Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBB09354599A11F0A4FD2DA6DAE4EC9C.roa
File: DBB09354599A11F0A4FD2DA6DAE4EC9C.roa (raw, json)
Hash identifier: 2r17CzLvA0C9SnzE00sW4CZSJYwEyXydRN81pAZjnNg=
Subject key identifier: A0:A5:37:61:8A:DC:57:0A:3C:C7:FD:88:A9:D5:F3:8A:3F:7C:5C:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBB09354599A11F0A4FD2DA6DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 12:23:30 +0000
ROA not before: Sat 05 Jul 2025 12:23:24 +0000
ROA not after: Fri 15 Aug 2025 12:23:24 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101108 (0x18af4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 12:23:24 2025 GMT
Not After : Aug 15 12:23:24 2025 GMT
Subject: CN=68691942-4c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:10:9f:94:e2:32:fb:8a:46:46:ea:d3:39:
49:20:7f:e7:d8:d6:36:15:97:8c:98:8f:96:63:29:
f2:64:d2:d6:7a:f3:f1:8e:14:da:9c:cb:e7:78:bf:
de:5a:9d:46:31:51:61:4c:a2:2b:b9:fd:44:a1:c5:
69:0e:e9:40:32:d0:9d:b6:26:97:4a:b9:18:37:0f:
3c:65:3b:15:de:f5:68:37:99:30:14:a0:c8:c7:85:
d1:fd:66:94:a7:8d:fe:d1:db:b5:6e:6d:57:b7:bd:
bd:f6:4f:96:40:98:ee:f9:71:3d:ba:7d:5e:94:76:
f0:08:e8:91:c5:53:45:25:de:6f:df:9c:8a:6c:21:
ac:ec:d5:19:74:cc:ad:32:6b:9f:22:f6:fc:ac:66:
e4:c1:e5:3d:4c:f4:6e:f8:f0:01:b5:86:03:37:23:
7d:33:40:03:9f:c9:23:a5:17:5d:31:ba:0a:c9:0e:
51:24:9f:ce:fa:fb:02:9d:a0:a8:9d:f2:a3:3d:15:
1e:b0:b6:55:17:a5:5c:3f:04:a9:dc:83:7b:09:f6:
86:09:cf:14:d3:d9:78:1a:3b:56:e0:37:f0:0e:83:
06:4a:54:05:85:81:19:85:16:18:fd:2a:b8:be:80:
ae:1a:65:64:f3:4a:ff:77:b3:d8:4d:30:40:03:9f:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:37:61:8A:DC:57:0A:3C:C7:FD:88:A9:D5:F3:8A:3F:7C:5C:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBB09354599A11F0A4FD2DA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:eb:c1:6f:28:ee:14:d4:5e:ad:df:d0:f2:cb:d7:c6:3e:8e:
a6:ed:45:b9:a9:e9:bd:19:86:eb:21:61:e7:fb:08:1e:4e:f0:
1c:87:51:c8:85:78:99:79:93:f6:e6:74:62:4d:f2:49:72:9f:
89:19:3c:79:d2:91:e0:12:e3:05:e7:f4:83:06:9e:93:90:4e:
9d:d3:bc:d0:b0:0d:01:be:c5:2f:79:cc:8b:18:4b:90:04:75:
13:a9:97:99:d2:c4:c6:2b:59:71:aa:d2:7e:98:cc:0b:44:34:
96:ec:38:62:cf:d2:c0:34:17:81:5e:49:de:17:6e:b4:83:f5:
eb:41:82:06:af:35:4b:2e:70:7e:24:72:cb:58:ae:ce:50:fa:
9e:63:ce:82:0c:7b:4d:bd:87:e4:2c:96:a4:bb:de:bd:02:9b:
5c:02:d9:d6:0f:5a:e7:cb:eb:40:b5:8f:b0:32:91:2c:10:e7:
6a:a1:b8:4e:3a:a3:16:13:3e:8a:bc:55:81:53:b1:88:f4:10:
6b:f1:0e:eb:e5:fa:4b:21:cb:34:ea:a2:0b:f9:3c:d6:ba:5e:
ba:6b:2c:8c:4b:1c:34:a7:b3:53:cc:13:05:41:4c:d0:96:af:
2c:e4:9e:3f:8d:27:60:9b:33:1d:f9:46:85:f9:80:59:59:ea:
52:c7:93:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYr0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTIyMzI0WhcNMjUwODE1MTIyMzI0WjAYMRYw
FAYDVQQDEw02ODY5MTk0Mi00YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp8oQn5TiMvuKRkbq0zlJIH/n2NY2FZeMmI+WYynyZNLWevPxjhTanMvn
eL/eWp1GMVFhTKIruf1EocVpDulAMtCdtiaXSrkYNw88ZTsV3vVoN5kwFKDIx4XR
/WaUp43+0du1bm1Xt7299k+WQJju+XE9un1elHbwCOiRxVNFJd5v35yKbCGs7NUZ
dMytMmufIvb8rGbkweU9TPRu+PABtYYDNyN9M0ADn8kjpRddMboKyQ5RJJ/O+vsC
naConfKjPRUesLZVF6VcPwSp3IN7CfaGCc8U09l4GjtW4DfwDoMGSlQFhYEZhRYY
/Sq4voCuGmVk80r/d7PYTTBAA59HLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKCl
N2GK3FcKPMf9iKnV84o/fFxtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQkIwOTM1NDU5OUExMUYwQTRGRDJEQTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI5MA0GCSqGSIb3DQEB
CwUAA4IBAQCx68FvKO4U1F6t39Dyy9fGPo6m7UW5qem9GYbrIWHn+wgeTvAch1HI
hXiZeZP25nRiTfJJcp+JGTx50pHgEuMF5/SDBp6TkE6d07zQsA0BvsUvecyLGEuQ
BHUTqZeZ0sTGK1lxqtJ+mMwLRDSW7Dhiz9LANBeBXkneF260g/XrQYIGrzVLLnB+
JHLLWK7OUPqeY86CDHtNvYfkLJaku969AptcAtnWD1rny+tAtY+wMpEsEOdqobhO
OqMWEz6KvFWBU7GI9BBr8Q7r5fpLIcs06qIL+TzWul66ayyMSxw0p7NTzBMFQUzQ
lq8s5J4/jSdgmzMd+UaF+YBZWepSx5MN
-----END CERTIFICATE-----
Generated at Mon Jul 7 03:44:28 2025 by rpki-client