Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A4B410831711F093F7B9EFDAE4EC9C.roa
File: E6A4B410831711F093F7B9EFDAE4EC9C.roa (raw, json)
Hash identifier: j6GlQD2dWTSzkroF4MoK/CLmmmylfGNoWWs+DG5tib0=
Subject key identifier: 39:19:18:C5:0E:82:A6:E0:8B:16:A9:C8:DE:0E:83:40:FE:D2:51:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019855
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A4B410831711F093F7B9EFDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:31:53 +0000
ROA not before: Wed 27 Aug 2025 07:31:47 +0000
ROA not after: Sat 27 Sep 2025 07:31:47 +0000
asID: 3257
IP address blocks: 154.206.240.0/21 maxlen: 24
154.206.248.0/21 maxlen: 24
154.208.64.0/21 maxlen: 24
154.208.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104533 (0x19855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 07:31:47 2025 GMT
Not After : Sep 27 07:31:47 2025 GMT
Subject: CN=68aeb469-e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:2b:0e:8e:de:2c:6e:2e:d3:12:4d:ef:c5:
27:f9:f4:81:35:11:48:bf:82:2f:83:a9:bc:c1:84:
62:00:90:80:02:31:69:07:6e:cc:f4:db:91:59:5d:
39:5b:59:12:ab:c6:94:e5:df:50:00:2e:fd:22:db:
2c:39:88:52:b5:dd:ea:e6:07:4a:ba:ee:d5:d6:c5:
8a:26:c6:f2:da:b0:c7:83:f6:52:3c:fb:55:6e:86:
da:a2:8a:75:f2:5c:10:6a:03:dd:42:7d:e9:8e:82:
4a:b5:2f:61:77:5a:08:3e:28:c0:54:35:53:1d:d5:
39:7b:a6:c8:0b:ec:90:59:9a:58:71:cc:79:35:92:
e6:fb:b5:68:44:12:7d:13:43:66:65:4d:12:36:e7:
b7:a9:27:94:3b:b6:b1:fa:ff:0d:07:cc:82:13:83:
fa:dc:e5:28:c2:4b:47:a1:72:23:f9:5d:9c:b2:5e:
b3:1b:57:f4:9b:d2:cf:e9:62:27:e8:76:c4:c2:77:
a6:f5:36:bd:ac:8d:3e:bc:90:d1:89:af:c9:5e:de:
a8:ce:7b:d1:59:06:1f:6c:e7:bb:9b:75:94:77:3c:
45:7d:e5:b3:5a:29:5b:52:d3:02:45:76:6c:94:26:
e3:d8:a2:ba:f8:ff:c8:3f:33:18:ce:b2:f2:c8:c1:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:18:C5:0E:82:A6:E0:8B:16:A9:C8:DE:0E:83:40:FE:D2:51:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A4B410831711F093F7B9EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/20
154.208.64.0/21
154.208.112.0/21
Signature Algorithm: sha256WithRSAEncryption
15:8e:fd:6d:89:43:94:7f:c1:7d:55:e6:8e:d3:47:60:23:63:
97:ed:54:46:b6:48:c9:0e:8b:f0:ce:b2:b4:f9:8c:b0:5a:01:
8f:9d:41:2f:87:97:b7:ce:50:57:f6:2b:56:64:4d:ad:1a:92:
f9:b9:58:9d:7a:d8:ce:3a:6f:db:66:56:d1:3b:3c:78:74:42:
9e:76:ec:47:44:f5:7a:73:f8:a0:6f:44:5d:54:90:ea:6a:d0:
d8:f9:83:e7:16:24:56:31:78:be:5f:f1:14:4b:89:35:ed:fd:
40:72:75:fe:dd:a5:89:01:1d:6d:00:8a:16:a6:32:2a:53:58:
ff:ad:1c:a5:dc:d9:41:37:f1:c1:0c:9c:a7:36:7e:e0:b6:01:
83:c6:9f:1b:cc:43:9b:4d:13:f6:18:98:4f:9f:73:5e:dd:89:
b7:5a:9c:79:d4:02:bd:8c:eb:32:f5:85:52:1b:cd:33:3a:11:
c7:1a:31:e3:a1:c3:90:ea:ae:16:2f:71:c2:8d:80:4a:af:22:
b2:fc:c8:25:35:45:48:3b:d3:4a:e0:f6:bb:d6:da:dd:d3:a6:
99:20:aa:0b:7c:16:ca:57:bb:a8:c7:dd:ce:a1:44:b0:30:04:
2a:ee:d2:1e:da:c1:ee:92:9c:f8:27:37:e6:30:03:70:ac:58:
33:eb:2c:27
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAZhVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI3MDczMTQ3WhcNMjUwOTI3MDczMTQ3WjAYMRYw
FAYDVQQDEw02OGFlYjQ2OS1lOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4GgrDo7eLG4u0xJN78Un+fSBNRFIv4Ivg6m8wYRiAJCAAjFpB27M9NuR
WV05W1kSq8aU5d9QAC79ItssOYhStd3q5gdKuu7V1sWKJsby2rDHg/ZSPPtVboba
oop18lwQagPdQn3pjoJKtS9hd1oIPijAVDVTHdU5e6bIC+yQWZpYccx5NZLm+7Vo
RBJ9E0NmZU0SNue3qSeUO7ax+v8NB8yCE4P63OUowktHoXIj+V2csl6zG1f0m9LP
6WIn6HbEwnem9Ta9rI0+vJDRia/JXt6oznvRWQYfbOe7m3WUdzxFfeWzWilbUtMC
RXZslCbj2KK6+P/IPzMYzrLyyMFGSQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFDkZ
GMUOgqbgixapyN4Og0D+0lEoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNkE0QjQxMDgzMTcxMUYwOTNGN0I5RUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEms7wAwQDmtBAAwQDmtBw
MA0GCSqGSIb3DQEBCwUAA4IBAQAVjv1tiUOUf8F9VeaO00dgI2OX7VRGtkjJDovw
zrK0+YywWgGPnUEvh5e3zlBX9itWZE2tGpL5uVidetjOOm/bZlbROzx4dEKeduxH
RPV6c/igb0RdVJDqatDY+YPnFiRWMXi+X/EUS4k17f1AcnX+3aWJAR1tAIoWpjIq
U1j/rRyl3NlBN/HBDJynNn7gtgGDxp8bzEObTRP2GJhPn3Ne3Ym3Wpx51AK9jOsy
9YVSG80zOhHHGjHjocOQ6q4WL3HCjYBKryKy/MglNUVIO9NK4Pa71trd06aZIKoL
fBbKV7uox93OoUSwMAQq7tIe2sHukpz4JzfmMANwrFgz6ywn
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:35 2025 by rpki-client