Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D94126837C11F09B814D7BDAE4EC9C.roa
File: E0D94126837C11F09B814D7BDAE4EC9C.roa (raw, json)
Hash identifier: QuD7+0ldLtTpCb0YL0BRE8nk1gjk3IhTtZpJMUx5M18=
Subject key identifier: D5:9E:89:B7:2D:67:CF:C7:0C:92:BA:C3:07:06:58:97:19:33:74:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019903
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D94126837C11F09B814D7BDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 19:34:42 +0000
ROA not before: Wed 27 Aug 2025 19:34:38 +0000
ROA not after: Mon 03 Nov 2025 19:34:38 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104707 (0x19903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 19:34:38 2025 GMT
Not After : Nov 3 19:34:38 2025 GMT
Subject: CN=68af5dd2-45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:fd:d8:3c:1a:2c:4a:88:f4:54:2d:58:6c:
df:52:2c:81:d8:8c:7a:21:b3:b7:38:50:f5:7f:e3:
44:9f:65:4b:50:1e:2c:97:fa:a6:ab:91:f1:88:b4:
aa:a8:66:a5:9d:53:80:3a:8f:59:05:80:21:13:ff:
c9:8f:d6:37:9e:8a:1d:8c:a3:21:92:30:b1:32:90:
c1:03:30:82:cb:3a:18:b0:7f:e9:49:8d:41:9d:ad:
2d:50:f2:17:c8:3c:94:7d:b6:9a:bb:5a:44:e8:0b:
bd:2f:62:45:af:34:f5:19:ad:88:ef:38:cd:ee:02:
8c:52:65:2f:01:e6:02:d0:25:66:eb:f2:2b:2e:36:
b5:76:a5:75:54:a2:f6:4c:51:90:7d:55:5e:ad:a4:
a3:c1:a3:bd:b8:50:ee:34:51:1f:6f:13:3c:9a:6d:
a9:56:0d:d0:30:c3:3b:33:c2:ce:c7:97:ea:4e:ab:
d1:18:12:a1:44:13:fd:ae:b7:69:ed:2e:c9:ea:30:
41:01:b0:c0:14:50:33:9f:0b:a5:61:39:7b:6f:e8:
c4:52:13:3b:f7:2d:d0:8d:bb:94:63:33:3e:b0:cd:
a5:49:42:b1:1f:70:c6:3a:a2:6b:52:04:88:c3:55:
8e:28:6f:3c:4c:d7:c0:64:6c:10:69:79:27:7d:a0:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:89:B7:2D:67:CF:C7:0C:92:BA:C3:07:06:58:97:19:33:74:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D94126837C11F09B814D7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/23
Signature Algorithm: sha256WithRSAEncryption
72:b8:f9:b5:46:26:7d:f5:41:43:00:bf:9d:c5:e6:a5:93:48:
b1:05:c1:9e:b5:f8:50:b7:13:a8:5a:f2:b2:e6:b7:6d:3b:92:
2e:81:7b:f4:9a:0f:e2:31:01:22:39:5c:b3:de:c5:83:79:7c:
6d:16:23:25:c3:21:40:7f:9d:d6:f7:57:c4:04:9b:5b:4e:3b:
d8:0c:17:d0:a7:47:1e:06:72:e6:24:17:5e:dc:72:7a:8b:ad:
90:a3:6b:b6:06:52:e8:ad:a5:ef:00:91:74:ed:28:fb:c5:86:
e5:5d:0f:67:94:48:cf:e2:e4:1a:53:bf:ab:6f:95:7f:31:7a:
17:6a:e5:01:20:10:70:41:92:83:52:6d:8e:06:f7:45:12:ec:
ef:2e:fc:59:49:41:ad:2e:bd:d3:d8:e1:d8:e5:81:55:94:1c:
e2:e3:ec:37:c5:17:13:ee:86:9f:0d:81:dc:9f:0e:61:ab:26:
ad:6b:69:75:ca:52:28:f8:f3:20:86:d8:14:c0:86:92:99:ea:
76:cb:db:ca:f0:ef:f4:37:de:8b:33:4b:09:e0:d6:d6:15:ca:
3b:ef:7f:b1:88:66:6c:3e:71:76:4c:31:23:64:06:d2:47:3d:
69:5a:1e:02:78:aa:65:3d:66:70:37:4f:eb:22:66:33:17:d2:
9e:a4:81:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZkDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI3MTkzNDM4WhcNMjUxMTAzMTkzNDM4WjAYMRYw
FAYDVQQDEw02OGFmNWRkMi00NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArZH92DwaLEqI9FQtWGzfUiyB2Ix6IbO3OFD1f+NEn2VLUB4sl/qmq5Hx
iLSqqGalnVOAOo9ZBYAhE//Jj9Y3noodjKMhkjCxMpDBAzCCyzoYsH/pSY1Bna0t
UPIXyDyUfbaau1pE6Au9L2JFrzT1Ga2I7zjN7gKMUmUvAeYC0CVm6/IrLja1dqV1
VKL2TFGQfVVeraSjwaO9uFDuNFEfbxM8mm2pVg3QMMM7M8LOx5fqTqvRGBKhRBP9
rrdp7S7J6jBBAbDAFFAznwulYTl7b+jEUhM79y3QjbuUYzM+sM2lSUKxH3DGOqJr
UgSIw1WOKG88TNfAZGwQaXknfaDEqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNWe
ibctZ8/HDJK6wwcGWJcZM3SjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMEQ5NDEyNjgzN0MxMUYwOUI4MTREN0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml5eMA0GCSqGSIb3DQEB
CwUAA4IBAQByuPm1RiZ99UFDAL+dxealk0ixBcGetfhQtxOoWvKy5rdtO5IugXv0
mg/iMQEiOVyz3sWDeXxtFiMlwyFAf53W91fEBJtbTjvYDBfQp0ceBnLmJBde3HJ6
i62Qo2u2BlLoraXvAJF07Sj7xYblXQ9nlEjP4uQaU7+rb5V/MXoXauUBIBBwQZKD
Um2OBvdFEuzvLvxZSUGtLr3T2OHY5YFVlBzi4+w3xRcT7oafDYHcnw5hqyata2l1
ylIo+PMghtgUwIaSmep2y9vK8O/0N96LM0sJ4NbWFco773+xiGZsPnF2TDEjZAbS
Rz1pWh4CeKplPWZwN0/rImYzF9KepIEK
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:03 2025 by rpki-client