Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A713A9C836811F08095B579DAE4EC9C.roa
File: 7A713A9C836811F08095B579DAE4EC9C.roa (raw, json)
Hash identifier: KFY+Q4UhjeildHnxP6rmGXKyEpylK/eA7VSvSjRtL40=
Subject key identifier: 61:1D:EC:72:AE:83:37:9F:2C:42:81:E6:B8:FB:C6:48:88:7A:6D:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A713A9C836811F08095B579DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 17:08:41 +0000
ROA not before: Wed 27 Aug 2025 17:08:36 +0000
ROA not after: Wed 15 Oct 2025 17:08:36 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104677 (0x198e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 17:08:36 2025 GMT
Not After : Oct 15 17:08:36 2025 GMT
Subject: CN=68af3b98-7385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:60:ee:71:88:2b:a3:03:57:73:f2:bb:6a:
6f:0e:27:05:0f:93:c1:fb:29:86:bc:6f:96:2a:8f:
9a:55:c0:c0:4f:eb:dc:5e:75:19:a7:1c:62:41:39:
d0:98:07:9f:5e:57:a7:65:63:d4:a5:90:0d:73:1c:
2f:7a:98:ec:16:0a:f7:3a:50:e7:5d:b0:d1:da:bf:
00:47:84:36:9e:8b:48:0d:59:ab:0f:c1:8a:9a:4c:
e2:3c:63:e8:86:2e:50:f2:93:6c:37:52:77:1d:0c:
84:91:5e:e6:49:7d:00:2a:fe:89:24:25:41:55:71:
f9:e1:6a:4d:77:e0:4d:ff:bd:a8:91:c8:29:e5:f7:
63:48:68:d2:95:e8:74:fa:54:cf:02:dc:b6:a6:13:
cf:e0:76:5f:b2:70:ba:bc:9f:07:89:e1:fa:ef:5a:
fb:69:6b:f9:3b:93:f4:67:c0:a7:b4:ce:08:e2:a0:
3a:d3:74:8a:66:38:30:1c:3f:09:0b:26:7f:4f:22:
0c:ac:16:47:29:0e:db:1e:7e:3e:bb:d6:04:a6:7c:
4a:50:09:04:ec:6e:c8:ea:b3:a7:5f:1f:51:3d:ac:
02:da:cb:63:fc:e8:cf:87:28:e8:8b:5e:80:6c:e2:
39:79:ae:c7:cf:90:17:49:75:44:ec:b8:c8:cc:50:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:EC:72:AE:83:37:9F:2C:42:81:E6:B8:FB:C6:48:88:7A:6D:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A713A9C836811F08095B579DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/24
154.203.162.0-154.203.170.255
Signature Algorithm: sha256WithRSAEncryption
46:c4:78:ce:41:d0:b3:fc:aa:a3:09:d3:73:88:d6:30:fc:57:
6e:3b:11:ae:2f:b1:15:38:f2:70:34:e3:68:2b:c0:dd:05:1d:
1e:fd:d4:7a:6a:df:01:07:d1:5e:8c:f1:34:40:49:e6:c9:1a:
50:06:0a:1e:bd:12:0a:d0:f7:f7:b3:27:65:42:ea:ae:38:93:
81:72:b9:12:fb:fc:4e:c3:a7:e4:e0:eb:76:cf:27:e4:a8:5a:
7f:ee:e2:d3:5f:51:c9:1e:d8:70:b6:15:ce:2f:97:f1:86:ab:
41:e8:cc:1e:83:93:47:2b:d9:90:b1:a9:ea:19:6a:a1:70:e1:
b8:b1:2e:78:5a:76:0a:7f:6f:e2:1d:4b:c3:64:47:03:da:28:
b1:07:4f:9f:92:1f:c9:61:a6:fe:b0:1b:be:30:9a:54:2b:07:
19:51:b1:e4:20:e0:80:96:23:59:df:24:ec:bb:01:f3:92:5e:
48:86:3a:72:e5:fd:02:67:dc:37:5c:bb:0c:00:cb:ef:a4:3e:
79:a8:d5:57:65:40:26:24:64:6b:81:50:3f:a0:1a:28:46:1b:
88:e2:4f:6f:98:03:bb:69:f9:5d:c5:78:1a:b0:65:48:87:dd:
f5:1b:da:40:92:50:e7:56:2d:87:03:0f:2d:71:e6:5f:d7:7c:
9f:d6:ff:fa
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAZjlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI3MTcwODM2WhcNMjUxMDE1MTcwODM2WjAYMRYw
FAYDVQQDEw02OGFmM2I5OC03Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsZNg7nGIK6MDV3Pyu2pvDicFD5PB+ymGvG+WKo+aVcDAT+vcXnUZpxxi
QTnQmAefXlenZWPUpZANcxwvepjsFgr3OlDnXbDR2r8AR4Q2notIDVmrD8GKmkzi
PGPohi5Q8pNsN1J3HQyEkV7mSX0AKv6JJCVBVXH54WpNd+BN/72okcgp5fdjSGjS
leh0+lTPAty2phPP4HZfsnC6vJ8HieH671r7aWv5O5P0Z8CntM4I4qA603SKZjgw
HD8JCyZ/TyIMrBZHKQ7bHn4+u9YEpnxKUAkE7G7I6rOnXx9RPawC2stj/OjPhyjo
i16AbOI5ea7Hz5AXSXVE7LjIzFCN2QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGEd
7HKugzefLEKB5rj7xkiIem14MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QTcxM0E5QzgzNjgxMUYwODA5NUI1NzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsugMAwDBAGay6IDBACa
y6owDQYJKoZIhvcNAQELBQADggEBAEbEeM5B0LP8qqMJ03OI1jD8V247Ea4vsRU4
8nA042grwN0FHR791Hpq3wEH0V6M8TRASebJGlAGCh69EgrQ9/ezJ2VC6q44k4Fy
uRL7/E7Dp+Tg63bPJ+SoWn/u4tNfUcke2HC2Fc4vl/GGq0HozB6Dk0cr2ZCxqeoZ
aqFw4bixLnhadgp/b+IdS8NkRwPaKLEHT5+SH8lhpv6wG74wmlQrBxlRseQg4ICW
I1nfJOy7AfOSXkiGOnLl/QJn3DdcuwwAy++kPnmo1VdlQCYkZGuBUD+gGihGG4ji
T2+YA7tp+V3FeBqwZUiH3fUb2kCSUOdWLYcDDy1x5l/XfJ/W//o=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:34 2025 by rpki-client