Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3B468E576011F0BECF2E9ADAE4EC9C.roa
File: 7D3B468E576011F0BECF2E9ADAE4EC9C.roa (raw, json)
Hash identifier: xDI6T2Vy3aeyS2GG/Mzutqo0D/J3V916hN5ptS1kz+A=
Subject key identifier: 74:39:E5:70:F6:25:AF:FE:FB:11:62:32:99:EB:AD:A9:1E:C8:B8:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3B468E576011F0BECF2E9ADAE4EC9C.roa
Signing time: Wed 02 Jul 2025 16:20:38 +0000
ROA not before: Wed 02 Jul 2025 16:20:33 +0000
ROA not after: Mon 08 Dec 2025 16:20:33 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 11:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100840 (0x189e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 16:20:33 2025 GMT
Not After : Dec 8 16:20:33 2025 GMT
Subject: CN=68655c56-0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:3c:42:70:38:8d:0e:18:f6:10:0a:76:2c:
02:8b:b5:70:1a:00:7f:9f:98:c6:5b:5d:04:56:44:
a2:76:09:5c:5e:6b:bd:12:bd:df:57:65:7b:c9:d0:
4b:6e:9b:a1:db:b9:9c:9f:cd:89:fd:95:8f:fd:fd:
e1:9b:33:fb:1d:d1:8b:82:76:f5:9b:3a:f2:b2:e9:
84:81:62:1f:8e:06:07:06:93:a6:05:9c:14:74:2f:
03:c7:82:8e:de:50:e4:7c:61:cc:25:2f:13:6b:e7:
1e:31:55:8a:d4:a6:19:2c:54:f5:f3:10:26:b1:82:
6f:93:8b:c3:8f:3b:31:28:1f:6c:db:cd:1c:57:f9:
c2:84:13:ef:fe:2a:29:4d:b6:91:57:e8:ce:41:ab:
cd:d9:e7:55:83:3a:02:d2:75:70:10:4e:d8:93:a5:
b5:60:53:1a:f2:a9:50:2d:fc:2a:19:e3:ed:7b:b8:
bb:83:8f:10:9a:a8:cb:a3:30:36:a1:7e:ae:87:7e:
89:4f:b4:0f:5b:84:1b:14:68:fc:f4:2b:da:2b:9d:
41:d9:50:e0:c9:fa:f1:25:c6:5c:6f:1d:9f:ed:1e:
a7:c0:ca:aa:da:71:e5:18:d6:3b:b4:27:f4:1f:7b:
8f:3c:12:17:7c:e3:6d:fc:11:51:1d:0b:45:e6:e4:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:39:E5:70:F6:25:AF:FE:FB:11:62:32:99:EB:AD:A9:1E:C8:B8:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D3B468E576011F0BECF2E9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
60:5b:70:10:00:61:bf:03:bd:67:29:cf:4f:b2:76:44:cb:36:
52:49:a5:f6:6b:be:46:70:a4:8b:ce:98:2f:fc:40:a1:ec:d4:
49:c3:4b:23:8d:6b:90:2f:2d:c3:95:f7:31:c7:99:09:c0:cf:
07:d9:2c:0d:5e:5f:ee:63:71:e4:c1:fe:bb:65:f7:53:92:98:
a9:f4:77:16:f4:04:da:3c:d4:3b:81:7f:56:72:4f:8f:96:36:
2f:ea:f1:ae:62:4d:b6:2e:ea:ba:3f:f5:e8:bf:61:86:ab:cb:
fd:67:33:23:af:42:e1:b5:bd:c5:69:29:92:d7:27:89:a8:8e:
ac:5f:e0:70:35:10:9a:0d:db:0c:ec:17:d2:89:53:4e:90:ee:
b2:8f:3e:fc:9b:76:de:f6:2a:6e:96:64:88:13:04:0b:01:3c:
c5:4f:6e:6e:c1:20:10:2c:1f:b6:a3:a3:32:e2:89:42:11:4a:
fa:f4:3f:3a:88:8c:26:a9:69:96:77:82:02:53:d1:51:ec:67:
cf:57:27:41:40:df:85:3a:d6:b0:75:fe:1d:62:8b:e5:86:4f:
b1:a4:15:1a:a2:6a:6f:05:fc:35:6b:f5:26:9e:74:7e:69:e6:
12:03:3b:86:be:92:1a:83:95:18:6b:12:1f:e1:3b:96:ce:b2:
97:a7:d6:9d
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYnoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzAyMTYyMDMzWhcNMjUxMjA4MTYyMDMzWjAYMRYw
FAYDVQQDEw02ODY1NWM1Ni0wMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvGo8QnA4jQ4Y9hAKdiwCi7VwGgB/n5jGW10EVkSidglcXmu9Er3fV2V7
ydBLbpuh27mcn82J/ZWP/f3hmzP7HdGLgnb1mzrysumEgWIfjgYHBpOmBZwUdC8D
x4KO3lDkfGHMJS8Ta+ceMVWK1KYZLFT18xAmsYJvk4vDjzsxKB9s280cV/nChBPv
/iopTbaRV+jOQavN2edVgzoC0nVwEE7Yk6W1YFMa8qlQLfwqGePte7i7g48QmqjL
ozA2oX6uh36JT7QPW4QbFGj89CvaK51B2VDgyfrxJcZcbx2f7R6nwMqq2nHlGNY7
tCf0H3uPPBIXfONt/BFRHQtF5uSF5wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHQ5
5XD2Ja/++xFiMpnrrakeyLjcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDNCNDY4RTU3NjAxMUYwQkVDRjJFOUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaUp8DBACaUqAwDQYJ
KoZIhvcNAQELBQADggEBAGBbcBAAYb8DvWcpz0+ydkTLNlJJpfZrvkZwpIvOmC/8
QKHs1EnDSyONa5AvLcOV9zHHmQnAzwfZLA1eX+5jceTB/rtl91OSmKn0dxb0BNo8
1DuBf1ZyT4+WNi/q8a5iTbYu6ro/9ei/YYary/1nMyOvQuG1vcVpKZLXJ4mojqxf
4HA1EJoN2wzsF9KJU06Q7rKPPvybdt72Km6WZIgTBAsBPMVPbm7BIBAsH7ajozLi
iUIRSvr0PzqIjCapaZZ3ggJT0VHsZ89XJ0FA34U61rB1/h1ii+WGT7GkFRqiam8F
/DVr9SaedH5p5hIDO4a+khqDlRhrEh/hO5bOspen1p0=
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:58:20 2025 by rpki-client