Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD5951666D611F0A6ACEDB7DAE4EC9C.roa
File: 9FD5951666D611F0A6ACEDB7DAE4EC9C.roa (raw, json)
Hash identifier: IWlG973vHjKhRxIoa9CC+ptC69zEVC90QVYrz1LjZjU=
Subject key identifier: ED:AE:1E:94:FD:FD:22:07:41:18:84:5E:E0:C1:0E:43:E5:D8:30:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD5951666D611F0A6ACEDB7DAE4EC9C.roa
Signing time: Tue 22 Jul 2025 08:34:04 +0000
ROA not before: Tue 22 Jul 2025 08:34:00 +0000
ROA not after: Sat 30 Aug 2025 08:34:00 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102088 (0x18ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 08:34:00 2025 GMT
Not After : Aug 30 08:34:00 2025 GMT
Subject: CN=687f4cfc-8aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:ad:c4:dc:df:ee:b1:a2:f1:4a:f8:0c:29:
11:12:7a:a9:3c:54:a3:9b:d9:1f:9c:22:e4:fe:28:
4b:87:c6:dd:18:fd:88:f3:cc:54:8e:fa:b2:ea:fe:
61:b3:4b:41:6b:5c:ab:b5:d5:bb:ae:6f:1c:6d:d0:
51:4f:e8:04:22:b6:df:8a:6a:44:7f:ba:6d:29:58:
10:0c:f8:3b:0e:cf:2f:e8:da:f4:e2:43:64:11:e4:
31:71:3f:55:64:0c:96:e5:79:5a:77:d5:5f:6b:b1:
be:c8:1d:29:0a:70:d1:ff:24:d5:3d:60:fe:cd:bf:
c1:cd:0b:3b:c9:7b:0a:65:03:2a:a7:b7:40:85:db:
bd:97:2e:48:e1:e3:c5:69:1f:b2:8c:d7:43:40:4e:
c3:93:a7:8c:34:ea:61:c1:37:29:80:48:d3:99:18:
ba:0f:ed:bd:b2:9f:22:8f:0d:6f:c7:63:2f:b7:cb:
aa:57:0e:84:51:53:67:f4:b7:cc:8e:d9:00:e3:f7:
2e:6c:78:3c:c1:ff:3e:dc:18:9d:01:ce:6b:bf:5c:
19:ca:87:6b:15:84:82:95:7a:e8:85:f3:83:de:b2:
5a:50:0d:c8:78:14:d5:6a:e0:27:15:f7:22:f3:07:
58:1c:08:77:43:ad:10:b2:e3:1a:27:88:ba:f4:c5:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:1E:94:FD:FD:22:07:41:18:84:5E:E0:C1:0E:43:E5:D8:30:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FD5951666D611F0A6ACEDB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:33:92:e9:82:c9:2f:34:df:fc:bd:64:6d:df:51:0e:96:06:
a4:c3:2d:2e:92:c7:40:9c:b5:0c:a8:e8:fe:32:d5:b6:93:fc:
55:62:05:cd:68:e3:ad:66:0b:14:b1:34:73:45:30:8f:68:e0:
16:55:62:cd:16:94:3c:61:59:26:50:66:92:a6:0a:51:c0:a8:
aa:92:10:06:b4:29:d1:9c:b3:2c:af:bc:2d:ea:2a:19:0a:ee:
34:ea:5d:e5:23:8e:ce:41:42:8f:29:eb:85:ca:6e:8b:8d:ae:
fd:1b:f8:2e:74:19:12:4a:43:5c:22:91:6e:e3:cf:a2:3d:72:
10:b6:df:52:e8:8f:a2:37:5c:15:ad:dc:59:5c:6a:6c:d1:44:
7e:21:5e:9c:e8:73:0f:28:9e:4c:0a:a2:f7:29:22:54:f8:09:
d7:07:c3:a3:82:7a:a0:18:7d:7e:32:c1:da:ae:7d:67:6c:ed:
2c:88:5c:bf:4c:12:42:5e:7f:29:ed:3a:14:d5:29:16:a2:d1:
8a:db:14:c1:0d:c9:ca:08:a1:63:a5:9e:14:d8:e3:d2:90:fe:
49:18:23:36:f7:ad:2c:82:f1:18:a0:1e:05:7e:06:7e:67:11:
0d:c8:2c:b2:d2:90:24:2a:5e:67:ee:b8:9a:41:84:64:99:dc:
3c:f7:8d:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY7IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIyMDgzNDAwWhcNMjUwODMwMDgzNDAwWjAYMRYw
FAYDVQQDEw02ODdmNGNmYy04YWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5etxNzf7rGi8Ur4DCkREnqpPFSjm9kfnCLk/ihLh8bdGP2I88xUjvqy
6v5hs0tBa1yrtdW7rm8cbdBRT+gEIrbfimpEf7ptKVgQDPg7Ds8v6Nr04kNkEeQx
cT9VZAyW5Xlad9Vfa7G+yB0pCnDR/yTVPWD+zb/BzQs7yXsKZQMqp7dAhdu9ly5I
4ePFaR+yjNdDQE7Dk6eMNOphwTcpgEjTmRi6D+29sp8ijw1vx2Mvt8uqVw6EUVNn
9LfMjtkA4/cubHg8wf8+3BidAc5rv1wZyodrFYSClXrohfOD3rJaUA3IeBTVauAn
Ffci8wdYHAh3Q60QsuMaJ4i69MUnbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO2u
HpT9/SIHQRiEXuDBDkPl2DDnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RkQ1OTUxNjY2RDYxMUYwQTZBQ0VEQjdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsM5LpgskvNN/8vWRt31EOlgakwy0uksdAnLUMqOj+MtW2k/xVYgXN
aOOtZgsUsTRzRTCPaOAWVWLNFpQ8YVkmUGaSpgpRwKiqkhAGtCnRnLMsr7wt6ioZ
Cu406l3lI47OQUKPKeuFym6Lja79G/gudBkSSkNcIpFu48+iPXIQtt9S6I+iN1wV
rdxZXGps0UR+IV6c6HMPKJ5MCqL3KSJU+AnXB8OjgnqgGH1+MsHarn1nbO0siFy/
TBJCXn8p7ToU1SkWotGK2xTBDcnKCKFjpZ4U2OPSkP5JGCM2960sgvEYoB4FfgZ+
ZxENyCyy0pAkKl5n7riaQYRkmdw8940J
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:58 2025 by rpki-client