Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAD3E57C843D11F08564B4EEDAE4EC9C.roa
File: CAD3E57C843D11F08564B4EEDAE4EC9C.roa (raw, json)
Hash identifier: LEPItxEsDSWCgFtH/u1DdNdggToz/rX8jT5ByeUnZBw=
Subject key identifier: F3:AA:E9:0F:57:19:02:45:24:2A:F1:C1:B2:DF:BE:98:DA:92:D0:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019A1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAD3E57C843D11F08564B4EEDAE4EC9C.roa
Signing time: Thu 28 Aug 2025 18:35:38 +0000
ROA not before: Thu 28 Aug 2025 18:35:31 +0000
ROA not after: Mon 06 Oct 2025 18:35:31 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
154.213.7.0/24 maxlen: 24
154.222.248.0/24 maxlen: 24
154.222.249.0/24 maxlen: 24
154.222.250.0/24 maxlen: 24
154.222.251.0/24 maxlen: 24
154.222.253.0/24 maxlen: 24
154.222.254.0/24 maxlen: 24
154.222.255.0/24 maxlen: 24
154.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104988 (0x19a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 18:35:31 2025 GMT
Not After : Oct 6 18:35:31 2025 GMT
Subject: CN=68b0a17a-45c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:0d:98:c0:08:d0:10:75:b1:33:3e:89:4e:
aa:eb:90:3b:dc:86:7f:0f:89:83:68:c8:ce:05:cc:
26:db:18:e7:47:b2:67:ee:45:c3:03:5e:d4:a3:2d:
6e:4c:97:43:85:69:f9:a4:1e:28:0e:e7:b0:d2:bf:
d5:e7:16:15:86:1d:d0:b3:67:80:82:28:6c:a9:dd:
be:1b:6a:a5:5d:f1:87:53:83:dd:d8:2e:28:34:84:
a5:65:26:c2:39:13:ae:d9:5a:72:f8:9c:d0:ce:e2:
67:cc:0f:74:9c:9f:ee:02:c7:d7:bf:51:d6:ac:20:
bd:e5:0c:30:e0:de:d0:2e:78:3c:c1:7c:b5:8c:4e:
be:13:8a:a1:56:51:dd:b1:2c:89:ac:f0:fd:12:eb:
a3:07:65:1f:dd:f0:00:65:f1:aa:6d:ef:6f:97:9e:
06:99:52:a6:32:37:27:02:6a:bc:a9:90:d6:13:a3:
8a:de:62:bd:e6:8b:21:82:a5:e5:30:b4:7e:fc:5c:
2d:0f:5b:f8:32:7e:02:a1:88:33:39:e3:73:17:c6:
02:7a:d3:7f:e3:0f:8b:45:2f:a8:81:65:36:de:e8:
7b:da:5d:df:ad:8f:65:b0:86:57:33:de:16:2e:7b:
5f:e2:5a:88:a3:71:13:cd:2d:9c:49:5c:82:73:a3:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:E9:0F:57:19:02:45:24:2A:F1:C1:B2:DF:BE:98:DA:92:D0:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAD3E57C843D11F08564B4EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/23
154.222.248.0/22
154.222.253.0-154.222.255.255
154.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b8:fb:e7:a0:3c:24:ef:52:bf:e9:87:c4:89:78:0e:e0:b4:
5f:1f:42:b3:c0:02:10:b0:4f:6f:22:2f:06:12:7f:c0:cd:c2:
9d:5b:93:cf:f8:2c:40:97:1b:43:b7:1b:20:dc:e8:2a:c1:e8:
3d:ae:9f:65:f6:df:59:d5:57:8b:0b:6e:94:e6:48:05:3a:42:
21:be:85:c9:d2:64:de:6f:e2:1b:10:01:da:3a:3a:f0:62:22:
5c:a2:d0:03:2d:0a:c4:e6:c7:b5:c5:cf:a6:9a:9e:6b:b9:39:
b7:a7:82:49:41:6e:21:6f:9d:b2:5e:87:fb:ce:c8:89:6c:46:
63:d1:7a:fa:5a:c6:dd:75:3e:c9:00:48:bc:64:46:1a:65:81:
76:77:2b:f7:40:86:c5:ea:25:54:98:cf:2d:ed:4c:6e:63:83:
83:79:14:8d:d9:c4:2a:94:5b:da:7f:cc:5f:f2:4f:3c:d3:d5:
cb:d2:f8:c2:9b:92:d1:e7:3f:cd:4c:f1:c7:5c:83:de:65:04:
15:b2:69:91:b6:f8:d0:3f:08:c0:dd:b7:52:f4:0b:2e:df:df:
3a:d0:7d:94:55:74:51:67:1a:17:40:52:14:0f:08:03:cc:d2:
fb:35:a6:b7:93:60:70:49:81:d8:e1:d1:a5:a4:f6:08:4f:d7:
5c:6b:90:50
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAZocMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI4MTgzNTMxWhcNMjUxMDA2MTgzNTMxWjAYMRYw
FAYDVQQDEw02OGIwYTE3YS00NWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt58NmMAI0BB1sTM+iU6q65A73IZ/D4mDaMjOBcwm2xjnR7Jn7kXDA17U
oy1uTJdDhWn5pB4oDuew0r/V5xYVhh3Qs2eAgihsqd2+G2qlXfGHU4Pd2C4oNISl
ZSbCOROu2Vpy+JzQzuJnzA90nJ/uAsfXv1HWrCC95Qww4N7QLng8wXy1jE6+E4qh
VlHdsSyJrPD9EuujB2Uf3fAAZfGqbe9vl54GmVKmMjcnAmq8qZDWE6OK3mK95osh
gqXlMLR+/FwtD1v4Mn4CoYgzOeNzF8YCetN/4w+LRS+ogWU23uh72l3frY9lsIZX
M94WLntf4lqIo3ETzS2cSVyCc6PgXwIDAQABo4ICvjCCArowHQYDVR0OBBYEFPOq
6Q9XGQJFJCrxwbLfvpjaktDjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQUQzRTU3Qzg0M0QxMUYwODU2NEI0RUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQBmtUGAwQCmt74MAsDBACa
3v0DAwCa3gMEAJrfUDANBgkqhkiG9w0BAQsFAAOCAQEAEbj756A8JO9Sv+mHxIl4
DuC0Xx9Cs8ACELBPbyIvBhJ/wM3CnVuTz/gsQJcbQ7cbINzoKsHoPa6fZfbfWdVX
iwtulOZIBTpCIb6FydJk3m/iGxAB2jo68GIiXKLQAy0KxObHtcXPppqea7k5t6eC
SUFuIW+dsl6H+87IiWxGY9F6+lrG3XU+yQBIvGRGGmWBdncr90CGxeolVJjPLe1M
bmODg3kUjdnEKpRb2n/MX/JPPNPVy9L4wpuS0ec/zUzxx1yD3mUEFbJpkbb40D8I
wN23UvQLLt/fOtB9lFV0UWcaF0BSFA8IA8zS+zWmt5NgcEmB2OHRpaT2CE/XXGuQ
UA==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:40 2025 by rpki-client