Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7743700706411F0AE5DB1F0DAE4EC9C.roa
File: E7743700706411F0AE5DB1F0DAE4EC9C.roa (raw, json)
Hash identifier: CdhYKoEEs6St40hwXm3xKzImHKtYNfR1l+6P1fD1o74=
Subject key identifier: 1A:43:3A:D7:79:A4:72:A1:B0:93:53:3B:CA:FF:9C:DF:38:C8:D4:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019097
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7743700706411F0AE5DB1F0DAE4EC9C.roa
Signing time: Sun 03 Aug 2025 12:25:13 +0000
ROA not before: Sun 03 Aug 2025 12:25:09 +0000
ROA not after: Sat 13 Sep 2025 12:25:09 +0000
asID: 272854
IP address blocks: 154.194.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102551 (0x19097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 12:25:09 2025 GMT
Not After : Sep 13 12:25:09 2025 GMT
Subject: CN=688f5529-b000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:37:a3:78:9a:1c:19:12:0f:33:e0:b8:32:
e9:f5:83:93:43:e1:47:9c:b8:c6:8e:c3:b3:82:00:
6d:4d:87:c2:9a:b2:05:56:90:01:67:7d:a4:84:f0:
d0:5e:d8:76:8e:e3:84:11:4b:78:ad:b8:e6:11:4e:
4b:6b:f7:69:f8:8c:eb:a4:9e:4c:d4:97:8e:a4:60:
bf:f3:2e:59:2d:d4:b9:0e:23:2b:fd:33:bb:4f:8b:
e0:59:e2:7c:6c:9b:61:25:0e:4f:ab:5c:82:de:19:
fb:22:de:d3:6a:77:fb:1a:9e:d6:90:b1:85:45:85:
b9:c7:d8:48:d2:13:96:3d:d4:ca:bb:6e:02:11:fe:
19:5c:30:0b:73:bd:8a:be:fe:e3:27:91:99:4f:16:
93:77:6f:3a:f9:50:c1:27:55:3e:11:46:46:19:aa:
94:29:01:3d:42:65:52:b7:61:20:76:75:5b:39:14:
02:0e:cd:54:19:a6:c8:33:16:36:af:23:70:ea:cd:
7f:ec:a6:71:68:d7:9e:6f:96:5a:c4:fb:f3:de:76:
27:44:ac:61:6a:47:ea:76:20:56:df:04:e7:7c:56:
c5:5b:22:76:b6:e7:0f:8e:d2:48:6c:b6:3c:b8:c2:
fb:9f:73:30:4c:41:b1:5c:96:f6:57:44:2c:bf:16:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:3A:D7:79:A4:72:A1:B0:93:53:3B:CA:FF:9C:DF:38:C8:D4:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7743700706411F0AE5DB1F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9f:36:18:7e:48:04:6e:ac:62:cf:14:7d:77:a0:b0:c0:f9:
57:1e:14:b5:d1:73:6c:cf:88:a3:f7:ec:0b:b6:a1:f8:a9:03:
de:6c:f8:b4:d6:48:d4:89:3d:8c:d8:c6:0b:f6:66:b3:99:28:
92:aa:11:7b:e6:6f:d5:a5:65:82:cc:e5:ae:bd:3a:65:3e:5b:
d6:d0:42:d0:c0:c4:d9:42:3a:3d:0f:39:58:77:bd:44:51:9c:
45:4e:fe:54:67:6f:ec:34:a4:b2:cc:3c:e3:db:80:9a:76:b3:
54:14:1a:09:61:dd:d4:cd:db:2c:93:c7:8e:7b:e5:34:d9:a1:
ec:31:44:4a:6e:36:64:09:33:6f:29:82:85:4d:1c:47:87:8a:
82:f6:a8:f0:2c:22:cf:73:8c:df:b0:f1:cd:a8:ed:e8:54:7c:
64:0d:f9:39:89:b9:57:24:d2:fc:d7:6a:6e:61:6f:a9:ea:48:
9a:29:82:06:47:cc:a7:65:a1:e4:6e:0a:0c:41:fd:59:84:2c:
07:59:5f:67:f4:d1:1e:d3:99:c5:cd:a6:50:3b:04:b4:4d:a7:
9d:8e:cc:bb:d5:60:e2:72:49:34:6c:08:fe:61:b2:7b:69:53:
a7:7c:a9:f5:56:ac:26:8c:a5:05:21:4e:14:e4:7b:69:75:38:
a8:56:6a:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZCXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODAzMTIyNTA5WhcNMjUwOTEzMTIyNTA5WjAYMRYw
FAYDVQQDEw02ODhmNTUyOS1iMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy5Q3o3iaHBkSDzPguDLp9YOTQ+FHnLjGjsOzggBtTYfCmrIFVpABZ32k
hPDQXth2juOEEUt4rbjmEU5La/dp+IzrpJ5M1JeOpGC/8y5ZLdS5DiMr/TO7T4vg
WeJ8bJthJQ5Pq1yC3hn7It7Tanf7Gp7WkLGFRYW5x9hI0hOWPdTKu24CEf4ZXDAL
c72Kvv7jJ5GZTxaTd286+VDBJ1U+EUZGGaqUKQE9QmVSt2EgdnVbORQCDs1UGabI
MxY2ryNw6s1/7KZxaNeeb5ZaxPvz3nYnRKxhakfqdiBW3wTnfFbFWyJ2tucPjtJI
bLY8uML7n3MwTEGxXJb2V0QsvxbgcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBpD
Otd5pHKhsJNTO8r/nN84yNRQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNzc0MzcwMDcwNjQxMUYwQUU1REIxRjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIsMA0GCSqGSIb3DQEB
CwUAA4IBAQCCnzYYfkgEbqxizxR9d6CwwPlXHhS10XNsz4ij9+wLtqH4qQPebPi0
1kjUiT2M2MYL9mazmSiSqhF75m/VpWWCzOWuvTplPlvW0ELQwMTZQjo9DzlYd71E
UZxFTv5UZ2/sNKSyzDzj24CadrNUFBoJYd3Uzdssk8eOe+U02aHsMURKbjZkCTNv
KYKFTRxHh4qC9qjwLCLPc4zfsPHNqO3oVHxkDfk5iblXJNL812puYW+p6kiaKYIG
R8ynZaHkbgoMQf1ZhCwHWV9n9NEe05nFzaZQOwS0Taedjsy71WDickk0bAj+YbJ7
aVOnfKn1VqwmjKUFIU4U5HtpdTioVmpI
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:44 2025 by rpki-client