Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF2E1E66CC11F092CA687ADAE4EC9C.roa
File: EADF2E1E66CC11F092CA687ADAE4EC9C.roa (raw, json)
Hash identifier: 6N1vk76mx4O5B+iE7kOXcUdzCLtIeuS7SJ8uNHpkjwc=
Subject key identifier: 1B:D9:9A:A6:DD:25:78:91:3B:F2:45:1B:84:48:AC:E7:70:F7:94:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018EBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF2E1E66CC11F092CA687ADAE4EC9C.roa
Signing time: Tue 22 Jul 2025 07:24:35 +0000
ROA not before: Tue 22 Jul 2025 07:24:30 +0000
ROA not after: Wed 27 Aug 2025 07:24:30 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102078 (0x18ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 07:24:30 2025 GMT
Not After : Aug 27 07:24:30 2025 GMT
Subject: CN=687f3cb3-3f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:62:89:6d:72:54:0e:f1:a7:f2:ed:ac:27:
d8:fd:47:46:f5:ef:c7:3d:ab:c8:68:70:be:c7:b4:
8f:1a:a7:98:db:a5:cc:ce:1f:5a:1f:c5:65:c1:c1:
26:0e:21:4a:84:c9:02:e9:47:eb:68:71:55:a0:65:
01:f4:d9:39:57:5c:9e:b5:6c:0b:4e:78:9e:2b:b9:
46:4a:90:80:66:e7:43:77:aa:3c:2a:64:cd:45:55:
c5:c8:40:4c:e5:15:4c:d0:3f:c6:a3:73:c3:ad:85:
ff:e8:5f:b4:c1:72:f1:1d:00:70:a0:18:98:95:98:
0d:bd:e9:af:b8:86:36:e9:d2:a5:02:ae:c2:91:03:
5f:ad:5d:ec:8e:20:a2:dc:3e:82:3f:10:e8:fe:f8:
f4:d8:50:1f:1b:11:dd:1d:00:6f:4d:25:04:e8:7c:
2a:a6:2d:6c:a5:06:57:17:e5:fa:f1:cc:3a:b2:25:
0d:6c:3b:9a:48:b2:36:20:b9:d2:a8:66:ce:e7:ba:
81:85:92:b5:16:b6:9f:f5:3d:36:d2:bd:3a:26:3d:
8d:35:bf:24:e7:a3:e5:7e:8b:33:7b:a9:e1:ce:06:
41:c8:a5:57:dd:34:61:54:ea:1a:f5:50:1a:49:4e:
13:4a:b8:aa:23:1b:21:74:d4:1f:f2:91:11:84:da:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D9:9A:A6:DD:25:78:91:3B:F2:45:1B:84:48:AC:E7:70:F7:94:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADF2E1E66CC11F092CA687ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:62:f8:d5:af:04:74:1f:07:c9:fa:9d:66:65:3e:73:97:60:
e3:4c:fc:82:5a:45:4e:b3:94:bd:73:7d:36:dd:9d:e2:2e:79:
8c:d2:8b:77:76:1a:b9:03:8b:bb:30:6a:66:a7:8a:80:db:c7:
f0:30:8a:7c:1d:46:b6:93:ac:29:d0:00:9f:2b:3e:d6:12:21:
21:54:5f:e5:2a:63:10:66:c2:be:35:a2:cc:dd:b7:c3:08:f4:
5d:7a:04:46:93:00:33:cc:29:ea:19:db:cb:c4:31:c0:ea:eb:
15:be:e2:f4:a1:4e:87:42:aa:98:ba:e7:c1:5d:ba:8a:c0:08:
e2:84:98:80:1d:9d:e9:bc:f2:09:02:54:cf:8e:ec:9e:df:41:
ef:43:2e:48:59:9d:f7:00:af:1c:ba:16:27:e0:1b:72:97:b3:
e8:cd:ba:3e:9f:91:d6:a3:9d:05:83:10:fd:c7:09:10:94:5c:
79:07:5f:67:b1:01:ed:28:4e:65:41:ff:b8:fd:8f:4d:78:ed:
20:8c:6b:f1:b5:58:5d:9d:d7:50:0c:a0:96:a2:b1:41:3b:94:
f8:51:d4:5c:39:f6:f6:33:e5:ab:1c:80:22:2b:a9:65:e2:45:
c9:76:3b:3a:20:05:e2:8a:c0:90:fd:0b:57:bc:b8:97:02:b1:
62:31:f0:bb
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAY6+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIyMDcyNDMwWhcNMjUwODI3MDcyNDMwWjAYMRYw
FAYDVQQDEw02ODdmM2NiMy0zZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyLZiiW1yVA7xp/LtrCfY/UdG9e/HPavIaHC+x7SPGqeY26XMzh9aH8Vl
wcEmDiFKhMkC6UfraHFVoGUB9Nk5V1yetWwLTnieK7lGSpCAZudDd6o8KmTNRVXF
yEBM5RVM0D/Go3PDrYX/6F+0wXLxHQBwoBiYlZgNvemvuIY26dKlAq7CkQNfrV3s
jiCi3D6CPxDo/vj02FAfGxHdHQBvTSUE6Hwqpi1spQZXF+X68cw6siUNbDuaSLI2
ILnSqGbO57qBhZK1Fraf9T020r06Jj2NNb8k56Plfosze6nhzgZByKVX3TRhVOoa
9VAaSU4TSriqIxshdNQf8pERhNoddQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFBvZ
mqbdJXiRO/JFG4RIrOdw95R/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQURGMkUxRTY2Q0MxMUYwOTJDQTY4N0FEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlHIAwQEmlMwAwQAmloA
MA0GCSqGSIb3DQEBCwUAA4IBAQBZYvjVrwR0HwfJ+p1mZT5zl2DjTPyCWkVOs5S9
c3023Z3iLnmM0ot3dhq5A4u7MGpmp4qA28fwMIp8HUa2k6wp0ACfKz7WEiEhVF/l
KmMQZsK+NaLM3bfDCPRdegRGkwAzzCnqGdvLxDHA6usVvuL0oU6HQqqYuufBXbqK
wAjihJiAHZ3pvPIJAlTPjuye30HvQy5IWZ33AK8cuhYn4Btyl7Pozbo+n5HWo50F
gxD9xwkQlFx5B19nsQHtKE5lQf+4/Y9NeO0gjGvxtVhdnddQDKCWorFBO5T4UdRc
Ofb2M+WrHIAiK6ll4kXJdjs6IAXiisCQ/QtXvLiXArFiMfC7
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:25:21 2025 by rpki-client