Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9431B27E9111F0AA3370E6DAE4EC9C.roa
File: 1C9431B27E9111F0AA3370E6DAE4EC9C.roa (raw, json)
Hash identifier: AIwOHbNLJCMrU1zNvwBfFfeqEDlotgQud69tFInIbNQ=
Subject key identifier: 22:D7:D4:81:83:13:BE:35:3A:4A:56:C2:E3:A8:71:C1:B2:AC:18:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019368
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9431B27E9111F0AA3370E6DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 13:16:57 +0000
ROA not before: Thu 21 Aug 2025 13:16:52 +0000
ROA not after: Sat 27 Sep 2025 13:16:52 +0000
asID: 395793
IP address blocks: 154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103272 (0x19368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 13:16:52 2025 GMT
Not After : Sep 27 13:16:52 2025 GMT
Subject: CN=68a71c49-e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:6b:16:e4:78:53:a2:6a:1c:8c:15:23:a0:
2c:52:5f:e6:ac:d0:82:9e:ac:3e:8c:01:b1:9c:89:
e2:3e:71:e2:7c:96:81:07:3d:96:14:eb:3a:9c:c8:
59:22:37:db:83:95:1e:24:6b:2d:fd:9c:d1:75:e6:
ab:8f:2d:89:c5:d9:d0:35:e7:9a:4c:28:1f:01:27:
a9:5d:d6:e7:b1:32:df:df:91:64:92:75:ee:fe:91:
51:42:5b:ee:64:2c:0e:cf:99:6a:c8:05:ef:5d:64:
f0:42:26:2a:b2:96:65:ab:11:0a:9c:97:84:da:bf:
b8:93:c4:1c:1b:7a:e7:1a:09:54:0f:74:d8:c3:ea:
82:1d:e2:cf:20:57:18:d1:24:dc:7a:ce:e8:57:b5:
dc:fb:ec:09:11:fc:9f:97:62:d7:83:b9:8b:c9:49:
08:39:80:1e:c3:36:09:01:02:a9:28:1a:af:0c:4f:
2e:60:78:f5:1d:64:7d:a1:9f:fc:2e:ae:da:68:68:
9b:7b:26:82:20:28:91:02:fb:b5:0a:21:89:39:eb:
5c:65:a8:6d:c5:6d:c8:78:93:e3:b3:7e:a0:d9:90:
9d:7e:bf:4a:88:d9:73:5a:d8:ad:85:78:3c:1b:3c:
b1:da:7d:33:d3:45:6b:71:25:7c:a7:2a:f6:66:2a:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:D4:81:83:13:BE:35:3A:4A:56:C2:E3:A8:71:C1:B2:AC:18:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9431B27E9111F0AA3370E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
00:f5:ea:5a:a3:93:78:03:80:03:15:a1:a0:3f:47:f7:67:a1:
61:81:fc:4b:21:0a:04:48:c6:68:bc:cb:a3:76:ab:d4:22:95:
bb:ab:d4:d7:ba:d2:6f:77:1a:62:32:4f:aa:12:8d:de:9e:92:
db:f5:b0:ca:5c:f5:c5:c3:6c:53:e7:05:bd:99:eb:58:17:4f:
81:47:35:58:df:f1:74:40:3a:93:0b:7f:3f:3b:87:87:a6:6a:
af:38:6c:e2:94:a3:41:65:6e:44:e4:ca:f6:56:c9:d5:71:c1:
aa:56:40:08:39:9b:71:ee:b6:1b:0a:3d:81:cf:16:70:33:f1:
13:7b:22:d1:a7:1d:18:43:67:44:2e:da:25:2a:53:68:ee:3f:
a7:94:5e:4c:7d:c1:24:ec:29:4f:ee:89:33:31:ea:d0:56:09:
95:59:11:5b:ad:88:0b:09:ec:15:79:3c:07:29:83:02:2c:a5:
f8:c6:40:49:98:28:39:57:7c:51:cd:ea:39:f6:70:da:dd:34:
8b:78:f6:e2:77:ec:11:5c:3d:da:14:fe:7f:f8:43:66:03:57:
b8:93:fc:3f:e9:dc:70:b9:8a:e5:9d:0e:ce:3d:7b:08:c5:72:
2f:85:d9:30:39:e3:bd:8c:dd:c9:f2:47:ab:94:29:42:32:1e:
8b:ae:97:9d
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZNoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIxMTMxNjUyWhcNMjUwOTI3MTMxNjUyWjAYMRYw
FAYDVQQDEw02OGE3MWM0OS1lMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsIdrFuR4U6JqHIwVI6AsUl/mrNCCnqw+jAGxnIniPnHifJaBBz2WFOs6
nMhZIjfbg5UeJGst/ZzRdearjy2JxdnQNeeaTCgfASepXdbnsTLf35FkknXu/pFR
QlvuZCwOz5lqyAXvXWTwQiYqspZlqxEKnJeE2r+4k8QcG3rnGglUD3TYw+qCHeLP
IFcY0STces7oV7Xc++wJEfyfl2LXg7mLyUkIOYAewzYJAQKpKBqvDE8uYHj1HWR9
oZ/8Lq7aaGibeyaCICiRAvu1CiGJOetcZahtxW3IeJPjs36g2ZCdfr9KiNlzWtit
hXg8Gzyx2n0z00VrcSV8pyr2Ziq1eQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCLX
1IGDE741OkpWwuOoccGyrBimMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQzk0MzFCMjdFOTExMUYwQUEzMzcwRTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmshQAwQDmt/4MA0GCSqG
SIb3DQEBCwUAA4IBAQAA9epao5N4A4ADFaGgP0f3Z6FhgfxLIQoESMZovMujdqvU
IpW7q9TXutJvdxpiMk+qEo3enpLb9bDKXPXFw2xT5wW9metYF0+BRzVY3/F0QDqT
C38/O4eHpmqvOGzilKNBZW5E5Mr2VsnVccGqVkAIOZtx7rYbCj2BzxZwM/ETeyLR
px0YQ2dELtolKlNo7j+nlF5MfcEk7ClP7okzMerQVgmVWRFbrYgLCewVeTwHKYMC
LKX4xkBJmCg5V3xRzeo59nDa3TSLePbid+wRXD3aFP5/+ENmA1e4k/w/6dxwuYrl
nQ7OPXsIxXIvhdkwOeO9jN3J8kerlClCMh6Lrped
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:14 2025 by rpki-client