Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9245760694C11F0B1544ABFDAE4EC9C.roa
File: F9245760694C11F0B1544ABFDAE4EC9C.roa (raw, json)
Hash identifier: 9qeTFDgwFJpLVDKhjkZRQYxkLq1KiARIpXO8AfB5knY=
Subject key identifier: 80:F7:4A:B6:91:D6:FD:38:B0:4C:E5:E6:3E:5A:15:08:82:B7:84:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9245760694C11F0B1544ABFDAE4EC9C.roa
Signing time: Fri 25 Jul 2025 11:46:17 +0000
ROA not before: Fri 25 Jul 2025 11:46:12 +0000
ROA not after: Thu 04 Sep 2025 11:46:12 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102323 (0x18fb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 11:46:12 2025 GMT
Not After : Sep 4 11:46:12 2025 GMT
Subject: CN=68836e89-c7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:25:e6:e1:61:65:98:d4:57:6e:59:18:5b:
f9:88:c4:51:ca:62:ae:9e:72:13:b9:9f:0e:9e:6f:
e5:97:50:18:a3:d1:a7:6a:f7:94:6b:5d:44:a5:67:
67:21:20:56:93:0a:e3:51:68:e2:a2:7c:5f:a9:8a:
0c:0e:86:e1:f1:4e:e7:f0:e4:d7:c6:79:af:7a:b4:
5c:17:f7:fa:f6:89:60:90:af:ce:39:38:2b:f2:4d:
35:e5:64:bc:5a:60:97:95:0f:1d:67:69:e9:bd:c7:
e8:dd:fa:ad:c8:d7:8f:88:7b:0b:84:60:f8:56:e4:
f5:bf:44:5a:1a:53:05:f7:45:6e:c6:48:74:b8:cf:
28:26:7c:27:d5:7f:e2:c0:81:4b:e0:e8:72:3e:a2:
1a:c3:08:13:dd:6a:8c:cc:35:5d:c0:7f:8c:5d:67:
9d:74:63:95:e3:1c:9a:2c:66:a7:15:52:26:57:cd:
0c:26:78:32:e4:51:d4:6c:9e:93:d2:f2:f4:83:36:
63:b4:79:27:9c:79:b1:d7:c5:09:bc:cc:f1:dc:d5:
6d:ef:5e:cd:fa:f5:26:67:d9:b8:cb:60:1c:e1:d3:
42:2f:ce:8e:05:6b:f5:cb:ed:47:bf:ad:8b:a2:cb:
70:8f:cf:68:fd:42:8f:1f:5a:e8:c0:63:35:07:61:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:4A:B6:91:D6:FD:38:B0:4C:E5:E6:3E:5A:15:08:82:B7:84:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9245760694C11F0B1544ABFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:1b:70:b1:4a:52:19:20:95:08:10:da:86:2f:81:b7:e2:13:
d2:ff:45:ed:b3:2a:9f:cd:f4:ee:29:a5:5d:bb:b3:de:04:f3:
d3:93:f6:d1:fd:36:70:58:20:b9:f2:70:74:e2:02:68:03:c2:
f2:e9:69:b3:2b:b7:f6:11:a1:8f:77:fa:e5:1b:5a:68:e9:80:
bc:50:59:ac:7b:a7:0f:bc:d9:ce:25:b9:98:eb:5a:3b:25:ef:
e5:56:4c:1b:62:0d:81:73:2f:e0:a8:ee:0f:4c:a5:fa:db:cc:
70:6c:36:ea:30:b3:25:36:95:31:02:28:11:38:06:d5:c8:fd:
4e:ab:de:e9:fc:6b:92:1b:88:cc:a7:37:c2:73:e6:6e:3c:ba:
06:c5:8d:2f:fa:1c:34:23:1b:2b:64:b0:91:b1:39:00:bd:a3:
c4:34:49:72:11:a0:bf:6e:16:d1:fb:5e:8c:f3:84:d1:7e:77:
de:9d:8b:4f:43:5a:10:66:1d:88:99:b9:1f:56:ac:88:fd:7b:
ce:a9:0a:e6:d0:09:c3:33:53:4e:43:a9:04:43:22:47:a9:11:
11:a6:79:e1:57:fd:6a:39:65:7d:8d:e6:ca:9e:d1:ee:4f:c5:
3a:3d:60:11:20:f4:20:70:39:af:a1:6d:49:c9:df:92:9a:0d:
46:fb:f1:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY+zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzI1MTE0NjEyWhcNMjUwOTA0MTE0NjEyWjAYMRYw
FAYDVQQDEw02ODgzNmU4OS1jN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzusl5uFhZZjUV25ZGFv5iMRRymKunnITuZ8Onm/ll1AYo9GnaveUa11E
pWdnISBWkwrjUWjionxfqYoMDobh8U7n8OTXxnmverRcF/f69olgkK/OOTgr8k01
5WS8WmCXlQ8dZ2npvcfo3fqtyNePiHsLhGD4VuT1v0RaGlMF90Vuxkh0uM8oJnwn
1X/iwIFL4OhyPqIawwgT3WqMzDVdwH+MXWeddGOV4xyaLGanFVImV80MJngy5FHU
bJ6T0vL0gzZjtHknnHmx18UJvMzx3NVt717N+vUmZ9m4y2Ac4dNCL86OBWv1y+1H
v62Lostwj89o/UKPH1rowGM1B2F0zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFID3
SraR1v04sEzl5j5aFQiCt4SuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTI0NTc2MDY5NEMxMUYwQjE1NDRBQkZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmljAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEG3CxSlIZIJUIENqGL4G34hPS/0XtsyqfzfTuKaVdu7PeBPPTk/bR
/TZwWCC58nB04gJoA8Ly6WmzK7f2EaGPd/rlG1po6YC8UFmse6cPvNnOJbmY61o7
Je/lVkwbYg2Bcy/gqO4PTKX628xwbDbqMLMlNpUxAigROAbVyP1Oq97p/GuSG4jM
pzfCc+ZuPLoGxY0v+hw0IxsrZLCRsTkAvaPENElyEaC/bhbR+16M84TRfnfenYtP
Q1oQZh2ImbkfVqyI/XvOqQrm0AnDM1NOQ6kEQyJHqRERpnnhV/1qOWV9jebKntHu
T8U6PWARIPQgcDmvoW1Jyd+Smg1G+/G1
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:17 2025 by rpki-client