Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC754FC896B11F0A7A068B6DAE4EC9C.roa
File: DCC754FC896B11F0A7A068B6DAE4EC9C.roa (raw, json)
Hash identifier: Nt797WtjO1tYbdOQZn4Iu2doyL8aUc+rqSs6VgCkaBY=
Subject key identifier: 57:0F:A6:3B:0D:2C:48:8E:03:F2:FE:47:B5:9D:59:81:AA:EC:07:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC754FC896B11F0A7A068B6DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 08:48:01 +0000
ROA not before: Thu 04 Sep 2025 08:47:56 +0000
ROA not after: Wed 15 Oct 2025 08:47:56 +0000
asID: 396356
IP address blocks: 154.93.8.0/21 maxlen: 24
154.95.48.0/22 maxlen: 24
154.95.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105860 (0x19d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 08:47:56 2025 GMT
Not After : Oct 15 08:47:56 2025 GMT
Subject: CN=68b95241-6650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:40:39:f7:e4:9a:6a:74:c0:22:aa:92:4e:
a0:bf:6b:68:55:d4:f1:56:42:d1:5e:27:d9:2a:2b:
a3:45:b8:18:22:d0:9f:68:b1:6b:2f:4f:5a:6a:db:
43:52:f9:68:0b:92:bf:72:ee:3f:9a:db:81:ab:10:
91:52:86:d3:62:67:f6:ae:54:0a:0e:54:d0:1d:ba:
e8:85:77:57:54:c6:82:c6:c6:31:9f:3d:5b:99:80:
62:06:f1:44:40:67:13:8f:3a:42:75:ec:79:94:df:
ea:ff:1c:c2:3b:71:a1:9f:2e:61:b3:8b:75:32:fd:
56:b8:12:07:d7:f2:eb:a7:35:19:14:44:be:c1:27:
a4:8b:56:38:7c:3f:d8:dc:27:8f:79:ea:04:36:80:
67:72:06:6e:fe:c7:a2:5c:c2:bf:b4:bd:06:be:c2:
58:41:57:59:e5:8c:28:46:77:61:11:70:c1:08:9c:
5e:8f:4b:d1:d7:cc:e2:a3:35:f4:54:14:05:1c:87:
5c:39:d5:45:7f:a5:a7:95:ee:94:91:32:75:3c:d4:
1a:24:44:0d:73:7f:a2:05:17:69:eb:72:fe:f8:cb:
2e:2c:d0:56:6d:84:c6:e2:cf:85:5d:61:08:7d:34:
64:a6:7d:96:ce:27:f6:85:43:86:d2:a5:d8:23:b6:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:A6:3B:0D:2C:48:8E:03:F2:FE:47:B5:9D:59:81:AA:EC:07:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC754FC896B11F0A7A068B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.8.0/21
154.95.48.0-154.95.52.255
Signature Algorithm: sha256WithRSAEncryption
48:ec:5c:8e:93:f4:33:a5:53:0d:d6:a4:bd:6d:19:b1:38:c1:
a0:05:b8:c2:a0:e7:47:66:ee:60:39:1d:64:bb:d5:05:09:b7:
14:76:84:ae:d1:d4:d3:a1:c9:18:71:26:11:d2:30:4e:c7:57:
55:83:5d:2b:20:be:4a:c3:7d:d2:5d:b3:c9:c4:d6:6f:08:b6:
16:47:6a:13:61:2f:de:7c:7e:0f:6d:88:76:28:bd:40:a5:79:
e2:3c:c9:06:ea:67:14:7c:22:a5:e8:0b:d9:f1:42:a5:c6:2e:
24:b9:45:c0:78:e8:fd:56:3e:8e:aa:06:4f:a9:14:31:4e:ee:
24:57:5e:36:3a:8a:e6:68:40:17:7d:24:d0:af:62:d5:c2:82:
e5:7a:3e:af:25:48:45:c4:96:d6:bb:50:1a:6b:c4:bc:bd:38:
93:e0:e9:96:d5:67:ba:9e:d1:40:67:1b:df:8a:49:c9:25:b3:
49:b3:1e:29:fc:fe:42:65:78:1b:1a:dc:85:02:b2:ec:b8:d5:
2f:d3:63:45:5c:86:f1:75:3a:63:28:d7:5f:d7:4b:b5:0e:30:
75:71:c0:5f:19:61:f1:e7:c3:29:5d:b3:cf:25:1e:06:ff:f6:
cb:62:c9:06:10:e9:8c:1e:93:3c:ef:b1:50:fd:35:21:5b:8a:
cc:1f:47:a4
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAZ2EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA0MDg0NzU2WhcNMjUxMDE1MDg0NzU2WjAYMRYw
FAYDVQQDEw02OGI5NTI0MS02NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3RdAOffkmmp0wCKqkk6gv2toVdTxVkLRXifZKiujRbgYItCfaLFrL09a
attDUvloC5K/cu4/mtuBqxCRUobTYmf2rlQKDlTQHbrohXdXVMaCxsYxnz1bmYBi
BvFEQGcTjzpCdex5lN/q/xzCO3Ghny5hs4t1Mv1WuBIH1/LrpzUZFES+wSeki1Y4
fD/Y3CePeeoENoBncgZu/seiXMK/tL0GvsJYQVdZ5YwoRndhEXDBCJxej0vR18zi
ozX0VBQFHIdcOdVFf6Wnle6UkTJ1PNQaJEQNc3+iBRdp63L++MsuLNBWbYTG4s+F
XWEIfTRkpn2Wzif2hUOG0qXYI7bsNwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFFcP
pjsNLEiOA/L+R7WdWYGq7AceMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0M3NTRGQzg5NkIxMUYwQTdBMDY4QjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDml0IMAwDBASaXzADBACa
XzQwDQYJKoZIhvcNAQELBQADggEBAEjsXI6T9DOlUw3WpL1tGbE4waAFuMKg50dm
7mA5HWS71QUJtxR2hK7R1NOhyRhxJhHSME7HV1WDXSsgvkrDfdJds8nE1m8IthZH
ahNhL958fg9tiHYovUCleeI8yQbqZxR8IqXoC9nxQqXGLiS5RcB46P1WPo6qBk+p
FDFO7iRXXjY6iuZoQBd9JNCvYtXCguV6Pq8lSEXElta7UBprxLy9OJPg6ZbVZ7qe
0UBnG9+KSckls0mzHin8/kJleBsa3IUCsuy41S/TY0VchvF1OmMo11/XS7UOMHVx
wF8ZYfHnwylds88lHgb/9stiyQYQ6YwekzzvsVD9NSFbiswfR6Q=
-----END CERTIFICATE-----
Generated at Thu Sep 18 15:56:12 2025 by rpki-client