Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A6158EC504111F0A19C9DCCDAE4EC9C.roa
File: 8A6158EC504111F0A19C9DCCDAE4EC9C.roa (raw, json)
Hash identifier: M2fyQq1MA9xI9plT5TqFledInvlJD4rZWEWtyXCe6nI=
Subject key identifier: 1F:CE:AB:0F:B8:7F:60:98:B7:D4:04:F9:89:F6:50:99:F4:54:FC:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018809
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A6158EC504111F0A19C9DCCDAE4EC9C.roa
Signing time: Mon 23 Jun 2025 14:51:27 +0000
ROA not before: Mon 23 Jun 2025 14:51:24 +0000
ROA not after: Wed 30 Jul 2025 14:51:24 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100361 (0x18809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 14:51:24 2025 GMT
Not After : Jul 30 14:51:24 2025 GMT
Subject: CN=685969ef-08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:16:14:04:d9:10:77:39:4d:f3:20:0e:54:
15:87:12:08:b3:00:0e:a1:2c:c7:28:e1:36:b9:16:
ab:46:33:88:0a:01:ae:99:75:6a:f6:68:73:ec:98:
3e:56:ab:71:51:11:93:18:f5:58:e0:51:6b:3f:66:
31:8f:b3:b1:89:96:17:31:c3:ed:78:0f:b2:bd:53:
ec:7f:0b:95:60:73:30:22:76:8f:27:1b:46:68:2e:
1a:b4:40:5e:65:03:a4:e1:03:b2:91:5b:4f:5a:30:
65:c9:6b:5e:a8:9a:81:9f:21:40:8a:9d:47:37:1e:
c8:f2:99:84:94:e9:ad:d7:fe:49:33:83:29:a5:f8:
f2:05:76:bf:e7:28:cc:76:40:e3:90:21:79:c4:64:
ad:7d:da:0f:2f:d0:79:0c:73:2b:23:05:2b:ee:47:
db:1a:90:d1:92:a0:c3:ba:c4:c5:a1:2a:96:5c:7e:
ca:8b:4d:14:1e:21:aa:1e:4c:ad:a1:d8:62:72:17:
81:bd:80:b3:bb:b0:a7:a0:5c:f6:ef:1e:a8:e4:e0:
39:f0:91:d9:20:29:49:55:6f:23:e6:ed:ac:de:74:
d8:67:49:3f:c9:10:3a:4d:63:90:6c:7d:7e:14:3d:
07:70:8c:3e:8b:b5:ff:c3:61:2e:f3:ab:71:5a:b0:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:AB:0F:B8:7F:60:98:B7:D4:04:F9:89:F6:50:99:F4:54:FC:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A6158EC504111F0A19C9DCCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:ce:63:a6:42:54:d6:2e:45:5b:d9:e9:3a:de:41:19:70:a3:
da:56:c1:29:d2:f1:1e:81:b2:d7:b9:33:02:1b:9a:c1:74:2e:
fc:27:e9:95:f6:f0:80:f3:84:9f:d4:37:de:c4:7f:0b:87:e3:
ca:4e:1e:b4:cc:74:c4:df:d4:1e:6f:47:1e:68:02:23:a1:22:
71:3b:a2:3f:df:ae:8a:86:5b:18:7b:92:cd:af:3f:c5:1c:c8:
15:6c:e4:b3:be:ab:74:f9:a7:bd:a0:0a:41:ee:23:2d:f3:ec:
64:9e:03:73:24:fe:61:0b:a8:e0:88:47:b3:3b:00:87:20:5d:
59:f2:4a:ba:d1:d8:01:f1:5b:ca:4a:0f:85:9d:f6:f0:e0:4f:
4e:40:86:52:c1:01:cd:8c:db:39:b6:c3:30:71:65:df:71:3f:
bf:d0:a2:92:14:1d:95:3c:63:67:84:e1:c8:19:f9:06:62:34:
03:c0:8a:25:be:5f:0c:2a:4c:ea:49:68:d0:a4:63:e3:95:c4:
6b:c4:5d:84:92:eb:06:8a:57:83:94:65:38:0a:6d:9c:0a:cb:
02:19:a3:37:3f:17:39:4a:b7:68:91:95:8a:5b:66:44:9b:8c:
9d:2b:0a:72:e3:fa:c7:55:4f:fc:30:1e:81:20:6e:a5:f1:5e:
aa:06:4a:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYgJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIzMTQ1MTI0WhcNMjUwNzMwMTQ1MTI0WjAYMRYw
FAYDVQQDEw02ODU5NjllZi0wOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA15UWFATZEHc5TfMgDlQVhxIIswAOoSzHKOE2uRarRjOICgGumXVq9mhz
7Jg+VqtxURGTGPVY4FFrP2Yxj7OxiZYXMcPteA+yvVPsfwuVYHMwInaPJxtGaC4a
tEBeZQOk4QOykVtPWjBlyWteqJqBnyFAip1HNx7I8pmElOmt1/5JM4MppfjyBXa/
5yjMdkDjkCF5xGStfdoPL9B5DHMrIwUr7kfbGpDRkqDDusTFoSqWXH7Ki00UHiGq
HkytodhicheBvYCzu7CnoFz27x6o5OA58JHZIClJVW8j5u2s3nTYZ0k/yRA6TWOQ
bH1+FD0HcIw+i7X/w2Eu86txWrD0uwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB/O
qw+4f2CYt9QE+Yn2UJn0VPy6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTYxNThFQzUwNDExMUYwQTE5QzlEQ0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAzmOmQlTWLkVb2ek63kEZcKPaVsEp0vEegbLXuTMCG5rBdC78J+mV
9vCA84Sf1DfexH8Lh+PKTh60zHTE39Qeb0ceaAIjoSJxO6I/366KhlsYe5LNrz/F
HMgVbOSzvqt0+ae9oApB7iMt8+xkngNzJP5hC6jgiEezOwCHIF1Z8kq60dgB8VvK
Sg+Fnfbw4E9OQIZSwQHNjNs5tsMwcWXfcT+/0KKSFB2VPGNnhOHIGfkGYjQDwIol
vl8MKkzqSWjQpGPjlcRrxF2EkusGileDlGU4Cm2cCssCGaM3Pxc5SrdokZWKW2ZE
m4ydKwpy4/rHVU/8MB6BIG6l8V6qBkoY
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:01:06 2025 by rpki-client