Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E96B7C9E834211F08E7D0287DAE4EC9C.roa
File: E96B7C9E834211F08E7D0287DAE4EC9C.roa (raw, json)
Hash identifier: gtA935q0yMXg60kFag4eycvKcilZ+1u6R3JYSjAeS44=
Subject key identifier: 02:69:F0:DB:7E:56:3D:81:EC:2C:0C:4D:58:ED:39:29:7E:A1:4A:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019888
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E96B7C9E834211F08E7D0287DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 12:39:46 +0000
ROA not before: Wed 27 Aug 2025 12:39:41 +0000
ROA not after: Fri 10 Oct 2025 12:39:41 +0000
asID: 138915
IP address blocks: 154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
154.95.86.0/23 maxlen: 24
154.95.88.0/24 maxlen: 24
154.95.89.0/24 maxlen: 24
154.95.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104584 (0x19888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 12:39:41 2025 GMT
Not After : Oct 10 12:39:41 2025 GMT
Subject: CN=68aefc92-77a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:24:2a:2e:f6:d5:66:71:cf:f7:b4:ca:8f:
76:21:84:42:a9:df:bf:bd:62:97:81:99:4c:f1:b7:
b6:f0:51:f5:7a:cb:24:12:02:f3:fe:08:13:c5:11:
b2:81:bb:37:2c:b5:8d:a0:4f:0e:dd:f6:cd:32:43:
86:f0:71:6b:6c:86:7d:13:57:66:46:66:db:a5:fa:
9d:a1:6c:be:1a:5a:cf:73:bd:4c:e2:a3:75:b6:4a:
0d:a4:7a:97:97:0e:d4:4d:e0:34:52:f9:0b:90:06:
4f:44:a1:9f:90:69:b2:0a:82:7a:86:fb:cf:e1:45:
a4:b9:68:58:15:9c:ad:cc:5c:41:57:e7:8a:37:20:
b6:8b:35:82:55:c7:81:1a:5b:7f:7d:9f:b2:6d:e4:
24:79:ae:ea:4d:10:b0:b1:3a:e5:47:59:f0:43:13:
99:85:1d:7b:57:d1:fd:00:00:df:6b:93:5e:9d:5b:
d2:5b:01:b9:36:c3:0f:0e:48:ab:a4:9c:87:a2:6e:
1b:76:6e:37:df:c8:f6:9e:36:6b:75:30:57:58:4c:
0e:35:19:c5:be:94:52:1b:07:96:f7:dc:eb:3a:f5:
49:7f:19:29:0d:07:ae:bc:ea:9e:22:02:60:29:2b:
5b:fa:24:c7:82:8f:d1:38:53:c2:53:cc:f6:43:9e:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:F0:DB:7E:56:3D:81:EC:2C:0C:4D:58:ED:39:29:7E:A1:4A:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E96B7C9E834211F08E7D0287DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.80.0-154.95.90.255
Signature Algorithm: sha256WithRSAEncryption
67:12:7b:14:4f:63:7b:36:94:74:65:24:34:45:ed:40:a3:2b:
6c:2f:60:ae:25:90:9c:7a:d7:a0:66:18:43:ec:a4:c2:32:f5:
63:1b:a8:4b:25:38:3b:18:94:f3:47:52:81:77:28:69:cc:2b:
26:21:9a:e0:15:47:d0:5d:bd:f0:0f:cb:83:22:37:b1:1d:12:
0a:11:79:b8:60:5b:d7:e7:39:9f:b3:18:ff:73:79:1d:04:d9:
7f:c0:41:26:d2:68:9a:eb:b2:cd:72:51:1b:b1:6a:a0:86:4f:
24:c2:ea:cc:81:5f:18:82:10:b7:6e:26:70:63:16:f4:eb:d2:
f2:4a:20:91:18:9d:2d:86:52:6d:ca:cd:ec:d8:b7:2e:c2:94:
8d:c7:b0:03:fa:87:74:7b:a1:fb:6b:c2:b2:6c:d4:77:b3:e2:
ef:7c:90:35:86:93:4e:a6:fe:df:47:be:68:79:de:a6:78:39:
af:2a:37:3d:5f:5b:06:c1:e1:2a:7b:64:14:1e:d7:1d:17:a2:
b4:32:61:2b:48:76:e3:b0:36:53:4a:29:29:24:a4:87:ef:e5:
a8:a6:67:52:82:d5:f0:ae:76:a8:37:4b:52:5c:7a:b8:86:c6:
d0:c9:86:51:08:ee:05:25:c6:ce:e5:2d:e7:b1:e8:02:33:73:
fe:b5:32:8b
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAZiIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI3MTIzOTQxWhcNMjUxMDEwMTIzOTQxWjAYMRYw
FAYDVQQDEw02OGFlZmM5Mi03N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2yAkKi721WZxz/e0yo92IYRCqd+/vWKXgZlM8be28FH1esskEgLz/ggT
xRGygbs3LLWNoE8O3fbNMkOG8HFrbIZ9E1dmRmbbpfqdoWy+GlrPc71M4qN1tkoN
pHqXlw7UTeA0UvkLkAZPRKGfkGmyCoJ6hvvP4UWkuWhYFZytzFxBV+eKNyC2izWC
VceBGlt/fZ+ybeQkea7qTRCwsTrlR1nwQxOZhR17V9H9AADfa5NenVvSWwG5NsMP
DkirpJyHom4bdm4338j2njZrdTBXWEwONRnFvpRSGweW99zrOvVJfxkpDQeuvOqe
IgJgKStb+iTHgo/ROFPCU8z2Q57mewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAJp
8Nt+Vj2B7CwMTVjtOSl+oUrtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTZCN0M5RTgzNDIxMUYwOEU3RDAyODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaX1ADBACaX1owDQYJ
KoZIhvcNAQELBQADggEBAGcSexRPY3s2lHRlJDRF7UCjK2wvYK4lkJx616BmGEPs
pMIy9WMbqEslODsYlPNHUoF3KGnMKyYhmuAVR9BdvfAPy4MiN7EdEgoRebhgW9fn
OZ+zGP9zeR0E2X/AQSbSaJrrss1yURuxaqCGTyTC6syBXxiCELduJnBjFvTr0vJK
IJEYnS2GUm3KzezYty7ClI3HsAP6h3R7oftrwrJs1Hez4u98kDWGk06m/t9Hvmh5
3qZ4Oa8qNz1fWwbB4Sp7ZBQe1x0XorQyYStIduOwNlNKKSkkpIfv5aimZ1KC1fCu
dqg3S1JceriGxtDJhlEI7gUlxs7lLeex6AIzc/61Mos=
-----END CERTIFICATE-----
Generated at Wed Sep 3 21:01:29 2025 by rpki-client