Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EA5A60A889111F09EF07BA8DAE4EC9C.roa
File: 8EA5A60A889111F09EF07BA8DAE4EC9C.roa (raw, json)
Hash identifier: CDCfYcDXyBvuKG2+XmEzP7AP1i4t1Zh3rw9bQ8V8+58=
Subject key identifier: AA:03:84:54:51:3A:BF:A8:E8:C6:CA:79:11:1E:F2:92:91:FF:11:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EA5A60A889111F09EF07BA8DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 06:45:20 +0000
ROA not before: Wed 03 Sep 2025 06:45:14 +0000
ROA not after: Sat 04 Oct 2025 06:45:14 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
154.200.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105610 (0x19c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 06:45:14 2025 GMT
Not After : Oct 4 06:45:14 2025 GMT
Subject: CN=68b7e400-6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:05:dd:36:e2:14:3c:6d:c2:7e:36:76:6a:
02:22:ce:a4:41:a3:89:75:18:58:61:3d:b9:9c:43:
70:62:33:a5:3d:70:d0:62:c6:89:3c:f6:37:bd:b8:
91:9c:75:f2:b1:37:ed:de:6c:ed:62:95:11:b3:ea:
8f:a9:6a:ea:c4:38:0a:f0:5d:0e:f2:61:7d:6c:ce:
60:32:1d:f6:fc:91:c7:e4:1f:3e:c8:49:6c:3f:81:
d1:05:59:94:d6:fe:f0:72:3c:ff:f4:06:c3:05:0e:
14:e8:11:e6:ba:1b:0a:b5:83:4f:4d:88:49:99:7d:
bd:1c:42:15:99:57:6b:96:4c:61:cd:6c:1b:10:01:
7f:81:bc:b6:62:f0:0c:2d:39:e6:03:10:28:55:61:
22:62:d5:91:93:27:4a:ca:f3:04:f8:5e:aa:c9:bc:
d1:01:a8:fe:72:b9:a2:0f:9a:10:35:52:49:4b:7a:
aa:54:fb:23:eb:4e:25:4d:87:28:bd:0d:a0:df:e4:
32:46:d8:56:3d:32:69:cb:3b:e1:98:da:b5:27:77:
02:3b:db:1a:d6:28:a3:df:97:a1:83:63:c0:ad:f0:
9d:e8:77:39:24:d7:e2:e0:19:ce:6b:eb:cc:53:2c:
80:af:70:6b:1e:d6:ad:bf:c0:3a:8b:f4:6a:79:fb:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:84:54:51:3A:BF:A8:E8:C6:CA:79:11:1E:F2:92:91:FF:11:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EA5A60A889111F09EF07BA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
154.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9d:6f:a5:bc:eb:54:f7:ef:98:0b:c1:47:24:5a:17:ce:a4:
8f:59:c8:0f:50:aa:2f:f9:b3:5a:8a:7e:a1:2e:25:20:8a:35:
d8:31:2e:df:7e:c3:f6:ba:60:62:28:65:f7:12:d1:02:1b:1e:
75:f4:21:81:af:e8:47:a3:1f:65:57:57:1d:de:f1:12:26:9e:
97:c3:d7:f3:4e:96:35:49:6d:f3:27:0d:8b:2f:1e:4c:6c:b5:
14:3a:83:52:e4:21:0d:59:ab:08:c6:70:1b:49:a0:bc:34:4c:
47:19:69:aa:23:d5:d8:6a:72:ed:bc:b6:ea:00:21:dc:dd:3f:
fd:47:e2:3a:11:a3:be:03:0f:a5:5e:70:89:ca:65:b5:86:8e:
2c:b5:1a:06:4a:d6:04:04:53:5c:11:f3:4f:17:3b:52:81:f9:
3e:c9:56:4e:69:2f:0e:34:4e:f3:14:a0:33:38:06:29:46:d6:
52:b5:95:13:fe:dd:29:c8:df:95:a8:a2:f3:ff:0e:4d:bf:a1:
02:81:91:23:8b:6a:e8:79:67:7a:9c:45:8e:83:24:38:65:59:
99:80:f6:d8:5e:70:a1:44:52:24:e3:c0:f9:b0:ad:06:42:b4:
8e:72:86:7f:57:93:97:11:33:49:03:bc:2d:30:ec:c0:3b:21:
7f:e9:b3:de
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAZyKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMDY0NTE0WhcNMjUxMDA0MDY0NTE0WjAYMRYw
FAYDVQQDEw02OGI3ZTQwMC02NDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyyEF3TbiFDxtwn42dmoCIs6kQaOJdRhYYT25nENwYjOlPXDQYsaJPPY3
vbiRnHXysTft3mztYpURs+qPqWrqxDgK8F0O8mF9bM5gMh32/JHH5B8+yElsP4HR
BVmU1v7wcjz/9AbDBQ4U6BHmuhsKtYNPTYhJmX29HEIVmVdrlkxhzWwbEAF/gby2
YvAMLTnmAxAoVWEiYtWRkydKyvME+F6qybzRAaj+crmiD5oQNVJJS3qqVPsj604l
TYcovQ2g3+QyRthWPTJpyzvhmNq1J3cCO9sa1iij35ehg2PArfCd6Hc5JNfi4BnO
a+vMUyyAr3BrHtatv8A6i/RqeftlwQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKoD
hFRROr+o6MbKeREe8pKR/xFpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RUE1QTYwQTg4OTExMUYwOUVGMDdCQThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmsYIAwQBmsa8AwQAmsiX
MA0GCSqGSIb3DQEBCwUAA4IBAQBunW+lvOtU9++YC8FHJFoXzqSPWcgPUKov+bNa
in6hLiUgijXYMS7ffsP2umBiKGX3EtECGx519CGBr+hHox9lV1cd3vESJp6Xw9fz
TpY1SW3zJw2LLx5MbLUUOoNS5CENWasIxnAbSaC8NExHGWmqI9XYanLtvLbqACHc
3T/9R+I6EaO+Aw+lXnCJymW1ho4stRoGStYEBFNcEfNPFztSgfk+yVZOaS8ONE7z
FKAzOAYpRtZStZUT/t0pyN+VqKLz/w5Nv6ECgZEji2roeWd6nEWOgyQ4ZVmZgPbY
XnChRFIk48D5sK0GQrSOcoZ/V5OXETNJA7wtMOzAOyF/6bPe
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:53:53 2025 by rpki-client