Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54F73C18889911F0964FFADADAE4EC9C.roa
File: 54F73C18889911F0964FFADADAE4EC9C.roa (raw, json)
Hash identifier: O6I/WYKXuRP00Uz0ld0h1nenzgQf5O/C5OhOkg4L5DY=
Subject key identifier: 5C:DF:00:4C:4D:18:F3:4A:25:C0:C9:6A:7E:23:D3:87:69:51:57:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019CA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54F73C18889911F0964FFADADAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:40:59 +0000
ROA not before: Wed 03 Sep 2025 07:40:54 +0000
ROA not after: Wed 17 Sep 2025 07:40:54 +0000
asID: 139923
IP address blocks: 154.217.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105638 (0x19ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 07:40:54 2025 GMT
Not After : Sep 17 07:40:54 2025 GMT
Subject: CN=68b7f10b-4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:d4:ae:ad:b7:8a:6d:5f:b5:d2:ba:e1:22:
8c:6b:c2:6e:71:3a:eb:37:0b:d6:1f:cc:c4:30:48:
68:37:9b:71:df:57:e1:9e:2f:8c:30:e9:f8:09:22:
82:0c:b9:b4:c3:78:07:ca:52:b1:04:2a:6c:7c:d9:
fa:d5:77:b1:c5:16:5f:b2:aa:44:92:90:28:e2:ec:
52:de:b7:b2:ca:50:eb:75:70:08:0a:98:67:cf:2d:
de:3f:34:31:7c:50:e0:1d:86:66:9e:e7:0e:09:49:
68:c9:7d:77:a5:9a:cc:72:a0:62:b7:2f:a5:17:5d:
a6:ba:c8:0a:0f:d3:7a:32:14:1b:e6:35:a7:f9:3a:
48:99:4e:58:26:35:d8:0a:32:de:3b:93:51:a5:66:
0b:97:5d:21:93:ec:41:fc:57:00:4f:25:52:8a:4f:
9a:3c:9b:c2:ae:84:78:f0:4c:26:c5:87:a3:9e:b1:
82:fd:f3:19:3e:3b:f8:3f:6a:ae:e5:6b:94:76:da:
b8:4b:51:8a:2b:42:59:5b:28:f3:f8:83:e9:7d:54:
31:3b:64:7f:4e:77:c0:43:62:b9:1b:fd:3d:9c:c6:
36:a6:d1:e3:79:7e:45:20:26:bd:6b:9b:6b:bf:a2:
3e:e2:c1:6b:23:e5:fb:f1:6f:fd:e8:32:22:73:80:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:00:4C:4D:18:F3:4A:25:C0:C9:6A:7E:23:D3:87:69:51:57:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54F73C18889911F0964FFADADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:2a:db:d8:2e:e9:ce:d0:3e:91:e5:62:58:8b:4d:3b:54:cf:
5d:0a:72:d2:e3:42:22:b0:76:0f:2d:e5:00:bc:2e:65:ab:dc:
f3:f5:72:1b:15:87:0b:7e:5d:f0:4d:93:48:ff:03:23:52:18:
8b:6a:fc:f6:7e:f7:f1:ec:4e:e9:12:2f:25:19:73:46:67:1d:
ef:50:0f:42:35:a7:d0:54:0d:a7:90:bd:8d:7c:74:b4:6b:87:
0b:bc:04:27:42:47:b1:2d:e7:e8:22:58:bf:d7:fc:d7:b4:db:
34:c6:15:dc:6e:bf:33:24:fb:33:8c:dc:03:02:bd:a9:c6:1a:
dc:0b:fc:a8:ef:5c:ff:5d:8f:90:82:08:00:4b:85:85:ca:63:
12:7b:9f:d5:7d:90:35:9d:aa:a4:f6:e4:d4:4a:5f:96:84:a1:
7f:c2:a5:cd:dd:de:b7:7b:1c:a9:6c:51:3a:1e:70:e9:9e:86:
2d:aa:ed:93:10:b7:01:d5:8d:6d:d0:9c:38:0d:5f:e7:7d:37:
16:60:db:e3:52:19:17:eb:82:d1:45:a3:6e:85:56:1e:96:c7:
fc:8e:5d:dd:ef:3d:e3:9a:fa:fd:34:c3:9e:7a:76:19:6a:d1:
57:80:9e:35:5a:1f:d3:26:1e:f6:be:53:6d:39:0e:bd:cc:b4:
5f:41:39:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZymMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMDc0MDU0WhcNMjUwOTE3MDc0MDU0WjAYMRYw
FAYDVQQDEw02OGI3ZjEwYi00NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApCPUrq23im1ftdK64SKMa8JucTrrNwvWH8zEMEhoN5tx31fhni+MMOn4
CSKCDLm0w3gHylKxBCpsfNn61XexxRZfsqpEkpAo4uxS3reyylDrdXAICphnzy3e
PzQxfFDgHYZmnucOCUloyX13pZrMcqBity+lF12musgKD9N6MhQb5jWn+TpImU5Y
JjXYCjLeO5NRpWYLl10hk+xB/FcATyVSik+aPJvCroR48EwmxYejnrGC/fMZPjv4
P2qu5WuUdtq4S1GKK0JZWyjz+IPpfVQxO2R/TnfAQ2K5G/09nMY2ptHjeX5FICa9
a5trv6I+4sFrI+X78W/96DIic4DZIwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFzf
AExNGPNKJcDJan4j04dpUVfNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NEY3M0MxODg4OTkxMUYwOTY0RkZBREFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtnwMA0GCSqGSIb3DQEB
CwUAA4IBAQCsKtvYLunO0D6R5WJYi007VM9dCnLS40IisHYPLeUAvC5lq9zz9XIb
FYcLfl3wTZNI/wMjUhiLavz2fvfx7E7pEi8lGXNGZx3vUA9CNafQVA2nkL2NfHS0
a4cLvAQnQkexLefoIli/1/zXtNs0xhXcbr8zJPszjNwDAr2pxhrcC/yo71z/XY+Q
gggAS4WFymMSe5/VfZA1naqk9uTUSl+WhKF/wqXN3d63exypbFE6HnDpnoYtqu2T
ELcB1Y1t0Jw4DV/nfTcWYNvjUhkX64LRRaNuhVYelsf8jl3d7z3jmvr9NMOeenYZ
atFXgJ41Wh/TJh72vlNtOQ69zLRfQTnP
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:25 2025 by rpki-client