Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/918E166E67CA11F0A4C49EE7DAE4EC9C.roa
File: 918E166E67CA11F0A4C49EE7DAE4EC9C.roa (raw, json)
Hash identifier: V9FYH06+DGH/iH4L64Nj6ehuebG4p9eAmgGBQSTKxGw=
Subject key identifier: 67:03:79:38:45:35:53:19:1C:74:33:90:75:6E:5F:EB:D8:F6:C7:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/918E166E67CA11F0A4C49EE7DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:40:17 +0000
ROA not before: Wed 23 Jul 2025 13:40:12 +0000
ROA not after: Tue 09 Sep 2025 13:40:12 +0000
asID: 138915
IP address blocks: 154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.65.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102184 (0x18f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 13:40:12 2025 GMT
Not After : Sep 9 13:40:12 2025 GMT
Subject: CN=6880e641-206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:f2:be:8d:30:29:74:b8:30:7f:6d:81:b2:
e3:12:59:66:bd:df:79:b5:12:c7:db:aa:75:bf:66:
8f:a6:58:ce:92:66:2a:b4:42:41:db:80:27:8d:10:
ed:3d:2c:85:53:4f:fe:60:8e:03:a2:4b:db:45:52:
02:8f:6f:d5:f9:31:09:0b:0e:b4:b3:0c:de:cc:ee:
82:aa:3e:8d:73:1a:f9:4d:e0:ee:85:96:e9:7f:64:
ed:e6:08:39:9d:c7:c1:5a:4e:4b:39:c3:94:3c:be:
14:49:b3:64:1e:81:e6:27:2d:2f:21:fe:6b:49:f0:
ce:fc:09:ff:2d:ac:ef:43:2d:46:e8:f0:c9:07:7e:
95:e8:d6:44:2b:44:da:47:df:ea:bc:0c:51:ca:40:
32:0b:71:6c:7c:83:13:49:a3:70:c1:c9:40:4e:a5:
bb:d7:2c:65:3f:62:d8:7c:3e:be:d2:14:e6:db:40:
5d:97:ff:38:0a:27:ce:e9:c8:d1:d7:04:e5:c4:84:
52:23:1d:38:2d:ff:77:e4:33:ee:15:1f:9e:6b:1e:
8c:73:40:28:54:c8:76:4e:f3:c8:28:9a:19:67:11:
f6:72:f7:95:97:a5:9d:5c:13:93:cf:c0:12:7f:28:
2d:b1:6b:5e:7e:23:06:07:c6:d5:4b:6f:71:0e:89:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:79:38:45:35:53:19:1C:74:33:90:75:6E:5F:EB:D8:F6:C7:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/918E166E67CA11F0A4C49EE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.46.0-154.223.49.255
154.223.51.0-154.223.79.255
Signature Algorithm: sha256WithRSAEncryption
4a:fb:67:a7:60:eb:e2:5a:61:44:85:3d:7f:d1:1c:05:4e:39:
24:63:cc:b7:a9:63:65:a4:48:be:46:ab:c5:db:1a:e1:84:0c:
6e:42:a0:de:d9:0c:ff:a4:a9:af:83:b1:06:15:6b:e4:61:68:
8a:3b:dc:9d:30:89:fc:7c:ee:13:d5:29:59:96:c2:6c:9d:00:
a5:26:c9:fd:00:75:10:22:70:2c:7f:12:3b:43:b2:28:23:e2:
83:f3:b1:01:f0:ea:3c:cb:89:3d:03:05:cd:90:28:46:0a:d5:
a7:91:29:30:76:f4:47:a7:2f:98:9b:2d:c5:6c:cb:62:8c:53:
44:5e:df:25:83:af:43:cf:d3:da:24:7e:d9:0a:ce:50:01:85:
82:e9:5d:d0:65:1d:3f:35:95:0e:e4:fc:8c:84:67:98:2e:81:
0e:76:9d:b9:84:ab:67:5d:68:09:0f:6b:e7:4e:20:11:ba:ce:
e5:71:83:62:00:75:c2:6e:b9:6c:65:3d:48:de:02:28:55:62:
e2:91:18:ca:ce:00:96:7b:9d:eb:0a:d9:66:23:10:aa:f8:44:
eb:3b:5c:86:9d:57:4f:a5:1e:85:42:ce:c0:e5:a8:ca:b6:4f:
dd:94:df:b2:6b:45:cd:b0:42:64:43:6f:26:e9:1e:fc:a5:5a:
59:8b:6f:ec
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAY8oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIzMTM0MDEyWhcNMjUwOTA5MTM0MDEyWjAYMRYw
FAYDVQQDEw02ODgwZTY0MS0yMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLHyvo0wKXS4MH9tgbLjEllmvd95tRLH26p1v2aPpljOkmYqtEJB24An
jRDtPSyFU0/+YI4DokvbRVICj2/V+TEJCw60swzezO6Cqj6Ncxr5TeDuhZbpf2Tt
5gg5ncfBWk5LOcOUPL4USbNkHoHmJy0vIf5rSfDO/An/LazvQy1G6PDJB36V6NZE
K0TaR9/qvAxRykAyC3FsfIMTSaNwwclATqW71yxlP2LYfD6+0hTm20Bdl/84CifO
6cjR1wTlxIRSIx04Lf935DPuFR+eax6Mc0AoVMh2TvPIKJoZZxH2cveVl6WdXBOT
z8ASfygtsWtefiMGB8bVS29xDokXsQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFGcD
eThFNVMZHHQzkHVuX+vY9sctMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MThFMTY2RTY3Q0ExMUYwQTRDNDlFRTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGa3y4DBAGa3zAwDAME
AJrfMwMEBJrfQDANBgkqhkiG9w0BAQsFAAOCAQEASvtnp2Dr4lphRIU9f9EcBU45
JGPMt6ljZaRIvkarxdsa4YQMbkKg3tkM/6Spr4OxBhVr5GFoijvcnTCJ/HzuE9Up
WZbCbJ0ApSbJ/QB1ECJwLH8SO0OyKCPig/OxAfDqPMuJPQMFzZAoRgrVp5EpMHb0
R6cvmJstxWzLYoxTRF7fJYOvQ8/T2iR+2QrOUAGFguld0GUdPzWVDuT8jIRnmC6B
DnaduYSrZ11oCQ9r504gEbrO5XGDYgB1wm65bGU9SN4CKFVi4pEYys4Alnud6wrZ
ZiMQqvhE6ztchp1XT6UehULOwOWoyrZP3ZTfsmtFzbBCZENvJuke/KVaWYtv7A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:50 2025 by rpki-client