Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3888A72E752011F0BD3388C2DAE4EC9C.roa
File: 3888A72E752011F0BD3388C2DAE4EC9C.roa (raw, json)
Hash identifier: cX1yDxp+QApRWIbC+VsNCb9b29Cn22+R3UebXNz9VXU=
Subject key identifier: B4:69:05:10:AD:F4:11:A7:68:F9:2D:F0:0D:ED:11:CA:07:68:FD:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019111
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3888A72E752011F0BD3388C2DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 12:56:10 +0000
ROA not before: Sat 09 Aug 2025 12:56:04 +0000
ROA not after: Tue 16 Sep 2025 12:56:04 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102673 (0x19111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 12:56:04 2025 GMT
Not After : Sep 16 12:56:04 2025 GMT
Subject: CN=6897456a-3f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:44:57:fb:92:cb:61:44:0e:70:a1:b1:c1:
9c:e9:d2:bd:8e:07:71:07:ce:a9:89:5b:53:16:41:
c5:b1:95:3b:c2:8f:65:44:35:45:d5:f0:42:03:7b:
4d:e0:d6:08:63:7d:74:5b:07:bf:be:0c:b1:a7:2a:
44:8a:98:3f:50:90:09:c2:0b:6c:f2:c5:7d:c8:31:
e9:1d:7b:04:33:81:97:8b:ea:75:c0:3d:78:4c:79:
06:80:5d:76:38:0c:8c:28:0d:4d:f2:0b:67:d9:98:
1e:47:a6:36:c1:cc:db:a0:68:ab:79:16:31:de:71:
5d:e5:f1:30:98:f5:7c:88:cd:b0:5e:14:91:b9:14:
0b:cb:8e:06:2c:91:86:d4:9e:dd:f3:33:70:ad:8d:
d0:8a:65:89:22:60:3b:2b:88:25:30:65:05:5c:6c:
f5:c4:8f:50:5e:18:50:23:44:fc:37:4c:2d:ca:34:
05:68:e6:49:8d:44:d5:0f:92:5d:e1:54:8d:9c:f4:
41:60:9f:98:9d:7b:8b:91:ba:bd:f5:88:73:7b:de:
a5:d8:31:e6:b7:a6:b4:94:4f:0b:e2:6b:09:fc:ea:
80:0a:6f:77:10:ed:d7:ff:6f:a1:05:7a:f9:ac:96:
18:1a:26:6e:ec:34:ba:10:10:f2:bb:e7:b5:c3:08:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:05:10:AD:F4:11:A7:68:F9:2D:F0:0D:ED:11:CA:07:68:FD:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3888A72E752011F0BD3388C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8a:83:87:05:b6:80:00:cc:ec:6d:2c:eb:85:a9:d2:4c:8d:
88:a4:96:98:7f:34:b2:cf:ea:52:a3:4d:a9:aa:6a:2d:ca:18:
26:b9:00:6e:ec:63:d7:a6:51:48:96:22:96:94:5a:40:43:57:
d8:31:9e:ac:91:57:9c:7c:c3:90:af:7b:1a:6b:34:e9:d1:ad:
cb:d9:f1:56:99:4d:70:4d:2b:35:6a:f6:12:a6:22:0b:c4:ae:
f9:dc:0a:50:24:0b:7d:1d:ff:a9:7a:09:37:a3:63:b3:f0:c9:
6b:b4:ea:6d:62:ba:2e:ab:cc:a1:08:ee:55:b4:36:43:33:6e:
f2:75:fb:e7:70:01:d3:f8:81:6d:3d:21:73:11:32:d1:d5:32:
1b:15:b3:07:f4:6b:ff:4d:ba:e5:c9:cf:8e:d4:0f:e4:63:b3:
17:8e:3e:20:0b:3e:b5:76:6c:67:28:43:d1:78:55:ac:77:00:
3e:7c:eb:0c:79:04:c3:ca:af:52:b3:00:e8:dc:b7:80:62:ff:
6c:73:a6:3c:75:92:ee:e4:1b:b7:10:7a:4f:64:28:6a:8c:f4:
77:6c:73:e3:d9:d0:20:6c:ed:bd:ab:31:f4:4b:82:75:7d:ce:
ac:d6:3e:a1:04:c4:95:8d:47:66:86:f7:f6:11:0d:ff:6e:9d:
f3:d4:ee:0b
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZERMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA5MTI1NjA0WhcNMjUwOTE2MTI1NjA0WjAYMRYw
FAYDVQQDEw02ODk3NDU2YS0zZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArb5EV/uSy2FEDnChscGc6dK9jgdxB86piVtTFkHFsZU7wo9lRDVF1fBC
A3tN4NYIY310Wwe/vgyxpypEipg/UJAJwgts8sV9yDHpHXsEM4GXi+p1wD14THkG
gF12OAyMKA1N8gtn2ZgeR6Y2wczboGireRYx3nFd5fEwmPV8iM2wXhSRuRQLy44G
LJGG1J7d8zNwrY3QimWJImA7K4glMGUFXGz1xI9QXhhQI0T8N0wtyjQFaOZJjUTV
D5Jd4VSNnPRBYJ+YnXuLkbq99Yhze96l2DHmt6a0lE8L4msJ/OqACm93EO3X/2+h
BXr5rJYYGiZu7DS6EBDyu+e1wwg85wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLRp
BRCt9BGnaPkt8A3tEcoHaP1qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zODg4QTcyRTc1MjAxMUYwQkQzMzg4QzJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsI2AwQAmsUBMA0GCSqG
SIb3DQEBCwUAA4IBAQDBioOHBbaAAMzsbSzrhanSTI2IpJaYfzSyz+pSo02pqmot
yhgmuQBu7GPXplFIliKWlFpAQ1fYMZ6skVecfMOQr3saazTp0a3L2fFWmU1wTSs1
avYSpiILxK753ApQJAt9Hf+pegk3o2Oz8MlrtOptYrouq8yhCO5VtDZDM27ydfvn
cAHT+IFtPSFzETLR1TIbFbMH9Gv/Tbrlyc+O1A/kY7MXjj4gCz61dmxnKEPReFWs
dwA+fOsMeQTDyq9SswDo3LeAYv9sc6Y8dZLu5Bu3EHpPZChqjPR3bHPj2dAgbO29
qzH0S4J1fc6s1j6hBMSVjUdmhvf2EQ3/bp3z1O4L
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:45 2025 by rpki-client