Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD54880A711F11F0B90823B3DAE4EC9C.roa
File: CD54880A711F11F0B90823B3DAE4EC9C.roa (raw, json)
Hash identifier: cgfF+XJoAfqYoA5VkEanPSLx80c36IA+1UqsNELzXr4=
Subject key identifier: B1:AE:C1:2E:D7:D3:79:7F:2E:B3:5F:AA:DB:62:65:93:7E:60:B9:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD54880A711F11F0B90823B3DAE4EC9C.roa
Signing time: Mon 04 Aug 2025 10:43:05 +0000
ROA not before: Mon 04 Aug 2025 10:43:01 +0000
ROA not after: Mon 08 Sep 2025 10:43:01 +0000
asID: 329029
IP address blocks: 154.90.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102562 (0x190a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 10:43:01 2025 GMT
Not After : Sep 8 10:43:01 2025 GMT
Subject: CN=68908eb9-360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:a4:5d:dd:d5:fc:ba:25:39:4f:36:3f:9f:
c1:66:0f:7e:d3:f7:cc:95:1d:09:fc:a7:99:a0:79:
75:6c:46:5e:3a:88:6a:98:0a:69:e1:2c:f3:eb:e6:
4b:de:d6:c0:ed:6d:83:97:b2:6e:f1:e8:40:de:0b:
24:4f:00:7a:86:77:91:10:fb:0a:41:41:1f:17:74:
7c:87:fb:ac:fd:cf:77:c1:71:90:2d:5e:93:8c:7d:
71:cb:3b:ff:da:e0:1d:05:fd:b0:79:ed:f8:a2:e6:
80:96:4d:b4:c4:76:01:c4:ec:72:38:89:64:76:6b:
5e:ad:d0:3a:f5:9d:98:44:ac:b7:0d:4d:3a:bb:09:
c7:48:73:26:ed:9f:8b:c4:7a:31:b9:43:bc:55:c5:
ae:61:d7:d4:06:79:e6:81:c9:39:2f:4b:d9:e7:e3:
95:8a:45:5f:14:22:c4:c7:6a:4f:26:de:ad:37:58:
fb:3b:01:1d:47:ed:c5:8f:c5:77:61:fe:79:57:57:
56:f0:f8:38:10:a1:ec:51:eb:2c:1f:00:70:f5:28:
31:21:18:6c:7f:00:10:0a:c7:24:13:47:2c:20:33:
f3:e0:f6:96:70:fc:a3:53:a1:ca:0c:ff:34:8c:90:
45:9e:f0:fa:63:a1:4f:90:55:0f:39:38:e6:1b:1a:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:C1:2E:D7:D3:79:7F:2E:B3:5F:AA:DB:62:65:93:7E:60:B9:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD54880A711F11F0B90823B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:d2:e9:7c:0c:3e:14:9c:58:c6:e6:62:b6:36:a8:d4:83:f7:
42:5d:f6:06:fb:ba:25:51:4e:ea:dc:6e:61:9b:ca:f3:a6:c6:
6d:b5:98:dd:72:19:cd:3c:1e:bc:3f:6c:41:63:a4:dc:ad:13:
9b:24:d4:33:4e:fc:70:64:84:c7:a2:bd:08:e4:f3:d7:12:bf:
37:95:3e:32:f1:37:b4:0e:fc:8e:b0:fc:1b:09:60:f2:81:2e:
f0:e3:f6:d8:3c:a3:49:50:a6:2b:8f:9b:ff:51:4c:dd:3e:2a:
9d:d6:06:c5:e8:6e:14:01:9b:f5:c2:4d:30:ea:ff:bc:07:8d:
63:66:ab:c8:2c:9b:1f:b9:55:30:da:08:9e:88:c3:62:c5:ae:
71:27:78:3e:52:6e:02:87:bd:e6:f8:a1:23:3b:98:e4:84:8e:
fa:4d:99:ea:2f:05:ba:ad:e0:2a:11:fa:0c:7e:b8:41:8b:0d:
ee:6e:37:f2:e3:6d:4f:c8:5c:6f:ee:c3:3c:fb:1e:d2:a6:44:
38:1b:77:e8:62:ab:a2:dc:6a:05:7b:25:62:dc:fd:09:70:1d:
a4:f8:4c:c7:8b:d9:b9:7b:bf:8c:bf:c6:75:41:8f:a8:27:10:
a3:16:fe:1c:fb:e7:92:dc:ef:46:a3:d6:ad:bb:2e:2b:e8:7b:
8f:29:10:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZCiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA0MTA0MzAxWhcNMjUwOTA4MTA0MzAxWjAYMRYw
FAYDVQQDEw02ODkwOGViOS0zNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq/qkXd3V/LolOU82P5/BZg9+0/fMlR0J/KeZoHl1bEZeOohqmApp4Szz
6+ZL3tbA7W2Dl7Ju8ehA3gskTwB6hneREPsKQUEfF3R8h/us/c93wXGQLV6TjH1x
yzv/2uAdBf2wee34ouaAlk20xHYBxOxyOIlkdmterdA69Z2YRKy3DU06uwnHSHMm
7Z+LxHoxuUO8VcWuYdfUBnnmgck5L0vZ5+OVikVfFCLEx2pPJt6tN1j7OwEdR+3F
j8V3Yf55V1dW8Pg4EKHsUessHwBw9SgxIRhsfwAQCsckE0csIDPz4PaWcPyjU6HK
DP80jJBFnvD6Y6FPkFUPOTjmGxr+uwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLGu
wS7X03l/LrNfqttiZZN+YLm4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDU0ODgwQTcxMUYxMUYwQjkwODIzQjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlquMA0GCSqGSIb3DQEB
CwUAA4IBAQDW0ul8DD4UnFjG5mK2NqjUg/dCXfYG+7olUU7q3G5hm8rzpsZttZjd
chnNPB68P2xBY6TcrRObJNQzTvxwZITHor0I5PPXEr83lT4y8Te0DvyOsPwbCWDy
gS7w4/bYPKNJUKYrj5v/UUzdPiqd1gbF6G4UAZv1wk0w6v+8B41jZqvILJsfuVUw
2gieiMNixa5xJ3g+Um4Ch73m+KEjO5jkhI76TZnqLwW6reAqEfoMfrhBiw3ubjfy
421PyFxv7sM8+x7SpkQ4G3foYqui3GoFeyVi3P0JcB2k+EzHi9m5e7+Mv8Z1QY+o
JxCjFv4c++eS3O9Go9atuy4r6HuPKRDn
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:23 2025 by rpki-client