Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFD3A2D0483111F0A493B0D5DAE4EC9C.roa
File: CFD3A2D0483111F0A493B0D5DAE4EC9C.roa (raw, json)
Hash identifier: 01svlTkLCEpVfS0L7PKJxCsXq+nedHV2xYrA2OB3uYg=
Subject key identifier: 95:BE:BA:A2:01:D7:15:4D:BF:C3:16:41:3E:1B:F5:69:22:64:9C:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018650
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFD3A2D0483111F0A493B0D5DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:38:43 +0000
ROA not before: Fri 13 Jun 2025 08:38:38 +0000
ROA not after: Sun 22 Jun 2025 08:38:38 +0000
asID: 138678
IP address blocks: 154.202.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99920 (0x18650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 08:38:38 2025 GMT
Not After : Jun 22 08:38:38 2025 GMT
Subject: CN=684be393-a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:fe:cc:a7:f2:42:a9:7b:ca:61:65:ff:7d:
19:e3:bd:c8:8b:74:84:20:92:13:fb:bb:a8:94:be:
c9:4d:9f:cb:24:06:9c:e3:6a:e6:fb:0b:c2:42:44:
d6:3f:54:32:e8:96:cc:bb:51:04:3d:38:70:66:89:
ea:b2:d6:b1:9a:7c:89:d7:ee:14:a4:fa:91:da:9a:
0a:a7:62:69:3f:4d:da:c0:df:a6:35:1c:3e:e8:e6:
31:e5:e4:c5:5f:71:8a:04:fc:7d:13:3c:bb:66:d4:
90:68:92:ea:db:ef:b7:1c:7d:2d:9b:e8:04:c1:10:
30:e8:c5:e4:e6:b8:f9:e5:99:be:df:70:91:07:ae:
b5:c9:5d:65:e7:4d:8c:ba:26:64:b7:de:ea:a8:9e:
0a:13:e0:55:91:d5:eb:d5:16:ed:72:e5:60:0a:01:
23:0f:af:ca:71:f4:4b:a7:f6:8c:7a:68:12:c8:ef:
eb:78:88:bf:5a:b0:88:82:41:f0:ad:90:57:e4:a7:
6c:7f:9c:40:70:dd:a5:49:94:2e:ca:81:01:a5:46:
b6:e4:a3:6e:25:43:18:74:5f:93:cf:13:8f:d4:ff:
4c:2b:ad:cb:75:7b:ff:10:02:93:c2:09:9b:e6:7f:
ff:ca:5f:56:a6:07:82:61:8e:3d:a2:d4:c3:5d:2a:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BE:BA:A2:01:D7:15:4D:BF:C3:16:41:3E:1B:F5:69:22:64:9C:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFD3A2D0483111F0A493B0D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.1.0/24
Signature Algorithm: sha256WithRSAEncryption
76:1b:51:66:b2:3c:18:40:66:c3:4b:a6:0e:6b:8b:99:d3:42:
5b:13:61:37:24:c0:f4:2f:af:1f:b5:32:e4:ed:07:64:53:b3:
0b:9a:ef:76:fa:ff:b8:aa:82:46:98:a2:02:7c:af:1c:36:d1:
6a:15:43:31:92:46:0c:69:78:d5:43:d7:0d:2d:e7:b0:c2:c4:
4c:f6:4c:80:a5:b7:54:29:09:c0:3c:3f:98:49:8b:66:16:ec:
a1:3d:82:73:54:dc:b9:6e:1f:64:8d:f9:a8:e6:33:35:46:cf:
db:1e:68:a6:be:ca:46:ca:66:13:28:6c:ad:7f:35:0e:cf:80:
e4:f4:88:2f:00:d2:68:82:30:a3:67:19:c0:ae:d3:06:f7:2d:
eb:a5:a9:d2:f2:f6:01:50:30:d1:6f:2b:52:bd:44:bb:b5:6a:
ae:a1:dd:b7:a7:de:f0:4e:34:44:a2:2f:98:d4:f3:13:da:ad:
00:32:c3:9d:df:98:9a:81:ec:51:e6:68:3b:46:19:7d:24:e9:
9b:11:66:1f:68:76:6c:f6:d6:9f:52:12:ae:e9:48:3c:4e:59:
f3:f8:0b:88:88:0e:0a:3f:2d:2c:fa:66:53:f3:66:53:c8:20:
6d:d2:30:7c:3a:5f:a7:a3:fa:3f:27:d6:31:17:af:88:15:fc:
eb:d6:92:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYZQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjEzMDgzODM4WhcNMjUwNjIyMDgzODM4WjAYMRYw
FAYDVQQDEw02ODRiZTM5My1hNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8cj+zKfyQql7ymFl/30Z473Ii3SEIJIT+7uolL7JTZ/LJAac42rm+wvC
QkTWP1Qy6JbMu1EEPThwZonqstaxmnyJ1+4UpPqR2poKp2JpP03awN+mNRw+6OYx
5eTFX3GKBPx9Ezy7ZtSQaJLq2++3HH0tm+gEwRAw6MXk5rj55Zm+33CRB661yV1l
502MuiZkt97qqJ4KE+BVkdXr1RbtcuVgCgEjD6/KcfRLp/aMemgSyO/reIi/WrCI
gkHwrZBX5Kdsf5xAcN2lSZQuyoEBpUa25KNuJUMYdF+TzxOP1P9MK63LdXv/EAKT
wgmb5n//yl9WpgeCYY49otTDXSohKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJW+
uqIB1xVNv8MWQT4b9WkiZJzPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRkQzQTJEMDQ4MzExMUYwQTQ5M0IwRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoBMA0GCSqGSIb3DQEB
CwUAA4IBAQB2G1FmsjwYQGbDS6YOa4uZ00JbE2E3JMD0L68ftTLk7QdkU7MLmu92
+v+4qoJGmKICfK8cNtFqFUMxkkYMaXjVQ9cNLeewwsRM9kyApbdUKQnAPD+YSYtm
FuyhPYJzVNy5bh9kjfmo5jM1Rs/bHmimvspGymYTKGytfzUOz4Dk9IgvANJogjCj
ZxnArtMG9y3rpanS8vYBUDDRbytSvUS7tWquod23p97wTjREoi+Y1PMT2q0AMsOd
35iagexR5mg7Rhl9JOmbEWYfaHZs9tafUhKu6Ug8Tlnz+AuIiA4KPy0s+mZT82ZT
yCBt0jB8Ol+no/o/J9YxF6+IFfzr1pJi
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:03:38 2025 by rpki-client