Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7181EEE558011F0AF4EC4F4DAE4EC9C.roa
File: C7181EEE558011F0AF4EC4F4DAE4EC9C.roa (raw, json)
Hash identifier: 05NYUK+4tNaASXBh06ZdBPhNdDP9zYUWRNYp0SOlm/E=
Subject key identifier: ED:5A:5A:C1:44:2C:EC:1A:4E:82:F6:1A:C2:91:5C:26:0A:97:50:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018973
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7181EEE558011F0AF4EC4F4DAE4EC9C.roa
Signing time: Mon 30 Jun 2025 07:06:44 +0000
ROA not before: Mon 30 Jun 2025 07:06:39 +0000
ROA not after: Fri 04 Jul 2025 07:06:39 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100723 (0x18973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 07:06:39 2025 GMT
Not After : Jul 4 07:06:39 2025 GMT
Subject: CN=68623784-eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:26:c6:e8:79:e1:a2:7d:69:37:1e:36:21:
f1:25:98:ff:76:53:67:88:39:1e:23:d5:40:0a:5a:
57:d7:5a:3b:16:ef:54:f1:10:39:ff:9d:ad:e0:22:
77:61:1e:ec:e3:66:9c:68:b1:df:3d:7f:8a:fb:43:
ec:81:56:97:93:e4:58:60:ad:3b:ce:24:fc:4b:bf:
95:9c:99:e6:8f:af:39:00:77:b8:03:c9:d6:68:43:
7f:6b:12:4e:a7:d9:b2:00:0e:34:a2:fa:32:84:e3:
95:58:77:74:3f:ad:1f:06:74:b6:cb:31:92:9f:5a:
1c:15:cc:f6:70:76:1b:bc:8c:e5:ac:0d:a5:a9:59:
de:e5:54:4e:34:b1:a6:82:69:98:b3:3f:68:c6:38:
c8:2c:7c:be:df:85:d1:54:c4:04:d3:4c:6a:f9:7c:
8e:7c:4f:23:2d:3a:da:90:3a:23:ee:2e:9f:d7:9a:
5c:c6:c9:ba:c9:cd:de:8f:d2:6b:bc:e6:49:4d:ca:
0f:37:cd:15:f1:fa:3e:b9:68:8d:6d:e5:01:9f:24:
49:48:e5:46:4e:e8:af:70:77:62:92:56:5e:98:9f:
b6:f0:e4:d2:63:c6:a4:4e:1e:01:39:35:eb:5e:c1:
cc:64:b4:35:0f:9b:b3:41:10:0f:18:d5:53:f7:d1:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5A:5A:C1:44:2C:EC:1A:4E:82:F6:1A:C2:91:5C:26:0A:97:50:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7181EEE558011F0AF4EC4F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:24:70:b6:85:0a:20:2c:75:ea:e7:6c:8f:61:60:a1:7f:55:
a9:b3:dc:fc:be:9c:9c:39:93:20:4b:b8:89:53:4c:4d:53:2b:
c8:7b:da:c0:cc:50:57:e8:44:0d:29:6e:69:60:34:1a:c4:95:
8d:00:43:c6:87:3b:40:87:83:57:1f:97:1c:4d:e5:14:e6:0a:
7d:43:ac:cb:02:af:34:2b:36:c0:00:b9:97:a1:d3:cb:61:44:
a3:d3:69:64:bb:87:0f:0d:18:75:17:94:df:00:db:71:97:f9:
bc:80:39:ed:d5:c0:7a:9e:d6:01:e1:c6:f5:48:1c:62:fc:2b:
f8:89:4d:6e:6c:16:12:fe:18:ab:b4:79:1d:91:92:38:88:11:
d4:f8:0d:dc:af:6f:48:b4:49:03:8f:48:76:67:51:bb:23:2c:
ba:62:c5:66:78:8e:33:c4:13:21:ce:50:61:6d:56:fb:c1:46:
80:50:63:5c:bf:7a:49:cb:fa:06:a1:f6:fb:4c:88:c0:4e:a8:
96:b4:af:2f:cb:1a:29:61:78:32:e0:9c:f0:21:b5:c9:f3:c6:
e5:82:b0:bc:55:36:ad:31:dc:84:9f:ab:85:ce:f0:d6:9a:ba:
9b:0a:ea:60:45:20:35:a9:57:6b:a5:e8:32:3d:d2:a4:66:a0:
d3:ee:30:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYlzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjMwMDcwNjM5WhcNMjUwNzA0MDcwNjM5WjAYMRYw
FAYDVQQDEw02ODYyMzc4NC1lZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwcImxuh54aJ9aTceNiHxJZj/dlNniDkeI9VAClpX11o7Fu9U8RA5/52t
4CJ3YR7s42acaLHfPX+K+0PsgVaXk+RYYK07ziT8S7+VnJnmj685AHe4A8nWaEN/
axJOp9myAA40ovoyhOOVWHd0P60fBnS2yzGSn1ocFcz2cHYbvIzlrA2lqVne5VRO
NLGmgmmYsz9oxjjILHy+34XRVMQE00xq+XyOfE8jLTrakDoj7i6f15pcxsm6yc3e
j9JrvOZJTcoPN80V8fo+uWiNbeUBnyRJSOVGTuivcHdiklZemJ+28OTSY8akTh4B
OTXrXsHMZLQ1D5uzQRAPGNVT99FA8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO1a
WsFELOwaToL2GsKRXCYKl1ABMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNzE4MUVFRTU1ODAxMUYwQUY0RUM0RjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsUIMA0GCSqGSIb3DQEB
CwUAA4IBAQCPJHC2hQogLHXq52yPYWChf1Wps9z8vpycOZMgS7iJU0xNUyvIe9rA
zFBX6EQNKW5pYDQaxJWNAEPGhztAh4NXH5ccTeUU5gp9Q6zLAq80KzbAALmXodPL
YUSj02lku4cPDRh1F5TfANtxl/m8gDnt1cB6ntYB4cb1SBxi/Cv4iU1ubBYS/hir
tHkdkZI4iBHU+A3cr29ItEkDj0h2Z1G7Iyy6YsVmeI4zxBMhzlBhbVb7wUaAUGNc
v3pJy/oGofb7TIjATqiWtK8vyxopYXgy4JzwIbXJ88blgrC8VTatMdyEn6uFzvDW
mrqbCupgRSA1qVdrpegyPdKkZqDT7jAF
-----END CERTIFICATE-----
Generated at Wed Jul 2 10:51:05 2025 by rpki-client