Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4274C98467A111F099FF0CDFDAE4EC9C.roa
File: 4274C98467A111F099FF0CDFDAE4EC9C.roa (raw, json)
Hash identifier: ZaK4NrylrppJuOZ0vj87SFHY4TX/1vdLhB+M3h4cmuQ=
Subject key identifier: F6:FA:D3:D1:93:8C:BF:EA:99:A2:69:72:3C:A9:50:EC:37:A4:AA:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4274C98467A111F099FF0CDFDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 08:44:36 +0000
ROA not before: Wed 23 Jul 2025 08:44:31 +0000
ROA not after: Tue 16 Sep 2025 08:44:31 +0000
asID: 142002
IP address blocks: 154.83.26.0/24 maxlen: 24
154.83.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102115 (0x18ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 08:44:31 2025 GMT
Not After : Sep 16 08:44:31 2025 GMT
Subject: CN=6880a0f3-b580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:04:b6:5d:7f:c6:26:13:da:ac:96:74:45:
e0:b7:4f:fe:97:72:cd:9f:6c:d2:c0:22:65:69:16:
a7:5d:16:74:33:12:57:d5:d0:74:6e:f4:67:cf:56:
33:74:7c:11:d9:42:95:b9:d7:8b:57:b4:f1:d3:c9:
69:04:2f:65:19:b8:fa:b1:ad:00:18:7b:57:c8:53:
6e:8f:4a:fc:bb:46:8e:85:d7:6a:15:f0:ea:82:dd:
e0:c4:cf:25:ea:0d:7f:80:1e:bc:3c:95:ba:e1:6e:
56:fe:4c:13:4b:a1:f1:23:cc:78:7b:89:e8:f7:57:
43:d7:09:b0:c8:36:c0:cf:0b:33:ab:15:3d:f2:ae:
83:0c:58:a4:df:97:33:41:11:3a:59:5d:f8:46:6f:
c9:dd:b9:95:2e:cc:62:47:1c:03:b5:be:85:25:25:
19:32:04:5d:af:98:82:9e:37:b7:e0:eb:09:4b:46:
19:8d:c6:32:83:1e:7d:88:6e:42:02:fd:d8:58:37:
dc:4f:87:8f:6b:42:58:e4:ab:32:0e:9d:cd:61:78:
1b:3d:a3:d7:ae:61:d2:59:31:8c:a9:53:c7:96:b6:
1c:da:3c:7a:37:bc:ec:32:9b:eb:68:b4:17:8e:24:
25:6c:8c:62:9d:8e:ce:34:70:b7:6a:87:28:24:f1:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:D3:D1:93:8C:BF:EA:99:A2:69:72:3C:A9:50:EC:37:A4:AA:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4274C98467A111F099FF0CDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.26.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:1e:07:36:28:bd:87:d0:47:0b:bc:4b:7e:05:7c:73:25:ab:
e9:74:c4:0c:75:32:f3:d9:4b:6d:72:31:43:a0:ae:14:15:b8:
f1:97:00:3d:34:02:d6:11:19:24:ef:f8:f7:11:c5:3e:72:fe:
79:3a:bb:e7:2b:16:4d:59:17:9d:21:2d:1a:aa:e5:24:f0:27:
49:32:03:8a:ed:66:33:50:44:69:e3:c8:d2:4a:7b:53:be:87:
4d:00:28:ed:1d:75:10:f9:8f:9f:d7:13:45:ee:c9:8d:19:4c:
f7:60:33:51:74:09:61:94:c9:a2:7e:9c:56:4a:2b:35:75:4b:
c4:05:8f:54:33:da:02:a6:fa:07:bc:e4:42:53:9f:fb:cd:f1:
49:0a:74:be:21:5c:de:c4:26:26:d0:14:bd:d6:e8:95:dc:6c:
1d:e5:0a:ae:23:00:da:6a:f1:e5:1e:95:1c:96:06:de:6a:56:
a3:81:3e:c4:49:37:8f:59:89:5b:e9:f4:06:c9:09:73:fa:25:
2a:3e:c0:09:17:74:82:66:9d:32:bd:91:ff:67:99:34:55:66:
51:43:e5:80:63:71:fb:0a:46:e9:83:25:10:c2:a6:2a:b9:34:
e5:8b:b3:61:b9:1d:69:76:32:1c:ad:1d:d2:22:41:c6:20:5c:
fb:58:02:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY7jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIzMDg0NDMxWhcNMjUwOTE2MDg0NDMxWjAYMRYw
FAYDVQQDEw02ODgwYTBmMy1iNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxIcEtl1/xiYT2qyWdEXgt0/+l3LNn2zSwCJlaRanXRZ0MxJX1dB0bvRn
z1YzdHwR2UKVudeLV7Tx08lpBC9lGbj6sa0AGHtXyFNuj0r8u0aOhddqFfDqgt3g
xM8l6g1/gB68PJW64W5W/kwTS6HxI8x4e4no91dD1wmwyDbAzwszqxU98q6DDFik
35czQRE6WV34Rm/J3bmVLsxiRxwDtb6FJSUZMgRdr5iCnje34OsJS0YZjcYygx59
iG5CAv3YWDfcT4ePa0JY5KsyDp3NYXgbPaPXrmHSWTGMqVPHlrYc2jx6N7zsMpvr
aLQXjiQlbIxinY7ONHC3aocoJPGVswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPb6
09GTjL/qmaJpcjypUOw3pKpuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Mjc0Qzk4NDY3QTExMUYwOTlGRjBDREZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlMaMA0GCSqGSIb3DQEB
CwUAA4IBAQC/Hgc2KL2H0EcLvEt+BXxzJavpdMQMdTLz2UttcjFDoK4UFbjxlwA9
NALWERkk7/j3EcU+cv55OrvnKxZNWRedIS0aquUk8CdJMgOK7WYzUERp48jSSntT
vodNACjtHXUQ+Y+f1xNF7smNGUz3YDNRdAlhlMmifpxWSis1dUvEBY9UM9oCpvoH
vORCU5/7zfFJCnS+IVzexCYm0BS91uiV3Gwd5QquIwDaavHlHpUclgbealajgT7E
STePWYlb6fQGyQlz+iUqPsAJF3SCZp0yvZH/Z5k0VWZRQ+WAY3H7CkbpgyUQwqYq
uTTli7NhuR1pdjIcrR3SIkHGIFz7WAJN
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:11:24 2025 by rpki-client