Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5473ADB48C7A11F09EF9B58FDAE4EC9C.roa
File: 5473ADB48C7A11F09EF9B58FDAE4EC9C.roa (raw, json)
Hash identifier: yMiYpFG3DbAdNNdQoh1iLGoTwYSTK0NKKYTkfTeuoFk=
Subject key identifier: 1D:E9:ED:C0:F0:E6:89:52:DF:50:1E:04:70:03:88:AA:CE:52:B3:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5473ADB48C7A11F09EF9B58FDAE4EC9C.roa
Signing time: Mon 08 Sep 2025 06:09:08 +0000
ROA not before: Mon 08 Sep 2025 06:09:03 +0000
ROA not after: Sat 27 Dec 2025 06:09:03 +0000
asID: 395886
IP address blocks: 154.84.32.0/21 maxlen: 24
154.84.40.0/21 maxlen: 24
154.84.48.0/21 maxlen: 24
154.84.56.0/21 maxlen: 24
154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106122 (0x19e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 06:09:03 2025 GMT
Not After : Dec 27 06:09:03 2025 GMT
Subject: CN=68be7304-bf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:6d:ab:0b:e8:2d:d0:b0:b5:a0:41:ed:63:
28:fb:d3:4d:1a:73:0c:e3:85:2b:92:d3:39:6e:87:
a9:41:f1:2b:dc:4f:4c:03:09:ea:b2:c9:2f:4d:5d:
36:6e:0a:7b:79:2a:49:74:98:41:88:65:2a:f5:17:
c3:a7:56:70:01:b5:6b:2e:28:68:63:9d:9a:eb:0b:
08:b6:ed:fb:30:06:b8:e6:33:92:e7:5c:f9:29:ac:
4b:2b:6a:30:58:1e:84:c7:70:98:ae:03:ba:c6:09:
1f:fd:5f:34:d0:c1:ca:6f:b2:4f:b9:2c:74:a1:47:
ed:5c:c6:b1:66:3d:65:63:b7:1e:61:40:b8:78:65:
ef:2f:05:5a:a2:b0:90:89:b4:d4:46:b1:50:70:fb:
4b:2a:57:99:7a:ad:4f:e5:72:2d:a7:80:4c:43:0c:
14:e0:5e:53:db:08:4d:17:8e:37:56:0e:c2:63:04:
83:98:f9:92:81:a6:53:d8:5a:e6:40:a4:a5:ab:b9:
55:52:d3:40:9a:bf:c0:40:1c:04:38:39:d3:db:f4:
d3:f2:be:fc:a2:a6:16:7f:7b:ff:01:cc:d1:f4:d0:
99:10:ef:78:76:a9:c4:cc:1b:0d:d1:6f:8b:02:56:
ec:c9:66:de:2f:95:aa:9d:04:44:3a:83:96:d6:e3:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:ED:C0:F0:E6:89:52:DF:50:1E:04:70:03:88:AA:CE:52:B3:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5473ADB48C7A11F09EF9B58FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
09:95:e5:db:52:5a:da:6b:33:4b:02:a9:f1:23:82:bb:96:14:
c9:e9:67:f2:f2:73:c4:28:6b:97:0d:19:4f:d6:eb:82:d3:4c:
63:a5:dd:16:c3:e2:02:d7:70:b0:2f:3f:a4:e4:81:32:b7:c4:
74:16:c9:70:c1:6d:2c:3f:6b:9c:8b:86:89:52:ca:d4:8f:b3:
cb:af:87:2d:f4:a2:c3:a2:71:08:73:5e:3b:1a:6d:10:c2:9f:
f7:2d:7e:24:4f:42:9c:d5:09:ac:8e:dc:f0:ab:2d:4d:e4:5e:
10:c3:41:72:ec:b9:6b:56:34:2d:89:c0:cc:4d:fb:a8:69:de:
26:6d:83:a5:84:cb:82:3d:95:99:e6:f3:e6:ce:6d:13:db:9e:
58:4b:88:36:b0:5b:15:bb:be:80:da:1a:69:84:49:08:66:f3:
04:f7:31:da:f1:c0:13:7c:37:ea:6c:2d:1e:f1:bf:17:34:a6:
f3:4d:ee:fd:4a:45:b6:75:de:4f:16:df:bd:12:0a:37:ef:86:
f6:d9:d6:25:67:4b:c7:44:7a:0b:42:3c:a5:e4:a7:29:bb:eb:
41:29:10:e1:00:ae:32:3c:f5:76:42:4c:ca:51:4f:eb:a5:c7:
31:6a:98:9b:d2:9e:1a:23:38:fe:49:bd:58:87:cb:0b:a7:02:
1f:c7:a0:57
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAZ6KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA4MDYwOTAzWhcNMjUxMjI3MDYwOTAzWjAYMRYw
FAYDVQQDEw02OGJlNzMwNC1iZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvnxtqwvoLdCwtaBB7WMo+9NNGnMM44UrktM5boepQfEr3E9MAwnqsskv
TV02bgp7eSpJdJhBiGUq9RfDp1ZwAbVrLihoY52a6wsItu37MAa45jOS51z5KaxL
K2owWB6Ex3CYrgO6xgkf/V800MHKb7JPuSx0oUftXMaxZj1lY7ceYUC4eGXvLwVa
orCQibTURrFQcPtLKleZeq1P5XItp4BMQwwU4F5T2whNF443Vg7CYwSDmPmSgaZT
2FrmQKSlq7lVUtNAmr/AQBwEODnT2/TT8r78oqYWf3v/AczR9NCZEO94dqnEzBsN
0W+LAlbsyWbeL5WqnQREOoOW1uOA/QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFB3p
7cDw5olS31AeBHADiKrOUrNtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDczQURCNDhDN0ExMUYwOUVGOUI1OEZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQFmlQgMAwDBASaWZADBASa
WcAwDQYJKoZIhvcNAQELBQADggEBAAmV5dtSWtprM0sCqfEjgruWFMnpZ/Lyc8Qo
a5cNGU/W64LTTGOl3RbD4gLXcLAvP6TkgTK3xHQWyXDBbSw/a5yLholSytSPs8uv
hy30osOicQhzXjsabRDCn/ctfiRPQpzVCayO3PCrLU3kXhDDQXLsuWtWNC2JwMxN
+6hp3iZtg6WEy4I9lZnm8+bObRPbnlhLiDawWxW7voDaGmmESQhm8wT3MdrxwBN8
N+psLR7xvxc0pvNN7v1KRbZ13k8W370SCjfvhvbZ1iVnS8dEegtCPKXkpym760Ep
EOEArjI89XZCTMpRT+ulxzFqmJvSnhojOP5JvViHywunAh/HoFc=
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:37:05 2025 by rpki-client