Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3523E0836511F0B8B1CCE8DAE4EC9C.roa
File: FF3523E0836511F0B8B1CCE8DAE4EC9C.roa (raw, json)
Hash identifier: ABiWzGokWknu/ZlgJW5LEQiZ6RUQwTW3CacOFYHKH6g=
Subject key identifier: 4A:CC:42:6F:3C:DA:90:0E:4F:27:83:57:7F:8A:9B:7E:4F:D0:43:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0198DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3523E0836511F0B8B1CCE8DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 16:50:55 +0000
ROA not before: Wed 27 Aug 2025 16:50:50 +0000
ROA not after: Wed 15 Oct 2025 16:50:50 +0000
asID: 138915
IP address blocks: 154.205.139.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.142.0/23 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104671 (0x198df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 27 16:50:50 2025 GMT
Not After : Oct 15 16:50:50 2025 GMT
Subject: CN=68af376f-b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:a8:76:75:43:8b:ac:07:2b:e6:d5:64:a5:
d3:73:cd:a2:75:f4:5a:c6:6e:8d:ba:05:21:36:31:
c7:37:b4:f6:2c:e7:a2:f3:31:f4:47:33:a2:48:ed:
76:87:b9:51:a6:2a:99:de:d5:28:12:4a:1f:ec:9e:
87:92:d6:fc:dc:a4:27:77:5f:e2:3b:ce:6e:b3:e3:
7b:23:bc:ce:e6:61:d0:90:38:e1:4e:f9:a5:8e:96:
8c:13:b7:9e:57:60:2a:74:3d:22:76:20:56:70:82:
77:b5:01:11:5f:26:50:9f:4d:46:41:c1:6e:82:da:
c3:78:e4:c5:0f:90:b9:af:92:5e:35:87:76:29:74:
82:7c:80:a5:80:3c:5f:2d:2f:d1:04:b4:5a:ba:3a:
a6:e9:b6:77:84:9f:10:30:81:de:ff:3b:1a:c5:16:
ff:ba:97:0c:cc:b0:56:ba:8c:9e:29:33:03:47:64:
09:d2:db:eb:08:fc:a4:d5:1c:49:92:1d:97:5c:8d:
a2:dd:3e:d4:1b:59:ec:05:99:7c:71:3c:4b:ae:e7:
68:f5:c4:a4:c5:30:18:e1:c8:08:a1:0b:3b:9a:6c:
f2:7d:6e:e1:88:2d:03:58:b0:40:91:79:30:79:ca:
c8:58:71:cf:fe:f8:70:55:17:ab:61:a4:36:0e:18:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:42:6F:3C:DA:90:0E:4F:27:83:57:7F:8A:9B:7E:4F:D0:43:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3523E0836511F0B8B1CCE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.139.0-154.205.140.255
154.205.142.0/23
154.205.145.0/24
154.205.154.0-154.205.159.255
Signature Algorithm: sha256WithRSAEncryption
0a:ef:e2:6c:2e:60:33:8e:cc:3c:b4:38:b0:bd:af:ff:e6:50:
f6:9f:ff:b7:3c:3d:6d:77:9a:69:03:18:f2:6c:7b:82:41:cd:
be:9a:ca:4c:4f:20:07:96:e1:5f:bf:44:06:99:91:50:1d:47:
45:33:a9:ea:23:7d:7a:77:35:38:53:23:c9:70:de:1f:aa:28:
17:04:77:95:90:b8:87:0a:20:29:63:06:0a:31:9a:24:b5:6d:
99:03:25:ac:aa:aa:80:5f:3d:d0:23:36:f1:ce:1d:24:af:d9:
5d:3f:2a:c8:58:54:ef:12:ab:15:66:26:7c:c1:62:3c:9c:88:
05:48:3a:ba:5c:63:3d:a9:55:66:2d:26:09:d4:98:f1:8f:fd:
8b:a1:92:2e:d9:63:d5:22:57:08:80:ac:72:3c:83:42:b3:cd:
7c:29:ab:ba:fd:71:3d:42:b7:48:7e:7c:01:be:e9:e0:ad:57:
48:d0:b5:88:53:48:dd:5e:e3:f7:cb:a2:2c:ce:98:a0:c3:28:
61:11:9c:77:7c:39:32:d0:eb:96:cd:20:41:3c:40:c9:96:a4:
e9:d9:a6:71:69:0e:ea:25:43:87:70:6a:be:b0:b4:61:9e:74:
67:43:36:d2:47:fd:25:cf:5d:c1:02:3d:2c:dd:2f:78:f8:57:
6f:9d:cb:67
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAZjfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI3MTY1MDUwWhcNMjUxMDE1MTY1MDUwWjAYMRYw
FAYDVQQDEw02OGFmMzc2Zi1iNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzteodnVDi6wHK+bVZKXTc82idfRaxm6NugUhNjHHN7T2LOei8zH0RzOi
SO12h7lRpiqZ3tUoEkof7J6Hktb83KQnd1/iO85us+N7I7zO5mHQkDjhTvmljpaM
E7eeV2AqdD0idiBWcIJ3tQERXyZQn01GQcFugtrDeOTFD5C5r5JeNYd2KXSCfICl
gDxfLS/RBLRaujqm6bZ3hJ8QMIHe/zsaxRb/upcMzLBWuoyeKTMDR2QJ0tvrCPyk
1RxJkh2XXI2i3T7UG1nsBZl8cTxLrudo9cSkxTAY4cgIoQs7mmzyfW7hiC0DWLBA
kXkwecrIWHHP/vhwVRerYaQ2Dhhq/wIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFErM
Qm882pAOTyeDV3+Km35P0EMgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjM1MjNFMDgzNjUxMUYwQjhCMUNDRThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACazYsDBACazYwDBAGa
zY4DBACazZEwDAMEAZrNmgMEBZrNgDANBgkqhkiG9w0BAQsFAAOCAQEACu/ibC5g
M47MPLQ4sL2v/+ZQ9p//tzw9bXeaaQMY8mx7gkHNvprKTE8gB5bhX79EBpmRUB1H
RTOp6iN9enc1OFMjyXDeH6ooFwR3lZC4hwogKWMGCjGaJLVtmQMlrKqqgF890CM2
8c4dJK/ZXT8qyFhU7xKrFWYmfMFiPJyIBUg6ulxjPalVZi0mCdSY8Y/9i6GSLtlj
1SJXCICscjyDQrPNfCmruv1xPUK3SH58Ab7p4K1XSNC1iFNI3V7j98uiLM6YoMMo
YRGcd3w5MtDrls0gQTxAyZak6dmmcWkO6iVDh3BqvrC0YZ50Z0M20kf9Jc9dwQI9
LN0vePhXb53LZw==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:25 2025 by rpki-client