Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B6DAC0824C11F0BD9E55BFDAE4EC9C.roa
File: F1B6DAC0824C11F0BD9E55BFDAE4EC9C.roa (raw, json)
Hash identifier: 8tR7X4/GvikLfSPo0Iulmod71vbmNKYFMmT7skBfhmM=
Subject key identifier: DC:0C:61:EF:3E:AA:DE:37:87:E5:71:FF:2C:2B:77:01:7A:4A:04:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019795
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B6DAC0824C11F0BD9E55BFDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 07:19:04 +0000
ROA not before: Tue 26 Aug 2025 07:18:58 +0000
ROA not after: Sat 06 Sep 2025 07:18:58 +0000
asID: 135377
IP address blocks: 154.197.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104341 (0x19795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 07:18:58 2025 GMT
Not After : Sep 6 07:18:58 2025 GMT
Subject: CN=68ad5fe8-d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:bd:90:f5:e3:0e:80:6e:fe:f9:44:54:db:
da:07:82:0b:b4:2b:9d:ec:81:86:ce:4c:7f:c4:9b:
1a:ee:2e:f0:e8:aa:42:8b:bf:6f:a1:b2:a7:77:ba:
ab:59:44:e9:d3:a2:25:0f:c1:0f:a5:41:02:9d:32:
99:c9:59:25:e1:ec:43:5b:7d:13:21:a2:a8:65:c5:
05:be:a5:80:43:cc:08:f5:61:85:c6:78:4e:17:39:
9e:ba:93:6f:f2:c2:d7:b3:c9:d9:b8:f6:eb:61:d5:
57:8f:8b:75:91:32:4e:31:61:e6:00:c3:0e:8e:ef:
76:e2:4b:5c:85:93:53:03:3d:52:73:51:92:d7:8d:
4c:bd:8e:52:10:2e:0f:ee:12:4e:89:55:20:6d:9a:
13:91:5f:33:34:2b:4e:2d:0a:6d:71:bd:d3:62:f9:
62:69:dc:c4:4f:90:31:8d:be:65:f9:ec:ba:dc:33:
33:ad:d9:e0:a2:cb:5b:ff:4b:95:ad:26:2c:fc:5c:
41:9f:6e:66:e3:51:5a:6f:a2:16:e9:b8:83:a9:a5:
e8:3e:6c:63:1f:b0:f8:f9:05:30:84:82:2c:82:6e:
53:5c:ae:69:9b:36:20:b7:2f:d0:f6:a6:59:37:b0:
9f:b8:3c:e9:a6:ae:13:3a:d3:47:1c:65:33:bc:86:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:61:EF:3E:AA:DE:37:87:E5:71:FF:2C:2B:77:01:7A:4A:04:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B6DAC0824C11F0BD9E55BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.56.0/23
Signature Algorithm: sha256WithRSAEncryption
84:a3:8b:91:de:ca:2a:85:a3:18:dd:54:a8:be:47:8a:d5:92:
23:93:fe:22:70:0f:20:80:84:de:8a:4a:c5:e7:e8:48:9d:2b:
15:b3:58:5e:0c:ac:35:8c:f3:91:f5:19:f5:28:35:35:d2:56:
e3:92:1d:ae:25:60:d4:f7:ae:83:f3:c4:9f:96:3f:46:21:8e:
4b:02:7b:04:4b:76:2c:a6:a1:4f:9d:28:e0:c7:64:6e:cc:99:
9b:53:9e:c4:66:41:48:62:b6:2e:cb:35:5d:00:d1:b5:e6:1e:
b0:d2:72:04:3d:3c:bf:df:8a:82:1b:85:36:c1:4f:f6:13:7b:
10:a4:20:66:a1:05:90:57:40:f7:e9:e3:b8:67:a8:5e:88:9c:
65:15:34:4b:69:b2:1f:e8:21:97:1e:27:cf:f8:e3:7c:64:53:
0b:37:8e:a3:f0:39:ff:cb:50:8e:4d:6d:dd:1d:62:c5:78:94:
18:60:e2:a5:c8:f3:64:4e:04:24:4d:9e:34:67:cc:61:d3:fe:
4a:9e:d0:e0:da:af:0f:3b:e8:72:a0:bf:2d:9f:aa:38:9d:8e:
84:9d:bb:1f:15:15:5a:f9:ae:31:cf:bb:9b:2b:76:48:39:a1:
66:a4:75:b8:b1:7e:65:7a:8f:ae:8d:94:20:c9:82:3f:9f:f5:
eb:7d:d0:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZeVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI2MDcxODU4WhcNMjUwOTA2MDcxODU4WjAYMRYw
FAYDVQQDEw02OGFkNWZlOC1kNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsjW9kPXjDoBu/vlEVNvaB4ILtCud7IGGzkx/xJsa7i7w6KpCi79vobKn
d7qrWUTp06IlD8EPpUECnTKZyVkl4exDW30TIaKoZcUFvqWAQ8wI9WGFxnhOFzme
upNv8sLXs8nZuPbrYdVXj4t1kTJOMWHmAMMOju924ktchZNTAz1Sc1GS141MvY5S
EC4P7hJOiVUgbZoTkV8zNCtOLQptcb3TYvliadzET5Axjb5l+ey63DMzrdngostb
/0uVrSYs/FxBn25m41Fab6IW6biDqaXoPmxjH7D4+QUwhIIsgm5TXK5pmzYgty/Q
9qZZN7CfuDzppq4TOtNHHGUzvIZT0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNwM
Ye8+qt43h+Vx/ywrdwF6SgSUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMUI2REFDMDgyNEMxMUYwQkQ5RTU1QkZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsU4MA0GCSqGSIb3DQEB
CwUAA4IBAQCEo4uR3soqhaMY3VSovkeK1ZIjk/4icA8ggITeikrF5+hInSsVs1he
DKw1jPOR9Rn1KDU10lbjkh2uJWDU966D88Sflj9GIY5LAnsES3YspqFPnSjgx2Ru
zJmbU57EZkFIYrYuyzVdANG15h6w0nIEPTy/34qCG4U2wU/2E3sQpCBmoQWQV0D3
6eO4Z6heiJxlFTRLabIf6CGXHifP+ON8ZFMLN46j8Dn/y1COTW3dHWLFeJQYYOKl
yPNkTgQkTZ40Z8xh0/5KntDg2q8PO+hyoL8tn6o4nY6EnbsfFRVa+a4xz7ubK3ZI
OaFmpHW4sX5leo+ujZQgyYI/n/XrfdCh
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:00 2025 by rpki-client