:35:f8:0d:12:05:37:d8:f3:d4:29:a2:73:84:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:F9:6E:3B:FC:22:81:D9:8B:07:6F:E9:7D:89:A7:2D:A3:F2:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6FC402836411F09294DBDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a5:6f:1c:0d:fd:0a:64:63:de:2a:3c:3b:a0:ee:ac:fb:63:
57:bb:47:d0:d6:82:af:3b:5e:0c:6b:86:14:e6:17:55:1f:b7:
6e:96:ea:d5:30:27:2c:42:7f:21:66:5e:1e:ea:cb:3c:cb:bd:
14:b3:e5:51:8f:63:90:34:56:58:2f:fd:86:f8:19:5b:14:3c:
1b:4c:dd:ed:75:30:07:73:f5:4d:1f:84:81:92:be:79:b2:7b:
c3:a5:8d:0e:e7:c6:f6:37:0c:e9:f2:0c:f1:4f:9e:f5:dd:73:
b2:20:a7:91:13:66:88:54:31:e0:e0:16:a2:b7:ae:59:12:33:
63:eb:75:30:fc:37:df:fe:e1:ab:a9:58:bb:78:41:00:01:70:
56:c1:f6:9f:8d:56:e3:60:90:f6:d5:9a:8d:89:83:e4:b4:57:
0e:88:f7:90:89:be:ce:1c:ea:12:b0:be:58:1d:3f:6c:94:b8:
ac:02:fe:58:ef:86:30:94:8e:14:d0:06:c1:66:b2:a3:8d:9d:
fc:4a:e7:db:c2:61:4f:f7:24:f5:90:6b:c9:c3:37:5a:ea:f0:
00:c3:6d:b1:f5:02:3d:52:b7:f2:4a:d4:43:d5:bb:15:d0:7b:
3d:15:34:0b:f2:08:ea:98:15:85:91:e1:f4:7a:35:96:07:57:
79:31:4d:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZjbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI3MTYzODEwWhcNMjUwOTI3MTYzODEwWjAYMRYw
FAYDVQQDEw02OGFmMzQ3OS1lNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6JTElW/THkF83ue5CgWQwFEZ3F/TFJ5YmqhV5tfTMz3VQV4VT5fI1cv5
lCnGLn5C3E6QIjHwkHPI9zTtS7boAv9xnNkgAtH9adnEOXNKxu76Y9PWfj64XD1G
pHf4sw8VZz3I5i/nK+0WRlBSYXHiYnll8vEYbmWYtkHIjSfPQWEGTqTCGE+G5T1C
SbI8kqDnZOFU+xTSrJxe3evvzRcM3J+PoGoiEjUlYstQ0Nnd0VrfQ2G9YZaZd8iB
3/yyQ+ATG/vFKMJ4pZivo7uo6J9/HU5KnrsyKeoMB9mVH91fuEocSF30zQsNjmwo
0WXDvQ29ETX4DRIFN9jz1Cmic4SkfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLYj
+W47/CKB2YsHb+l9iacto/JAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQjZGQzQwMjgzNjQxMUYwOTI5NERCREREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlIRMA0GCSqGSIb3DQEB
CwUAA4IBAQC5pW8cDf0KZGPeKjw7oO6s+2NXu0fQ1oKvO14Ma4YU5hdVH7dulurV
MCcsQn8hZl4e6ss8y70Us+VRj2OQNFZYL/2G+BlbFDwbTN3tdTAHc/VNH4SBkr55
snvDpY0O58b2Nwzp8gzxT5713XOyIKeRE2aIVDHg4Bait65ZEjNj63Uw/Dff/uGr
qVi7eEEAAXBWwfafjVbjYJD21ZqNiYPktFcOiPeQib7OHOoSsL5YHT9slLisAv5Y
74YwlI4U0AbBZrKjjZ38SufbwmFP9yT1kGvJwzda6vAAw22x9QI9UrfyStRD1bsV
0Hs9FTQL8gjqmBWFkeH0ejWWB1d5MU3/
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:36:24 2025 by rpki-client