Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3AE19CE7ACC11F0A624CCB8DAE4EC9C.roa
File: A3AE19CE7ACC11F0A624CCB8DAE4EC9C.roa (raw, json)
Hash identifier: H5PCPqsEVM4TWm/nyV3XnWsh3JBhvU1s64GhTqOuam0=
Subject key identifier: 8B:EB:DB:11:86:38:C9:D7:06:06:BA:89:82:0C:0B:17:9C:25:E4:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3AE19CE7ACC11F0A624CCB8DAE4EC9C.roa
Signing time: Sat 16 Aug 2025 18:12:59 +0000
ROA not before: Sat 16 Aug 2025 18:12:54 +0000
ROA not after: Mon 22 Sep 2025 18:12:54 +0000
asID: 9009
IP address blocks: 154.222.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102897 (0x191f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 18:12:54 2025 GMT
Not After : Sep 22 18:12:54 2025 GMT
Subject: CN=68a0ca2b-6014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:02:ad:29:ce:c6:ec:29:dd:f1:42:0c:00:
1e:86:34:7a:32:94:6c:d4:92:fc:14:22:9e:7c:81:
d8:17:c6:2b:9c:7d:14:5e:0e:97:0e:78:84:76:22:
73:a1:0a:ef:56:98:8b:b4:1c:b0:8d:b3:08:1b:af:
11:73:55:3d:8f:d4:4e:42:c4:2f:81:b6:04:d7:8a:
cd:3d:67:07:5f:8e:a5:c6:a6:5e:e2:45:74:cf:20:
24:7d:77:93:64:86:d1:ec:59:74:ed:45:d5:fa:db:
a9:b5:e0:90:ae:68:3c:0c:05:5d:81:9e:36:48:be:
2d:ae:98:d2:22:e2:b7:49:7d:7b:8e:d5:c6:a8:91:
1e:d6:8d:39:6e:31:4b:43:78:ba:53:02:aa:bf:03:
09:e1:e8:d9:f9:25:a0:28:c8:fc:df:89:fd:9f:e4:
6e:c0:e7:74:d7:6b:8b:24:26:4e:d6:30:f4:0d:2b:
cb:f9:de:1c:1d:60:5a:35:1f:2a:f6:b6:b4:09:2f:
54:21:a9:52:46:6f:ff:9b:3d:e8:8d:2a:37:48:07:
f6:b9:c2:6e:a4:e8:9e:84:19:73:79:4f:c2:b4:a9:
e2:c0:18:ce:2a:e5:2d:64:9f:e2:d3:0c:54:0c:bb:
f1:dd:d3:51:be:05:db:5c:d9:f3:b1:d9:20:5c:d2:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:DB:11:86:38:C9:D7:06:06:BA:89:82:0C:0B:17:9C:25:E4:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3AE19CE7ACC11F0A624CCB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.33.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b4:61:58:51:bc:6e:3d:f0:e6:40:ca:00:a0:59:10:ce:8d:
6e:87:60:78:ba:2a:21:b3:e3:15:1f:80:ff:95:56:e4:a1:3b:
b0:50:c7:35:9c:02:d6:36:6b:50:bc:e6:9c:1a:f2:3d:16:1e:
91:a3:7d:0c:0f:b1:f3:ec:c5:94:37:d9:4a:06:18:83:74:bc:
a8:cf:73:5d:48:59:8d:27:4f:b9:ca:2e:6b:12:84:a3:0b:b5:
55:15:80:99:f4:70:76:37:5e:63:fa:8d:e4:07:ff:c5:09:b4:
3a:1d:2e:2c:27:48:18:fd:12:15:ef:1c:57:17:92:0c:f1:4a:
64:ed:52:f3:e9:0e:60:27:45:12:7e:ed:1a:d5:3b:4d:67:30:
bd:ff:88:d1:e9:d2:a7:3e:a0:2e:de:d1:16:e9:43:8d:52:63:
0f:70:81:15:bf:68:2f:f8:61:da:83:25:cf:01:bb:fe:3b:0d:
57:a4:02:58:b6:71:1a:b3:53:04:1a:e8:17:32:28:a4:e2:9c:
74:03:f3:a6:2e:86:41:75:04:97:c4:fb:00:db:bd:33:98:e0:
27:b7:88:31:bb:07:4c:20:bf:8e:0e:d5:be:9a:57:c6:39:e7:
26:09:6c:66:0c:c0:42:59:27:75:c8:63:b0:1c:1a:78:5f:7b:
b5:5c:a5:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZHxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODE2MTgxMjU0WhcNMjUwOTIyMTgxMjU0WjAYMRYw
FAYDVQQDEw02OGEwY2EyYi02MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt0cCrSnOxuwp3fFCDAAehjR6MpRs1JL8FCKefIHYF8YrnH0UXg6XDniE
diJzoQrvVpiLtBywjbMIG68Rc1U9j9ROQsQvgbYE14rNPWcHX46lxqZe4kV0zyAk
fXeTZIbR7Fl07UXV+tupteCQrmg8DAVdgZ42SL4trpjSIuK3SX17jtXGqJEe1o05
bjFLQ3i6UwKqvwMJ4ejZ+SWgKMj834n9n+RuwOd012uLJCZO1jD0DSvL+d4cHWBa
NR8q9ra0CS9UIalSRm//mz3ojSo3SAf2ucJupOiehBlzeU/CtKniwBjOKuUtZJ/i
0wxUDLvx3dNRvgXbXNnzsdkgXNKiWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIvr
2xGGOMnXBga6iYIMCxecJeSoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BM0FFMTlDRTdBQ0MxMUYwQTYyNENDQjhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4hMA0GCSqGSIb3DQEB
CwUAA4IBAQCStGFYUbxuPfDmQMoAoFkQzo1uh2B4uiohs+MVH4D/lVbkoTuwUMc1
nALWNmtQvOacGvI9Fh6Ro30MD7Hz7MWUN9lKBhiDdLyoz3NdSFmNJ0+5yi5rEoSj
C7VVFYCZ9HB2N15j+o3kB//FCbQ6HS4sJ0gY/RIV7xxXF5IM8Upk7VLz6Q5gJ0US
fu0a1TtNZzC9/4jR6dKnPqAu3tEW6UONUmMPcIEVv2gv+GHagyXPAbv+Ow1XpAJY
tnEas1MEGugXMiik4px0A/OmLoZBdQSXxPsA270zmOAnt4gxuwdMIL+ODtW+mlfG
OecmCWxmDMBCWSd1yGOwHBp4X3u1XKU8
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:52:35 2025 by rpki-client