Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB601864840E11F0BE7F01C0DAE4EC9C.roa
File: CB601864840E11F0BE7F01C0DAE4EC9C.roa (raw, json)
Hash identifier: gdbfkGatoHKn3jstwTX/cL1rY0Gwz56ZkI3NkFgR0hU=
Subject key identifier: C2:DE:41:0F:A5:09:7B:CF:F7:17:C7:B5:CC:4E:61:7D:63:F1:C4:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB601864840E11F0BE7F01C0DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 12:59:13 +0000
ROA not before: Thu 28 Aug 2025 12:59:08 +0000
ROA not after: Tue 30 Sep 2025 12:59:08 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104890 (0x199ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 12:59:08 2025 GMT
Not After : Sep 30 12:59:08 2025 GMT
Subject: CN=68b052a1-4805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:39:8d:24:d0:b6:98:9c:d8:c9:a1:8a:d6:
70:e9:ff:3d:f7:4f:2c:71:19:17:3e:c8:e0:e7:4e:
be:e8:ee:0d:6d:df:5e:1d:3a:18:b3:22:06:a1:09:
71:be:cb:82:82:aa:8f:54:40:f5:5d:e1:8c:4d:28:
03:02:4c:38:d0:da:c0:94:6e:67:55:8d:af:c5:0f:
d5:dd:0c:a9:b8:20:08:50:65:f0:a0:25:fb:fd:d7:
9b:f4:53:f3:59:3a:a4:f7:8f:d7:b9:bd:80:86:eb:
42:9e:d0:58:2d:6f:1b:19:dd:38:3e:72:89:46:ff:
dc:4c:de:66:8b:c3:7b:59:6a:af:9d:05:a2:72:63:
4a:1a:00:b0:1a:fb:8f:88:5c:c9:45:d5:dd:af:c9:
e4:2d:00:bd:7b:d2:3c:75:1a:53:34:d3:73:20:57:
5f:08:64:1d:e1:5e:2a:3a:54:7f:83:e0:36:60:f4:
55:42:af:4f:e7:b2:34:9a:41:09:e8:fa:09:c9:11:
8f:fb:39:0c:19:18:32:78:8d:0f:b8:f2:10:66:62:
0c:3c:2e:0d:ae:2d:b7:ef:01:35:fc:ff:c7:d5:33:
b9:b3:e8:0d:67:a6:71:a4:91:c0:b3:32:a6:fe:03:
38:ab:07:e0:c5:35:65:54:98:d2:67:a9:12:04:89:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:41:0F:A5:09:7B:CF:F7:17:C7:B5:CC:4E:61:7D:63:F1:C4:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB601864840E11F0BE7F01C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:0f:a0:6a:32:91:e8:6a:83:00:49:2a:d6:46:22:62:b5:9c:
35:99:1e:2f:d6:38:04:2e:b9:d8:57:4f:88:fe:67:20:1a:f1:
ca:1b:18:0e:78:11:9e:34:42:42:a4:83:f4:67:c4:8a:25:7e:
3b:fc:6a:fe:71:3f:ca:ab:29:7e:ea:65:7a:ec:da:56:1b:74:
bc:07:f9:da:cc:6a:95:e4:84:3b:52:16:85:38:31:7e:0a:a8:
41:8a:b2:76:c7:c9:0e:2e:c3:b5:cf:3b:7a:d6:9b:ef:8a:db:
0b:5f:32:19:cb:18:06:d7:da:31:46:eb:bc:bf:52:0b:bb:2e:
aa:55:35:aa:1e:aa:fc:4c:22:52:08:b3:3b:fc:31:5b:53:04:
11:ff:9e:7b:f9:2a:85:aa:b4:00:1e:c4:11:51:d1:62:1b:15:
62:6c:02:83:8e:a8:f0:88:8c:5a:ed:54:ee:a2:0c:af:6a:54:
89:1e:17:55:06:95:f3:f2:ed:5f:9b:f6:77:0d:d8:7d:83:c0:
05:c2:35:eb:32:9d:92:dc:ce:d0:39:19:29:2c:e5:58:af:4b:
bd:e3:f4:84:4b:46:74:fe:43:42:43:91:df:a2:08:3a:04:e2:
c7:10:9e:fe:92:63:b0:af:3b:ef:99:cd:c3:e8:81:88:40:8f:
9b:db:65:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZm6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI4MTI1OTA4WhcNMjUwOTMwMTI1OTA4WjAYMRYw
FAYDVQQDEw02OGIwNTJhMS00ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr/U5jSTQtpic2MmhitZw6f89908scRkXPsjg506+6O4Nbd9eHToYsyIG
oQlxvsuCgqqPVED1XeGMTSgDAkw40NrAlG5nVY2vxQ/V3QypuCAIUGXwoCX7/deb
9FPzWTqk94/Xub2AhutCntBYLW8bGd04PnKJRv/cTN5mi8N7WWqvnQWicmNKGgCw
GvuPiFzJRdXdr8nkLQC9e9I8dRpTNNNzIFdfCGQd4V4qOlR/g+A2YPRVQq9P57I0
mkEJ6PoJyRGP+zkMGRgyeI0PuPIQZmIMPC4Nri237wE1/P/H1TO5s+gNZ6ZxpJHA
szKm/gM4qwfgxTVlVJjSZ6kSBIkCQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMLe
QQ+lCXvP9xfHtcxOYX1j8cSiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjYwMTg2NDg0MEUxMUYwQkU3RjAxQzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGms6AMA0GCSqGSIb3DQEB
CwUAA4IBAQCLD6BqMpHoaoMASSrWRiJitZw1mR4v1jgELrnYV0+I/mcgGvHKGxgO
eBGeNEJCpIP0Z8SKJX47/Gr+cT/Kqyl+6mV67NpWG3S8B/nazGqV5IQ7UhaFODF+
CqhBirJ2x8kOLsO1zzt61pvvitsLXzIZyxgG19oxRuu8v1ILuy6qVTWqHqr8TCJS
CLM7/DFbUwQR/557+SqFqrQAHsQRUdFiGxVibAKDjqjwiIxa7VTuogyvalSJHhdV
BpXz8u1fm/Z3Ddh9g8AFwjXrMp2S3M7QORkpLOVYr0u94/SES0Z0/kNCQ5Hfogg6
BOLHEJ7+kmOwrzvvmc3D6IGIQI+b22WS
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:32 2025 by rpki-client