Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E31C24E6FE611F0B5C78DAFDAE4EC9C.roa
File: 8E31C24E6FE611F0B5C78DAFDAE4EC9C.roa (raw, json)
Hash identifier: p+BlmxY5N3RPVCE4Z2DSq+Ygn0NP9NWhHX+4qD9PeUU=
Subject key identifier: 65:66:F1:2C:7A:BD:B2:60:7E:61:11:F0:B2:EF:C9:DB:EE:E7:F3:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01907E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E31C24E6FE611F0B5C78DAFDAE4EC9C.roa
Signing time: Sat 02 Aug 2025 21:20:47 +0000
ROA not before: Sat 02 Aug 2025 21:20:42 +0000
ROA not after: Wed 24 Sep 2025 21:20:42 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
154.89.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102526 (0x1907e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 21:20:42 2025 GMT
Not After : Sep 24 21:20:42 2025 GMT
Subject: CN=688e812f-2496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:4c:55:0a:5a:16:97:92:2f:7f:ef:0f:87:
fd:41:bc:74:f2:ea:7a:ad:75:5e:6d:f5:7c:fb:f2:
06:f0:7f:46:87:49:91:9b:ee:21:30:5a:e0:05:d9:
a3:37:9a:4f:2a:e2:9d:fa:9d:6d:94:29:6a:3c:f6:
6e:de:b0:ae:d3:14:00:31:04:52:ce:3e:4e:8d:97:
7a:2b:6e:08:fc:d9:27:3e:e7:70:df:d3:da:94:ca:
2e:59:b9:6d:ea:30:d0:8c:94:51:2a:3d:c0:ce:dd:
d3:4e:36:e6:f0:36:62:21:97:2a:a8:25:7a:f7:fc:
21:b1:be:54:b7:25:fd:c0:96:68:b5:a6:1d:e6:11:
0d:a9:e4:6c:f5:36:30:68:7a:1b:52:76:a3:d7:ca:
52:c4:3d:24:c6:f5:b4:be:73:c9:67:61:a0:2a:97:
35:79:81:79:c8:21:11:60:e2:11:49:0d:68:d2:4b:
54:f4:1e:d6:93:21:43:79:d5:02:e1:da:74:68:b7:
2c:42:aa:25:fb:af:e0:72:c8:f7:d8:f7:be:80:e0:
f0:d4:f6:76:a5:a3:d5:22:5e:65:6d:91:84:28:d0:
e5:15:69:73:14:31:f5:93:d9:0c:f7:cc:c1:00:cf:
53:6e:07:49:a8:5b:e2:3b:6b:05:57:1a:30:18:3f:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:F1:2C:7A:BD:B2:60:7E:61:11:F0:B2:EF:C9:DB:EE:E7:F3:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E31C24E6FE611F0B5C78DAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
154.89.200.0/21
Signature Algorithm: sha256WithRSAEncryption
be:60:e4:54:f3:0a:96:33:7b:55:f7:2a:df:80:8f:86:5f:fb:
5f:d7:a0:41:87:ce:5a:1b:77:4f:c6:88:03:6b:6c:c4:78:24:
81:64:27:20:ff:30:9a:c3:05:85:f3:fb:6f:82:46:d1:fb:62:
11:ab:d3:f7:5e:48:18:86:e3:f2:7b:16:b5:c4:0e:c4:a2:b6:
69:5e:fa:00:4e:97:28:79:48:2c:c5:12:be:99:2e:90:ec:00:
3b:66:aa:4a:e6:27:f3:0f:ee:52:08:9b:d2:ba:11:80:76:7a:
ca:b9:a8:8c:a5:08:3c:20:ab:9c:de:62:64:b8:8b:dc:32:43:
c2:b9:b6:f2:56:cb:e7:87:d6:4c:67:c0:3b:2f:ac:ef:5c:d9:
8b:d8:40:bd:9a:8b:28:ef:2f:21:92:3f:3c:c2:ce:34:57:a4:
f1:8c:ed:12:eb:a4:f3:2a:b5:ed:38:f1:f4:16:a8:06:d3:76:
85:de:ae:96:02:d9:f1:df:c6:f2:32:39:fb:c2:b1:63:c0:fd:
60:95:7d:43:a7:29:10:ca:d0:f3:33:c8:c8:67:8e:8e:70:2f:
75:ca:b5:1d:47:f2:d4:19:fe:14:c3:ff:34:f7:ab:6f:79:2b:
1d:50:ce:c4:e8:6b:55:23:ab:d7:e2:79:1c:e5:35:ec:b5:a4:
1c:dc:0b:bc
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZB+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODAyMjEyMDQyWhcNMjUwOTI0MjEyMDQyWjAYMRYw
FAYDVQQDEw02ODhlODEyZi0yNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxgpMVQpaFpeSL3/vD4f9Qbx08up6rXVebfV8+/IG8H9Gh0mRm+4hMFrg
BdmjN5pPKuKd+p1tlClqPPZu3rCu0xQAMQRSzj5OjZd6K24I/NknPudw39PalMou
Wblt6jDQjJRRKj3Azt3TTjbm8DZiIZcqqCV69/whsb5UtyX9wJZotaYd5hENqeRs
9TYwaHobUnaj18pSxD0kxvW0vnPJZ2GgKpc1eYF5yCERYOIRSQ1o0ktU9B7WkyFD
edUC4dp0aLcsQqol+6/gcsj32Pe+gODw1PZ2paPVIl5lbZGEKNDlFWlzFDH1k9kM
98zBAM9TbgdJqFviO2sFVxowGD+AkwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGVm
8Sx6vbJgfmER8LLvydvu5/MMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTMxQzI0RTZGRTYxMUYwQjVDNzhEQUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmlmgAwQDmlnIMA0GCSqG
SIb3DQEBCwUAA4IBAQC+YORU8wqWM3tV9yrfgI+GX/tf16BBh85aG3dPxogDa2zE
eCSBZCcg/zCawwWF8/tvgkbR+2IRq9P3XkgYhuPyexa1xA7EorZpXvoATpcoeUgs
xRK+mS6Q7AA7ZqpK5ifzD+5SCJvSuhGAdnrKuaiMpQg8IKuc3mJkuIvcMkPCubby
Vsvnh9ZMZ8A7L6zvXNmL2EC9moso7y8hkj88ws40V6TxjO0S66TzKrXtOPH0FqgG
03aF3q6WAtnx38byMjn7wrFjwP1glX1DpykQytDzM8jIZ46OcC91yrUdR/LUGf4U
w/8096tveSsdUM7E6GtVI6vX4nkc5TXstaQc3Au8
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:54 2025 by rpki-client