Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E24BD4A533311F0833BC17DDAE4EC9C.roa
File: 7E24BD4A533311F0833BC17DDAE4EC9C.roa (raw, json)
Hash identifier: h/rptqkeLIvb2NJAqY4PK7gt5Zrhb05a8bCRGPTRpy4=
Subject key identifier: 10:73:75:85:93:E2:57:7C:56:1A:E6:FC:D8:D5:BA:C7:28:F0:6C:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018942
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E24BD4A533311F0833BC17DDAE4EC9C.roa
Signing time: Fri 27 Jun 2025 08:48:28 +0000
ROA not before: Fri 27 Jun 2025 08:48:23 +0000
ROA not after: Mon 18 Aug 2025 08:48:23 +0000
asID: 21859
IP address blocks: 154.94.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 23:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100674 (0x18942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:48:23 2025 GMT
Not After : Aug 18 08:48:23 2025 GMT
Subject: CN=685e5adc-9b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:1f:ee:39:46:4a:1d:27:cf:9a:97:4d:d3:
12:4e:18:2f:29:6d:ff:c2:fa:7e:15:63:5d:89:1d:
34:8a:44:59:6e:36:f1:21:50:40:81:a1:8c:cc:ce:
98:01:7f:ee:71:5d:04:77:79:8b:ec:95:17:12:3e:
94:d6:11:fd:92:86:5d:8e:5a:7b:2b:96:a9:53:85:
3b:ac:5d:ee:8d:dd:12:b8:c5:ac:30:45:1a:d5:65:
4d:7d:14:0a:68:4f:a9:73:ed:21:86:4a:03:8d:0e:
41:0b:54:4a:37:5d:9b:14:6d:91:26:4b:68:b4:aa:
ef:83:77:84:b4:d1:26:0a:39:b0:92:31:df:e9:a8:
4e:61:7f:98:b4:d3:19:fc:3f:19:86:12:d4:52:70:
68:18:53:2a:fa:28:f6:9a:fa:cf:d1:1c:0e:51:04:
c9:ad:3c:6a:9e:30:0f:fb:f0:b9:a8:79:f9:4c:a0:
9a:7d:45:eb:ee:39:31:af:eb:5c:98:ed:76:ae:bf:
d5:61:52:f4:bd:6f:00:54:32:0c:28:e1:f5:d2:dd:
d7:5f:e2:3b:ae:65:eb:97:a7:e4:15:df:27:03:fe:
56:b9:a6:75:d3:8e:28:13:bb:62:03:45:09:82:ab:
44:bc:45:1d:4e:cf:2b:7e:cb:ad:8b:00:7f:4a:15:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:75:85:93:E2:57:7C:56:1A:E6:FC:D8:D5:BA:C7:28:F0:6C:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E24BD4A533311F0833BC17DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.1.0/24
Signature Algorithm: sha256WithRSAEncryption
53:91:55:2f:45:3e:05:8f:8d:e9:fe:40:71:37:c2:90:a2:20:
26:30:35:b1:f8:0f:e9:71:cf:67:06:0c:0c:c0:da:d2:ab:1c:
75:88:eb:f5:a1:e7:07:b9:0d:02:26:da:2b:0b:43:0f:b5:26:
70:d9:5a:34:9e:b2:5c:56:34:0c:e4:88:a6:39:02:50:bf:3f:
be:86:a5:b0:fb:4e:75:14:d6:70:41:3e:cd:2e:34:61:b6:78:
1e:0c:ae:bf:50:5f:cb:22:fe:79:c9:85:42:c2:d3:4b:41:a0:
5f:0e:24:cd:f1:16:f3:1c:74:b9:91:5a:52:5a:1a:3d:ec:70:
8e:cb:aa:d8:00:a6:0d:4b:f9:54:1e:42:f5:1d:ff:f7:3e:e9:
89:0f:ef:76:ab:90:2c:f9:87:5f:92:a2:42:be:8c:1f:49:3d:
0a:d2:66:68:f8:14:6a:f6:4b:e6:9a:60:1a:a5:c4:92:05:b8:
91:77:96:24:80:7f:7a:bb:9a:8d:c3:ab:86:14:e3:30:88:17:
20:b2:55:e7:48:55:ac:5a:d1:9a:0b:3e:2e:69:c5:32:cc:ab:
a2:c2:d6:d4:81:7f:a5:3a:32:b3:ca:bc:e3:14:74:bf:f9:d1:
92:ea:ba:d8:34:f9:22:82:30:c1:18:00:c2:17:dd:d9:25:9a:
00:1b:6d:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYlCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI3MDg0ODIzWhcNMjUwODE4MDg0ODIzWjAYMRYw
FAYDVQQDEw02ODVlNWFkYy05YjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqk4f7jlGSh0nz5qXTdMSThgvKW3/wvp+FWNdiR00ikRZbjbxIVBAgaGM
zM6YAX/ucV0Ed3mL7JUXEj6U1hH9koZdjlp7K5apU4U7rF3ujd0SuMWsMEUa1WVN
fRQKaE+pc+0hhkoDjQ5BC1RKN12bFG2RJktotKrvg3eEtNEmCjmwkjHf6ahOYX+Y
tNMZ/D8ZhhLUUnBoGFMq+ij2mvrP0RwOUQTJrTxqnjAP+/C5qHn5TKCafUXr7jkx
r+tcmO12rr/VYVL0vW8AVDIMKOH10t3XX+I7rmXrl6fkFd8nA/5WuaZ1044oE7ti
A0UJgqtEvEUdTs8rfsutiwB/ShVx0wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBBz
dYWT4ld8Vhrm/NjVusco8GwKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTI0QkQ0QTUzMzMxMUYwODMzQkMxN0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4BMA0GCSqGSIb3DQEB
CwUAA4IBAQBTkVUvRT4Fj43p/kBxN8KQoiAmMDWx+A/pcc9nBgwMwNrSqxx1iOv1
oecHuQ0CJtorC0MPtSZw2Vo0nrJcVjQM5IimOQJQvz++hqWw+051FNZwQT7NLjRh
tngeDK6/UF/LIv55yYVCwtNLQaBfDiTN8RbzHHS5kVpSWho97HCOy6rYAKYNS/lU
HkL1Hf/3PumJD+92q5As+YdfkqJCvowfST0K0mZo+BRq9kvmmmAapcSSBbiRd5Yk
gH96u5qNw6uGFOMwiBcgslXnSFWsWtGaCz4uacUyzKuiwtbUgX+lOjKzyrzjFHS/
+dGS6rrYNPkigjDBGADCF93ZJZoAG20j
-----END CERTIFICATE-----
Generated at Mon Jul 7 02:38:19 2025 by rpki-client