Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8D06C16871D11F0914988B8DAE4EC9C.roa
File: E8D06C16871D11F0914988B8DAE4EC9C.roa (raw, json)
Hash identifier: rhgLInQ3h1ZQmLdeIkjiMAQ4FUM74iP5xzxYKsxf90w=
Subject key identifier: DE:23:D8:D0:B1:38:81:F2:3D:F2:DE:39:B5:62:3D:3A:4D:18:47:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8D06C16871D11F0914988B8DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 10:24:58 +0000
ROA not before: Mon 01 Sep 2025 10:24:53 +0000
ROA not after: Mon 06 Oct 2025 10:24:53 +0000
asID: 21859
IP address blocks: 154.83.71.0/24 maxlen: 24
154.83.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105311 (0x19b5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 10:24:53 2025 GMT
Not After : Oct 6 10:24:53 2025 GMT
Subject: CN=68b5747a-0ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:20:8c:54:31:9c:35:d4:87:f1:70:8a:97:
52:9d:6f:2d:57:f3:d7:e5:8e:6b:cc:82:8c:a1:30:
31:61:c6:96:bf:e2:5c:00:fd:f7:ce:8e:bf:bb:e6:
4c:2d:ea:dd:90:78:1c:a7:f9:18:27:9e:7b:4e:6f:
23:c4:f0:22:77:2a:63:b8:63:88:a4:86:d6:76:7f:
5b:ce:ec:9c:61:2d:3a:16:44:f8:20:e2:35:34:e8:
39:5c:c2:8c:0b:35:80:68:de:df:88:09:8d:dc:2e:
e9:e4:6f:c3:36:e3:7b:b3:51:12:98:0a:de:8a:c7:
69:39:0d:6e:54:72:3a:3c:dd:d6:80:69:ef:19:3b:
17:38:af:de:bc:cf:d6:07:dc:8c:b8:25:ea:08:52:
81:c9:6c:91:89:a8:2b:ff:71:7f:21:b8:74:a8:ad:
15:69:c6:89:20:c0:48:85:25:44:ef:0b:ee:1a:f4:
66:89:0d:ac:97:2f:15:23:c7:be:b9:93:1c:43:07:
f1:76:96:19:b1:0e:21:08:61:29:c4:8a:8e:57:93:
07:39:14:65:f5:95:91:4a:30:52:4d:99:a1:a6:ac:
d2:de:31:eb:0b:b9:68:91:5e:e7:1d:c7:be:54:b8:
03:24:c5:e3:3f:7e:c6:86:60:b6:26:74:0f:f8:3d:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:D8:D0:B1:38:81:F2:3D:F2:DE:39:B5:62:3D:3A:4D:18:47:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8D06C16871D11F0914988B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.71.0/24
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ac:e7:1b:f9:0c:63:1d:a2:c0:68:14:2f:04:05:01:fa:20:
c9:d4:1a:52:71:10:05:fc:1b:58:eb:04:68:9c:69:ba:76:21:
61:17:12:b7:62:04:ca:ae:5e:e8:b9:56:a1:14:81:39:db:db:
1e:43:5a:1f:3e:bb:71:16:4d:24:b9:75:b1:48:87:dc:6f:e3:
f9:b1:a5:c6:4a:1e:09:04:64:14:f3:bc:3c:d7:42:91:84:7a:
f5:cb:42:4b:80:b5:0b:89:0d:54:bf:c4:fa:52:c2:f5:3f:5d:
d4:9a:bc:cf:04:55:f6:4e:93:3f:a3:60:67:48:c5:96:d9:53:
76:ed:b8:cf:5b:ff:1a:81:95:4b:c3:14:02:f2:c2:cb:28:85:
64:0e:90:14:73:c9:51:b7:c1:8a:ae:3d:3d:32:d2:d6:2c:9f:
63:c5:a2:75:52:9f:ee:af:45:c5:39:fb:95:0d:eb:d3:e2:d5:
0a:6d:2a:87:6b:a0:c3:4b:e3:61:8c:dd:93:d0:1b:fe:e5:85:
94:99:0d:7b:1f:18:eb:3e:22:51:2f:41:49:de:f6:f3:ab:90:
ff:fc:38:05:a1:a1:a7:78:3d:c2:a8:e4:77:b8:a3:18:fd:ff:
50:38:9b:12:9a:57:cf:11:29:07:72:38:50:11:78:f2:6f:6b:
e5:b6:55:76
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZtfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAxMTAyNDUzWhcNMjUxMDA2MTAyNDUzWjAYMRYw
FAYDVQQDEw02OGI1NzQ3YS0wYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoTAgjFQxnDXUh/FwipdSnW8tV/PX5Y5rzIKMoTAxYcaWv+JcAP33zo6/
u+ZMLerdkHgcp/kYJ557Tm8jxPAidypjuGOIpIbWdn9bzuycYS06FkT4IOI1NOg5
XMKMCzWAaN7fiAmN3C7p5G/DNuN7s1ESmAreisdpOQ1uVHI6PN3WgGnvGTsXOK/e
vM/WB9yMuCXqCFKByWyRiagr/3F/Ibh0qK0VacaJIMBIhSVE7wvuGvRmiQ2sly8V
I8e+uZMcQwfxdpYZsQ4hCGEpxIqOV5MHORRl9ZWRSjBSTZmhpqzS3jHrC7lokV7n
Hce+VLgDJMXjP37GhmC2JnQP+D3zSwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFN4j
2NCxOIHyPfLeObViPTpNGEdGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOEQwNkMxNjg3MUQxMUYwOTE0OTg4QjhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlNHAwQAmlNOMA0GCSqG
SIb3DQEBCwUAA4IBAQAyrOcb+QxjHaLAaBQvBAUB+iDJ1BpScRAF/BtY6wRonGm6
diFhFxK3YgTKrl7ouVahFIE529seQ1ofPrtxFk0kuXWxSIfcb+P5saXGSh4JBGQU
87w810KRhHr1y0JLgLULiQ1Uv8T6UsL1P13UmrzPBFX2TpM/o2BnSMWW2VN27bjP
W/8agZVLwxQC8sLLKIVkDpAUc8lRt8GKrj09MtLWLJ9jxaJ1Up/ur0XFOfuVDevT
4tUKbSqHa6DDS+NhjN2T0Bv+5YWUmQ17HxjrPiJRL0FJ3vbzq5D//DgFoaGneD3C
qOR3uKMY/f9QOJsSmlfPESkHcjhQEXjyb2vltlV2
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:34 2025 by rpki-client