Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75FA04A8805211F0B78AEDE7DAE4EC9C.roa
File: 75FA04A8805211F0B78AEDE7DAE4EC9C.roa (raw, json)
Hash identifier: z7dWRM0/fNawoxC8/3cI6eLVyEU5LlJf1YApbcdOZv8=
Subject key identifier: E7:4B:85:C3:D3:23:A5:72:10:F9:6D:D7:4C:03:CA:C8:B2:FB:34:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019621
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75FA04A8805211F0B78AEDE7DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 18:53:31 +0000
ROA not before: Sat 23 Aug 2025 18:53:23 +0000
ROA not after: Tue 30 Sep 2025 18:53:23 +0000
asID: 9304
IP address blocks: 154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103969 (0x19621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 18:53:23 2025 GMT
Not After : Sep 30 18:53:23 2025 GMT
Subject: CN=68aa0e2b-3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:02:c4:e5:8c:66:ea:44:96:1d:82:64:0a:
6a:95:a3:81:66:4d:82:2a:ff:1a:06:27:bb:7e:d6:
58:f7:69:59:08:9d:de:6b:c4:df:f1:39:8c:40:14:
dd:1c:f1:fe:9a:9f:94:3a:24:8d:5c:26:1e:76:5b:
38:03:9f:55:14:7b:a6:08:ce:0a:c7:45:8f:41:65:
09:04:d4:e9:70:2d:cc:72:69:0c:6f:c2:a6:3d:fb:
54:21:cb:00:ea:93:5e:0f:53:85:15:a7:49:0e:9a:
db:1d:c8:41:24:84:40:d8:c6:64:92:7a:97:d5:76:
07:62:4d:69:29:04:58:aa:07:8c:15:7b:7a:88:fd:
e5:bb:49:91:ff:e2:ba:2d:36:04:07:f7:f2:31:e2:
11:24:17:b2:dd:7b:10:ac:8c:2a:7a:45:6c:c2:77:
d4:ff:d5:0e:b8:1d:61:40:0f:02:13:0d:7a:e2:28:
b7:ea:fa:c8:df:1d:b8:65:2a:1a:a5:5b:d4:7a:e0:
b8:35:77:3a:e6:79:29:d5:50:ac:32:6d:19:d5:c4:
e8:ce:a7:7a:21:5f:29:7e:09:91:39:f8:cc:b4:12:
d7:00:21:04:32:9e:6e:2f:f2:39:d8:f4:e3:95:33:
9e:ff:f5:54:58:79:78:b3:95:f8:18:e6:ce:11:b1:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:85:C3:D3:23:A5:72:10:F9:6D:D7:4C:03:CA:C8:B2:FB:34:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75FA04A8805211F0B78AEDE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.197.0-154.82.198.255
154.83.65.0/24
154.89.132.0/24
154.90.67.0/24
154.90.128.0/24
154.90.189.0/24
154.194.195.0/24
154.196.134.0/24
154.200.1.0/24
154.200.37.0/24
154.200.53.0/24
Signature Algorithm: sha256WithRSAEncryption
41:12:4b:a5:af:e5:16:5d:26:26:41:62:f3:19:97:4b:22:56:
4a:3a:d6:75:6f:3f:4d:b5:9a:6f:44:aa:9e:d7:28:07:f4:0c:
a1:18:97:96:3d:7c:98:5e:d1:e3:bd:2a:e3:d4:94:25:89:ba:
52:7b:9a:e1:3c:8b:48:02:2c:0c:d7:1a:e3:5c:69:7b:a7:a1:
f8:9b:6d:38:72:fc:3a:82:8f:c5:91:1f:0f:7f:dc:d1:c5:ef:
51:75:6e:36:d7:9e:2c:f7:a2:6c:7e:28:80:fc:88:10:ac:f5:
73:1c:75:a1:5e:fa:07:ba:7e:f4:6e:a5:f8:41:af:95:03:8b:
e3:42:5a:d8:8c:0c:25:a6:96:73:6b:bc:1b:dc:63:64:49:b8:
74:f2:d4:0e:58:09:67:84:91:4b:00:a6:8f:b7:67:1d:13:f1:
ac:26:56:93:89:5d:cf:00:75:43:47:d3:43:6c:10:ff:a7:4c:
3b:7b:4c:5c:a6:cc:85:5a:61:55:46:93:4e:91:21:66:09:ed:
1b:b6:7e:a4:fe:1c:a2:c3:3c:36:55:e6:0e:63:45:aa:a6:4a:
44:a1:03:78:bb:72:f9:b8:7e:a3:93:80:1a:8b:2d:36:80:75:
93:9b:a1:f4:73:b1:d7:ee:9e:09:06:50:c7:6a:90:8d:ea:df:
47:f7:b8:b3
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIDAZYhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIzMTg1MzIzWhcNMjUwOTMwMTg1MzIzWjAYMRYw
FAYDVQQDEw02OGFhMGUyYi0zNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxKECxOWMZupElh2CZApqlaOBZk2CKv8aBie7ftZY92lZCJ3ea8Tf8TmM
QBTdHPH+mp+UOiSNXCYedls4A59VFHumCM4Kx0WPQWUJBNTpcC3McmkMb8KmPftU
IcsA6pNeD1OFFadJDprbHchBJIRA2MZkknqX1XYHYk1pKQRYqgeMFXt6iP3lu0mR
/+K6LTYEB/fyMeIRJBey3XsQrIwqekVswnfU/9UOuB1hQA8CEw164ii36vrI3x24
ZSoapVvUeuC4NXc65nkp1VCsMm0Z1cTozqd6IV8pfgmROfjMtBLXACEEMp5uL/I5
2PTjlTOe//VUWHl4s5X4GObOEbFb6wIDAQABo4IC6TCCAuUwHQYDVR0OBBYEFOdL
hcPTI6VyEPlt10wDysiy+zT+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NUZBMDRBODgwNTIxMUYwQjc4QUVERTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBACaUsUDBACaUsYDBACa
U0EDBACaWYQDBACaWkMDBACaWoADBACaWr0DBACawsMDBACaxIYDBACayAEDBACa
yCUDBACayDUwDQYJKoZIhvcNAQELBQADggEBAEESS6Wv5RZdJiZBYvMZl0siVko6
1nVvP021mm9Eqp7XKAf0DKEYl5Y9fJhe0eO9KuPUlCWJulJ7muE8i0gCLAzXGuNc
aXunofibbThy/DqCj8WRHw9/3NHF71F1bjbXniz3omx+KID8iBCs9XMcdaFe+ge6
fvRupfhBr5UDi+NCWtiMDCWmlnNrvBvcY2RJuHTy1A5YCWeEkUsApo+3Zx0T8awm
VpOJXc8AdUNH00NsEP+nTDt7TFymzIVaYVVGk06RIWYJ7Ru2fqT+HKLDPDZV5g5j
RaqmSkShA3i7cvm4fqOTgBqLLTaAdZObofRzsdfungkGUMdqkI3q30f3uLM=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:24 2025 by rpki-client