Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB4AB6A55A511F09F53B7E0DAE4EC9C.roa
File: 8EB4AB6A55A511F09F53B7E0DAE4EC9C.roa (raw, json)
Hash identifier: 0XANZ1uwfl7CNH+qKm3A/6jvArcyNo0YHC+wqiwtnVo=
Subject key identifier: 82:EB:A6:CD:EA:9E:B0:FE:07:4D:E2:4A:2C:1D:61:70:63:77:6D:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018984
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB4AB6A55A511F09F53B7E0DAE4EC9C.roa
Signing time: Mon 30 Jun 2025 11:30:00 +0000
ROA not before: Mon 30 Jun 2025 11:27:47 +0000
ROA not after: Thu 14 Aug 2025 11:27:47 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100740 (0x18984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 11:27:47 2025 GMT
Not After : Aug 14 11:27:47 2025 GMT
Subject: CN=68627538-cc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:d5:7d:fc:6d:a0:57:6f:a2:bf:1e:46:87:
d9:69:57:09:d2:5e:3d:83:19:53:47:62:db:61:90:
ba:a7:3a:3a:ae:4d:8e:ac:bb:ff:aa:45:ce:f0:94:
dc:41:25:40:09:64:3c:c2:5d:bd:d4:e9:bf:91:1e:
26:f8:5f:e2:d4:8b:42:9f:43:d2:a7:be:dd:7e:a8:
2f:30:35:c4:88:9d:ae:d3:a2:1d:13:2a:ee:d8:8f:
33:ab:25:1d:18:68:ed:e2:39:72:48:00:28:ef:54:
c7:43:06:3f:43:74:ad:4f:22:42:a9:20:9a:52:21:
1c:65:39:7e:35:34:5c:bd:b2:25:8e:9f:f1:ca:c7:
4c:8a:1b:dc:89:e9:37:84:1d:d3:d8:b9:1a:b1:f3:
f4:8e:33:7c:d2:35:07:8f:6b:2b:f9:77:a9:ba:2d:
80:46:b2:be:dd:72:1b:13:66:8f:82:97:67:65:f4:
cf:6a:ff:40:c8:b1:82:08:7b:98:bf:69:d3:b2:a0:
da:80:63:47:8f:0a:93:7c:40:d0:99:9a:c3:c7:a9:
ba:58:16:26:60:a6:d8:28:30:49:b7:25:43:75:ea:
4c:4b:b8:6b:2d:77:3c:76:b2:e7:9b:55:56:f9:a1:
b5:bc:92:02:d6:67:b5:ae:46:60:2f:f9:37:40:a3:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EB:A6:CD:EA:9E:B0:FE:07:4D:E2:4A:2C:1D:61:70:63:77:6D:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EB4AB6A55A511F09F53B7E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
05:d6:be:ec:05:d4:0c:77:aa:5c:ff:2d:18:e7:fb:02:c7:a3:
f9:18:67:4f:75:7f:f4:95:50:54:64:d0:3b:d0:7d:30:ce:ca:
6a:55:64:0b:0b:58:dd:fb:b4:b4:9e:8d:a7:27:62:7d:c6:38:
db:b1:39:61:5f:c6:fa:d8:a3:05:4f:bc:c0:81:d4:59:13:70:
a1:fc:d0:7b:9b:fc:35:f8:34:db:0f:0c:9e:43:6d:20:9f:d0:
6c:90:66:6a:58:74:dd:8f:89:de:79:a7:1a:6f:32:07:9e:f7:
05:4b:e3:c6:1f:0b:0b:b2:f4:7d:91:2b:6c:90:70:c9:b8:c4:
63:9d:56:5e:8c:70:e8:2e:49:48:2a:60:95:70:9a:45:b0:92:
cb:ec:31:84:17:f0:43:75:bb:78:ab:91:d4:87:7e:0e:85:65:
01:23:51:5e:4d:0e:00:cf:dc:1b:09:7b:76:af:53:2d:86:1b:
4b:79:ad:fe:41:f1:ca:59:71:0c:5f:a8:09:a2:dc:80:ea:7f:
8f:ce:5a:67:c5:65:e4:65:14:ef:fa:1e:35:c1:9c:94:4a:2f:
37:50:00:7d:98:7b:88:69:a0:36:7b:d7:90:d9:16:0b:3b:c4:
5c:47:58:96:e2:4d:ce:b1:92:9d:97:50:b5:2a:b6:fc:f9:83:
68:19:30:e5
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYmEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjMwMTEyNzQ3WhcNMjUwODE0MTEyNzQ3WjAYMRYw
FAYDVQQDEw02ODYyNzUzOC1jYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwBTVffxtoFdvor8eRofZaVcJ0l49gxlTR2LbYZC6pzo6rk2OrLv/qkXO
8JTcQSVACWQ8wl291Om/kR4m+F/i1ItCn0PSp77dfqgvMDXEiJ2u06IdEyru2I8z
qyUdGGjt4jlySAAo71THQwY/Q3StTyJCqSCaUiEcZTl+NTRcvbIljp/xysdMihvc
iek3hB3T2LkasfP0jjN80jUHj2sr+Xepui2ARrK+3XIbE2aPgpdnZfTPav9AyLGC
CHuYv2nTsqDagGNHjwqTfEDQmZrDx6m6WBYmYKbYKDBJtyVDdepMS7hrLXc8drLn
m1VW+aG1vJIC1me1rkZgL/k3QKMEMwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFILr
ps3qnrD+B03iSiwdYXBjd23aMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RUI0QUI2QTU1QTUxMUYwOUY1M0I3RTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGmtjAAwQGmtrAMA0GCSqG
SIb3DQEBCwUAA4IBAQAF1r7sBdQMd6pc/y0Y5/sCx6P5GGdPdX/0lVBUZNA70H0w
zspqVWQLC1jd+7S0no2nJ2J9xjjbsTlhX8b62KMFT7zAgdRZE3Ch/NB7m/w1+DTb
DwyeQ20gn9BskGZqWHTdj4neeacabzIHnvcFS+PGHwsLsvR9kStskHDJuMRjnVZe
jHDoLklIKmCVcJpFsJLL7DGEF/BDdbt4q5HUh34OhWUBI1FeTQ4Az9wbCXt2r1Mt
hhtLea3+QfHKWXEMX6gJotyA6n+PzlpnxWXkZRTv+h41wZyUSi83UAB9mHuIaaA2
e9eQ2RYLO8RcR1iW4k3OsZKdl1C1Krb8+YNoGTDl
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:09 2025 by rpki-client