Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BA685C504011F0B295ACC3DAE4EC9C.roa
File: 08BA685C504011F0B295ACC3DAE4EC9C.roa (raw, json)
Hash identifier: EU6MZ5twG44hCSto0aO+I8r4D7L7QplND+jsZ/uKlpc=
Subject key identifier: A4:5A:2D:33:BE:88:A2:30:CF:66:26:D4:8B:1B:C6:1D:1E:5D:41:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018805
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BA685C504011F0B295ACC3DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 14:40:40 +0000
ROA not before: Mon 23 Jun 2025 14:40:36 +0000
ROA not after: Wed 30 Jul 2025 14:40:36 +0000
asID: 401701
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 10:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100357 (0x18805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 14:40:36 2025 GMT
Not After : Jul 30 14:40:36 2025 GMT
Subject: CN=68596768-0897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:34:17:c0:ae:7e:0a:8d:b7:7d:15:01:b0:
96:12:65:fd:b1:98:93:d9:4e:10:8c:01:59:50:6e:
85:a9:89:b8:50:9f:58:d1:96:d9:25:14:0f:0c:cd:
f6:23:a6:66:48:70:3a:e0:8e:1a:c9:eb:a8:fa:92:
ae:d0:88:46:4e:f5:97:5c:cf:ed:d4:a7:35:a5:c9:
79:89:2a:00:62:87:df:03:41:76:67:71:40:03:0c:
71:6e:61:38:ec:22:41:be:b1:5a:de:42:be:79:1e:
94:e0:df:89:be:43:96:de:bd:ee:c5:7b:2f:70:32:
84:6b:cf:18:40:30:7a:fc:a8:1d:84:a2:22:48:5a:
24:8f:67:e6:b1:72:da:cc:87:fa:a3:56:9a:0b:ff:
db:ed:c6:1d:a4:79:2c:00:06:90:1c:e6:4d:d2:01:
d0:f2:f9:87:8b:30:87:e6:7b:0d:f4:d0:d7:99:67:
85:e8:17:7f:a9:2e:b1:60:8d:d3:ae:a9:67:0e:71:
83:fa:62:ce:5a:07:38:11:be:4b:de:04:0d:ae:47:
df:0a:a9:a0:41:64:ac:13:f2:cb:20:16:97:78:56:
18:15:d9:15:77:48:ee:67:f3:60:b4:29:e9:68:af:
61:a5:8a:21:2f:ff:5a:38:43:5a:db:ad:0e:10:79:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:2D:33:BE:88:A2:30:CF:66:26:D4:8B:1B:C6:1D:1E:5D:41:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BA685C504011F0B295ACC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
52:dc:ac:97:81:26:9a:f4:93:6e:1f:4b:0e:6c:35:9d:fe:8b:
cb:c4:42:eb:93:02:f1:6d:90:43:94:fc:e3:6b:a7:be:95:c4:
86:87:1b:68:42:16:a3:7a:04:c2:89:cd:17:77:80:66:ac:52:
1e:0e:1b:9b:c7:3b:aa:b4:0a:b7:49:2d:2f:f0:fd:37:98:36:
74:bd:ef:23:36:e3:3c:07:65:6a:4e:1a:a1:fe:ff:a4:e6:f6:
05:20:04:4a:c9:55:86:65:e8:bb:20:17:e5:63:f0:43:ce:70:
ab:50:4f:bb:58:85:69:f6:12:be:3c:0d:39:af:60:c7:fc:fa:
9d:3e:cf:59:b4:1b:0a:fa:d2:d6:05:6c:63:73:23:2f:7d:13:
b6:e2:af:5e:52:b2:d1:a4:56:0b:fb:2d:3d:43:a4:6a:c1:85:
e6:31:f5:33:41:5d:70:94:98:a1:82:1b:9d:e6:54:86:6a:6e:
de:65:3c:12:e0:90:c3:8f:7e:52:f0:9b:05:16:b3:b9:05:c7:
36:5a:a9:79:8f:83:af:89:d6:09:4e:42:02:4a:5d:18:89:94:
55:d7:42:95:9e:7a:34:86:7a:3b:ca:1c:13:9e:b3:f2:dc:44:
3b:ae:80:94:7d:8f:cf:a4:54:7d:50:9f:3e:32:8e:2a:1f:91:
b6:72:92:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYgFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIzMTQ0MDM2WhcNMjUwNzMwMTQ0MDM2WjAYMRYw
FAYDVQQDEw02ODU5Njc2OC0wODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt5g0F8CufgqNt30VAbCWEmX9sZiT2U4QjAFZUG6FqYm4UJ9Y0ZbZJRQP
DM32I6ZmSHA64I4ayeuo+pKu0IhGTvWXXM/t1Kc1pcl5iSoAYoffA0F2Z3FAAwxx
bmE47CJBvrFa3kK+eR6U4N+JvkOW3r3uxXsvcDKEa88YQDB6/KgdhKIiSFokj2fm
sXLazIf6o1aaC//b7cYdpHksAAaQHOZN0gHQ8vmHizCH5nsN9NDXmWeF6Bd/qS6x
YI3TrqlnDnGD+mLOWgc4Eb5L3gQNrkffCqmgQWSsE/LLIBaXeFYYFdkVd0juZ/Ng
tCnpaK9hpYohL/9aOENa260OEHlVHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKRa
LTO+iKIwz2Ym1Isbxh0eXUGZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOEJBNjg1QzUwNDAxMUYwQjI5NUFDQzNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS3KyXgSaa9JNuH0sObDWd/ovLxELrkwLxbZBDlPzja6e+lcSGhxto
QhajegTCic0Xd4BmrFIeDhubxzuqtAq3SS0v8P03mDZ0ve8jNuM8B2VqThqh/v+k
5vYFIARKyVWGZei7IBflY/BDznCrUE+7WIVp9hK+PA05r2DH/PqdPs9ZtBsK+tLW
BWxjcyMvfRO24q9eUrLRpFYL+y09Q6RqwYXmMfUzQV1wlJihghud5lSGam7eZTwS
4JDDj35S8JsFFrO5Bcc2Wql5j4OvidYJTkICSl0YiZRV10KVnno0hno7yhwTnrPy
3EQ7roCUfY/PpFR9UJ8+Mo4qH5G2cpIv
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:42:58 2025 by rpki-client