Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59CDE6EE874311F0AA09C3A8DAE4EC9C.roa
File: 59CDE6EE874311F0AA09C3A8DAE4EC9C.roa (raw, json)
Hash identifier: n66F8Bo5IJubGY5LH0L1/wU7s6Ch0TNeCW+zQnxe3cw=
Subject key identifier: 39:5D:BA:CD:F2:7A:1C:5D:31:8F:71:E7:72:34:CD:69:FC:CA:2E:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59CDE6EE874311F0AA09C3A8DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 14:52:59 +0000
ROA not before: Mon 01 Sep 2025 14:52:55 +0000
ROA not after: Sun 28 Sep 2025 14:52:55 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105358 (0x19b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 14:52:55 2025 GMT
Not After : Sep 28 14:52:55 2025 GMT
Subject: CN=68b5b34b-e107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:fe:d2:1a:d1:05:bc:71:dc:7d:9d:16:bd:
28:2a:00:cc:78:64:ad:a5:8b:62:91:29:53:94:d7:
3f:fa:d9:ff:ec:79:84:33:af:0a:4b:27:2d:26:ca:
29:f0:14:d2:d4:d9:0b:05:b9:8f:c3:fe:7d:17:d0:
15:06:be:62:ce:90:e0:39:d3:1a:8d:68:8a:a5:5c:
c2:fc:ef:b2:2b:fe:1b:f7:5a:40:7a:df:ee:b2:15:
f5:d0:c8:1c:70:6c:e1:a1:db:50:bc:8e:60:cd:f9:
71:87:63:7d:60:c7:e8:7f:ce:75:5d:ec:00:17:ee:
ee:e9:c2:51:44:53:37:9d:2c:e3:55:c2:81:27:68:
57:53:fa:af:85:18:fe:be:0a:da:86:5f:49:bf:a1:
f4:9f:81:52:ef:17:97:bb:b8:07:99:57:fb:ea:3a:
1f:68:d4:fc:90:38:67:bb:42:73:39:a0:52:15:5c:
a0:6f:bc:4e:01:5a:5e:25:a0:e3:a1:a1:33:2d:86:
06:aa:cb:cc:66:28:c3:75:6f:9b:2f:eb:f9:0a:65:
b0:1a:83:40:35:c1:f1:c1:c5:7c:fd:f3:f8:32:f2:
00:d6:4a:f3:6c:ee:76:23:fb:8f:97:37:e5:27:7d:
18:66:ea:4b:38:c4:31:0e:72:82:7c:96:a2:bb:dc:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:BA:CD:F2:7A:1C:5D:31:8F:71:E7:72:34:CD:69:FC:CA:2E:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59CDE6EE874311F0AA09C3A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.196.0/24
154.194.195.0/24
154.196.134.0/24
154.200.1.0/24
154.200.37.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0/24
154.200.60.0/24
Signature Algorithm: sha256WithRSAEncryption
63:74:30:f6:05:7c:61:03:77:cd:43:f9:da:e2:da:21:ec:e2:
6e:60:17:48:dc:f1:24:30:b4:56:d2:76:d2:15:1a:48:e9:27:
ed:55:93:52:6c:e6:30:2f:19:b5:fa:e0:47:c4:44:ba:f0:94:
6e:7d:dd:0e:e6:7b:c1:44:e5:09:86:a7:04:20:ce:68:49:c6:
26:96:2b:f4:c7:d8:0e:68:60:bd:ae:97:68:94:fa:56:dc:7e:
35:20:31:24:de:19:5c:da:87:74:fd:41:a7:59:45:40:9c:00:
9e:5e:24:37:91:8a:c6:d3:bd:a7:a5:e5:7a:4d:85:7f:da:1a:
48:b7:4f:c9:02:a1:3f:6f:7a:cf:85:ab:95:c2:32:8f:d8:9c:
f4:03:60:8f:1d:df:92:5b:5b:2b:ec:2e:2d:b7:0e:70:10:3e:
6a:49:f7:d5:0e:f0:b2:f4:25:22:81:dd:61:27:ec:42:c4:d8:
60:d0:1f:01:aa:b5:d9:9c:32:ca:ed:69:68:c5:be:c6:91:d1:
ea:c0:db:44:17:ed:23:d7:24:d8:44:45:5d:1f:0e:97:27:a2:
0e:86:a2:08:cc:11:19:91:10:32:1e:70:54:42:28:6a:eb:70:
66:c9:b5:3e:89:09:f7:73:c7:d1:01:02:2a:42:b8:64:a7:c6:
2f:e7:2b:dd
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAZuOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAxMTQ1MjU1WhcNMjUwOTI4MTQ1MjU1WjAYMRYw
FAYDVQQDEw02OGI1YjM0Yi1lMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Qn+0hrRBbxx3H2dFr0oKgDMeGStpYtikSlTlNc/+tn/7HmEM68KSyct
Jsop8BTS1NkLBbmPw/59F9AVBr5izpDgOdMajWiKpVzC/O+yK/4b91pAet/ushX1
0MgccGzhodtQvI5gzflxh2N9YMfof851XewAF+7u6cJRRFM3nSzjVcKBJ2hXU/qv
hRj+vgrahl9Jv6H0n4FS7xeXu7gHmVf76jofaNT8kDhnu0JzOaBSFVygb7xOAVpe
JaDjoaEzLYYGqsvMZijDdW+bL+v5CmWwGoNANcHxwcV8/fP4MvIA1krzbO52I/uP
lzflJ30YZupLOMQxDnKCfJaiu9ytIwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFDld
us3yehxdMY9x53I0zWn8yi5tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OUNERTZFRTg3NDMxMUYwQUEwOUMzQThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmlKZAwQAmlLEAwQAmsLD
AwQAmsSGAwQAmsgBAwQAmsglAwQAmsguAwQAmsgwAwQAmsg1AwQAmsg8MA0GCSqG
SIb3DQEBCwUAA4IBAQBjdDD2BXxhA3fNQ/na4toh7OJuYBdI3PEkMLRW0nbSFRpI
6SftVZNSbOYwLxm1+uBHxES68JRufd0O5nvBROUJhqcEIM5oScYmliv0x9gOaGC9
rpdolPpW3H41IDEk3hlc2od0/UGnWUVAnACeXiQ3kYrG072npeV6TYV/2hpIt0/J
AqE/b3rPhauVwjKP2Jz0A2CPHd+SW1sr7C4ttw5wED5qSffVDvCy9CUigd1hJ+xC
xNhg0B8BqrXZnDLK7Wloxb7GkdHqwNtEF+0j1yTYREVdHw6XJ6IOhqIIzBEZkRAy
HnBUQihq63BmybU+iQn3c8fRAQIqQrhkp8Yv5yvd
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:39 2025 by rpki-client