Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DDAB5687F711F0A12153C7DAE4EC9C.roa
File: D6DDAB5687F711F0A12153C7DAE4EC9C.roa (raw, json)
Hash identifier: U0yEHLpRbpV+Jop6MusmjEY8tdOa+KfvM12FlLrpwLo=
Subject key identifier: 14:A5:B7:EE:A0:2C:A5:05:BB:C2:02:A2:37:32:26:AB:74:F4:06:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DDAB5687F711F0A12153C7DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 12:24:58 +0000
ROA not before: Tue 02 Sep 2025 12:24:53 +0000
ROA not after: Fri 10 Oct 2025 12:24:53 +0000
asID: 141159
IP address blocks: 154.94.224.0/24 maxlen: 24
154.94.225.0/24 maxlen: 24
154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105516 (0x19c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 12:24:53 2025 GMT
Not After : Oct 10 12:24:53 2025 GMT
Subject: CN=68b6e21a-07e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:46:35:2e:ee:90:47:cc:7e:21:01:22:dc:
42:4f:21:f1:06:41:56:22:e9:ff:ce:1d:d4:bc:a3:
cd:63:92:4c:7a:65:15:bd:54:57:4e:f3:7c:ab:e2:
1d:8e:46:1e:e7:06:6d:fa:63:4d:44:a5:a4:84:95:
cc:be:a3:31:2d:94:58:a6:d4:ba:a8:7c:94:20:00:
22:fa:46:7b:89:f4:9a:2e:aa:ee:48:de:9c:c7:89:
33:0b:fa:b1:17:f8:64:26:6b:69:cc:3d:9d:32:87:
cc:4b:d0:9b:d5:7a:98:43:c1:72:98:86:70:c1:b3:
e3:e7:87:a3:84:40:4b:80:09:ad:65:51:48:72:20:
74:12:4e:f7:58:1d:8c:b8:31:39:5f:bc:c3:d9:ed:
3b:49:6d:42:37:18:a3:fa:65:4b:aa:92:86:1f:8e:
48:b0:4d:c0:0a:87:08:c3:b7:ae:d8:30:00:ec:a1:
4d:63:a5:a1:fe:1f:43:9b:b5:76:eb:7e:87:b7:39:
b4:a0:3b:8d:47:79:c6:f0:69:09:80:43:d1:23:08:
c6:3e:75:11:98:eb:7c:36:b8:85:e8:30:6b:06:43:
cf:3c:af:b7:20:dc:92:c8:7c:c0:39:9b:d5:7e:0c:
2a:29:42:2c:bf:fc:12:d8:29:67:60:23:96:09:8b:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:B7:EE:A0:2C:A5:05:BB:C2:02:A2:37:32:26:AB:74:F4:06:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DDAB5687F711F0A12153C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/23
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:b6:eb:75:64:46:91:b0:98:5d:3b:64:06:99:61:38:50:95:
db:24:54:ac:88:ed:c4:cf:fd:b4:43:8f:1d:62:27:d7:9f:9f:
9f:33:ba:4e:0e:98:01:b3:ba:f4:ab:cf:3f:c8:44:91:bf:bf:
17:c2:ea:8c:b8:92:37:93:9d:e6:66:da:bc:0a:3d:5d:c6:d7:
27:a9:1b:4c:d9:a0:74:e5:15:c4:3c:e0:6b:dd:a0:e2:d4:f4:
34:74:7a:8f:23:35:c4:9a:aa:22:b7:19:9d:16:03:7e:bb:5b:
19:d7:73:19:d0:49:ce:41:26:5a:72:18:94:6c:99:a7:ca:a9:
a8:92:e3:b9:e5:98:c0:a3:c2:bc:91:4c:fe:bb:73:92:09:31:
f3:a2:7a:ab:26:29:20:24:5b:81:e7:ef:fb:bc:d2:89:81:b6:
7e:cf:b2:b0:06:54:ef:0e:b4:01:bf:ce:1a:c0:a8:60:37:e0:
4e:1d:b7:fe:db:1e:01:a0:75:9a:2d:51:22:5d:49:ef:0b:23:
83:33:54:2d:36:0c:04:d8:75:d1:46:a3:be:e1:58:4c:8b:49:
5c:fb:ed:96:be:a4:24:67:c8:36:96:98:4e:97:24:19:f9:ae:
d6:49:40:6a:95:9b:7e:59:b5:7e:40:91:9f:f0:f4:87:77:72:
72:97:0c:4e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZwsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAyMTIyNDUzWhcNMjUxMDEwMTIyNDUzWjAYMRYw
FAYDVQQDEw02OGI2ZTIxYS0wN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyKJGNS7ukEfMfiEBItxCTyHxBkFWIun/zh3UvKPNY5JMemUVvVRXTvN8
q+IdjkYe5wZt+mNNRKWkhJXMvqMxLZRYptS6qHyUIAAi+kZ7ifSaLqruSN6cx4kz
C/qxF/hkJmtpzD2dMofMS9Cb1XqYQ8FymIZwwbPj54ejhEBLgAmtZVFIciB0Ek73
WB2MuDE5X7zD2e07SW1CNxij+mVLqpKGH45IsE3ACocIw7eu2DAA7KFNY6Wh/h9D
m7V2636Htzm0oDuNR3nG8GkJgEPRIwjGPnURmOt8NriF6DBrBkPPPK+3INySyHzA
OZvVfgwqKUIsv/wS2ClnYCOWCYvAOwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBSl
t+6gLKUFu8ICojcyJqt09AZsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENkREQUI1Njg3RjcxMUYwQTEyMTUzQzdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBml7gAwQCml7kMA0GCSqG
SIb3DQEBCwUAA4IBAQBPtut1ZEaRsJhdO2QGmWE4UJXbJFSsiO3Ez/20Q48dYifX
n5+fM7pODpgBs7r0q88/yESRv78XwuqMuJI3k53mZtq8Cj1dxtcnqRtM2aB05RXE
POBr3aDi1PQ0dHqPIzXEmqoitxmdFgN+u1sZ13MZ0EnOQSZachiUbJmnyqmokuO5
5ZjAo8K8kUz+u3OSCTHzonqrJikgJFuB5+/7vNKJgbZ+z7KwBlTvDrQBv84awKhg
N+BOHbf+2x4BoHWaLVEiXUnvCyODM1QtNgwE2HXRRqO+4VhMi0lc++2WvqQkZ8g2
lphOlyQZ+a7WSUBqlZt+WbV+QJGf8PSHd3JylwxO
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:34 2025 by rpki-client