Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BB783E693B11F0BCE44ED0DAE4EC9C.roa
File: 79BB783E693B11F0BCE44ED0DAE4EC9C.roa (raw, json)
Hash identifier: E9+JU/iL+H9+Fvrw4oEIGZyD4eJ25/ZbzzsOPtfUfK4=
Subject key identifier: 1D:D7:44:1B:7A:A9:82:4F:DC:FE:B6:CE:9C:1B:5A:18:F7:00:8B:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BB783E693B11F0BCE44ED0DAE4EC9C.roa
Signing time: Fri 25 Jul 2025 09:41:02 +0000
ROA not before: Fri 25 Jul 2025 09:40:57 +0000
ROA not after: Sun 31 Aug 2025 09:40:57 +0000
asID: 203020
IP address blocks: 154.195.32.0/19 maxlen: 24
154.198.128.0/19 maxlen: 24
154.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102315 (0x18fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:40:57 2025 GMT
Not After : Aug 31 09:40:57 2025 GMT
Subject: CN=6883512e-aa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:55:3a:01:a1:3f:89:d5:a0:d5:68:1b:cb:
0f:6a:3f:68:44:9c:8e:b6:24:d7:29:9f:a8:f8:83:
17:66:08:eb:13:f6:99:35:da:89:e3:5d:48:d7:34:
5a:fe:53:bd:cc:8c:d1:83:67:e9:e1:f8:af:6c:3f:
bc:26:85:15:87:7f:f5:2e:ee:7f:db:60:23:92:fe:
af:d6:d3:d4:79:da:00:40:3c:68:48:e9:24:14:09:
7a:e0:1d:c0:f3:c3:38:74:2c:d7:2e:77:ce:c0:b6:
06:6a:d3:f0:23:7e:97:04:a9:f3:ac:75:df:8f:e2:
f3:a1:25:5a:94:6b:14:c8:33:fd:20:54:ae:1f:9b:
78:60:d3:d8:e2:66:a5:9a:85:e7:c2:5b:1f:70:98:
46:9a:11:49:02:a8:a6:35:e2:41:ae:c2:a6:f1:d3:
cd:7b:a3:62:c3:9d:5a:04:47:96:9d:98:c4:76:8a:
d5:e8:a2:6b:48:31:5b:2b:d6:65:4e:02:09:0a:08:
bd:d2:fd:f5:9c:eb:72:ae:12:6f:e0:76:0f:1d:b3:
e3:7f:2d:a5:fd:f4:8e:55:ad:b5:10:7d:19:a9:fc:
63:66:10:c8:00:f2:cb:41:0b:25:2c:8f:0f:f2:64:
ca:28:ad:e2:75:c2:ff:f9:62:92:ff:56:a2:dd:2d:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:44:1B:7A:A9:82:4F:DC:FE:B6:CE:9C:1B:5A:18:F7:00:8B:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BB783E693B11F0BCE44ED0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.32.0/19
154.198.128.0/19
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d3:a0:0a:1c:84:08:80:39:17:f0:27:78:29:2d:b5:b1:14:f5:
9b:bd:2e:b1:78:eb:26:de:3f:36:66:08:4e:bf:b0:2c:ff:78:
76:85:6d:b6:8b:5f:3b:c2:3b:c2:07:4d:95:c6:5c:bf:ac:7d:
7f:a1:cb:5f:eb:30:e3:ee:92:50:e6:bb:8c:8a:a8:e1:e9:b1:
7c:a8:c6:d3:73:c8:2d:33:ef:28:22:58:1f:4e:c5:23:e1:54:
2b:01:15:fe:d8:df:55:8b:e6:ae:aa:a9:de:37:17:62:23:a2:
fb:cb:a4:74:1c:af:1a:59:0a:96:5e:44:e7:ed:45:4a:aa:fa:
28:43:a6:a0:9d:24:ef:7c:15:59:7f:c5:b4:2d:8a:c6:a7:d8:
3f:42:64:ff:c0:4c:81:8d:09:49:f7:e1:fa:dc:f6:ea:c3:e4:
ce:56:3a:35:3d:1c:be:f7:0b:41:79:19:bd:85:19:55:7f:17:
f9:69:90:0f:88:97:1b:a4:67:61:01:dd:bf:53:69:33:3a:35:
90:db:bd:23:94:21:be:32:c5:d7:90:67:dc:b1:d2:24:7a:d5:
55:2e:40:f7:7d:8d:22:bb:93:3e:e0:2d:2d:47:a9:2b:7c:99:
73:9f:d6:ce:32:ec:ed:7d:1b:bf:52:4c:f9:84:de:21:89:e0:
43:b4:3a:93
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAY+rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzI1MDk0MDU3WhcNMjUwODMxMDk0MDU3WjAYMRYw
FAYDVQQDEw02ODgzNTEyZS1hYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu5lVOgGhP4nVoNVoG8sPaj9oRJyOtiTXKZ+o+IMXZgjrE/aZNdqJ411I
1zRa/lO9zIzRg2fp4fivbD+8JoUVh3/1Lu5/22Ajkv6v1tPUedoAQDxoSOkkFAl6
4B3A88M4dCzXLnfOwLYGatPwI36XBKnzrHXfj+LzoSValGsUyDP9IFSuH5t4YNPY
4malmoXnwlsfcJhGmhFJAqimNeJBrsKm8dPNe6Niw51aBEeWnZjEdorV6KJrSDFb
K9ZlTgIJCgi90v31nOtyrhJv4HYPHbPjfy2l/fSOVa21EH0ZqfxjZhDIAPLLQQsl
LI8P8mTKKK3idcL/+WKS/1ai3S0E9QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFB3X
RBt6qYJP3P62zpwbWhj3AIukMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OUJCNzgzRTY5M0IxMUYwQkNFNDRFRDBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFmsMgAwQFmsaAAwQFmtQg
MA0GCSqGSIb3DQEBCwUAA4IBAQDToAochAiAORfwJ3gpLbWxFPWbvS6xeOsm3j82
ZghOv7As/3h2hW22i187wjvCB02Vxly/rH1/octf6zDj7pJQ5ruMiqjh6bF8qMbT
c8gtM+8oIlgfTsUj4VQrARX+2N9Vi+auqqneNxdiI6L7y6R0HK8aWQqWXkTn7UVK
qvooQ6agnSTvfBVZf8W0LYrGp9g/QmT/wEyBjQlJ9+H63Pbqw+TOVjo1PRy+9wtB
eRm9hRlVfxf5aZAPiJcbpGdhAd2/U2kzOjWQ270jlCG+MsXXkGfcsdIketVVLkD3
fY0iu5M+4C0tR6krfJlzn9bOMuztfRu/Ukz5hN4hieBDtDqT
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:21 2025 by rpki-client