Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C189CE70781A11F0A0C4AEB5DAE4EC9C.roa
File: C189CE70781A11F0A0C4AEB5DAE4EC9C.roa (raw, json)
Hash identifier: 4jm4IdWThKqjLjEQDeaJQHLF1f054KMllZZ32f2Mm1U=
Subject key identifier: B6:E8:48:24:DC:96:94:88:11:2F:BC:2F:C8:B1:99:8E:DD:A0:27:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019190
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C189CE70781A11F0A0C4AEB5DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 07:54:36 +0000
ROA not before: Wed 13 Aug 2025 07:54:32 +0000
ROA not after: Sat 04 Oct 2025 07:54:32 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102800 (0x19190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 07:54:32 2025 GMT
Not After : Oct 4 07:54:32 2025 GMT
Subject: CN=689c44bc-f8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:05:d3:ed:93:ac:1c:ba:cd:a0:a6:16:4f:
7e:96:25:bb:2f:e3:c3:38:21:de:20:4b:c5:82:dd:
12:ab:21:57:7e:1b:b3:44:cd:ab:83:1f:62:e1:52:
ad:5f:4b:1f:e3:e9:07:b4:6a:c0:e6:b1:b0:8e:f0:
70:31:fb:56:76:3b:24:49:74:80:6b:61:80:c6:42:
e5:c0:5f:4f:35:f5:6c:5b:51:f0:38:0d:35:40:8a:
94:85:83:6f:4e:2e:58:1a:b4:70:92:48:06:b0:30:
3b:09:f2:8d:a6:76:8b:8b:f2:3a:32:3f:dd:94:3f:
a3:2e:57:e3:a8:66:ea:f2:89:09:60:02:5f:00:7a:
da:bf:94:36:71:07:72:96:fd:db:8e:d4:78:77:84:
65:85:c8:f6:f7:f5:b0:b6:aa:a8:8e:5f:3e:a1:08:
e8:9e:b7:48:55:99:4b:58:c8:6d:44:38:39:fa:37:
d4:98:1c:ef:87:f4:e6:14:bf:84:bc:27:ca:72:3f:
de:0c:d1:84:e3:b6:df:25:7b:41:4d:15:aa:55:c5:
c4:29:80:81:d6:3e:8e:a8:16:73:01:ce:b9:68:ee:
05:bb:66:17:78:2c:44:c6:4f:b6:7e:27:ba:f2:3c:
a7:70:75:56:4d:53:b2:14:80:cb:fe:84:e3:fc:22:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E8:48:24:DC:96:94:88:11:2F:BC:2F:C8:B1:99:8E:DD:A0:27:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C189CE70781A11F0A0C4AEB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
154.200.188.0/24
154.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
26:60:01:5a:2f:c7:c0:53:e2:1b:9c:8e:ea:69:e9:4b:f2:d3:
d0:ed:f1:6c:1e:9f:4f:d6:35:b7:d2:42:ac:ae:ad:5f:a7:ec:
5a:ad:62:2f:98:6b:4c:05:4d:d9:80:f6:a0:10:8b:57:e4:36:
f6:b2:da:21:06:75:14:12:51:88:1b:74:5a:9d:f4:4c:c8:c8:
d7:e6:4c:b5:07:16:47:a2:1c:8d:3c:69:5d:5e:99:c7:21:0b:
84:3d:d4:97:98:b4:ee:50:bb:aa:9f:5a:ed:48:e6:a5:28:23:
d3:f6:a3:b9:eb:9e:9b:34:cc:f3:2a:4d:f2:fa:7a:2b:74:4f:
a1:1c:c4:e3:41:cf:d5:ac:2e:62:3c:60:22:6a:46:a9:9a:49:
8b:6f:ed:48:03:43:bb:73:9d:9d:de:9b:66:cb:e5:a6:28:8e:
7d:68:cc:3f:94:b7:41:69:37:fd:ce:29:5e:03:40:64:ad:f0:
a3:e8:51:d6:40:59:20:0b:14:d2:f3:dd:03:7c:b3:50:c0:6d:
58:f4:ee:7c:f7:d1:df:63:2f:98:f9:11:5f:da:12:31:95:de:
ef:c9:5d:2e:68:e9:86:5e:96:91:2b:12:ce:30:97:76:7f:a4:
f2:82:83:17:63:e8:0a:f9:6c:2c:58:55:5c:13:8a:00:25:e4:
dd:98:6c:f0
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAZGQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODEzMDc1NDMyWhcNMjUxMDA0MDc1NDMyWjAYMRYw
FAYDVQQDEw02ODljNDRiYy1mOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwLoF0+2TrBy6zaCmFk9+liW7L+PDOCHeIEvFgt0SqyFXfhuzRM2rgx9i
4VKtX0sf4+kHtGrA5rGwjvBwMftWdjskSXSAa2GAxkLlwF9PNfVsW1HwOA01QIqU
hYNvTi5YGrRwkkgGsDA7CfKNpnaLi/I6Mj/dlD+jLlfjqGbq8okJYAJfAHrav5Q2
cQdylv3bjtR4d4Rlhcj29/Wwtqqojl8+oQjonrdIVZlLWMhtRDg5+jfUmBzvh/Tm
FL+EvCfKcj/eDNGE47bfJXtBTRWqVcXEKYCB1j6OqBZzAc65aO4Fu2YXeCxExk+2
fie68jyncHVWTVOyFIDL/oTj/CJlWwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFLbo
SCTclpSIES+8L8ixmY7doCeyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTg5Q0U3MDc4MUExMUYwQTBDNEFFQjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmshuAwQAmsi8AwQAmsj1
MA0GCSqGSIb3DQEBCwUAA4IBAQAmYAFaL8fAU+IbnI7qaelL8tPQ7fFsHp9P1jW3
0kKsrq1fp+xarWIvmGtMBU3ZgPagEItX5Db2stohBnUUElGIG3RanfRMyMjX5ky1
BxZHohyNPGldXpnHIQuEPdSXmLTuULuqn1rtSOalKCPT9qO5656bNMzzKk3y+nor
dE+hHMTjQc/VrC5iPGAiakapmkmLb+1IA0O7c52d3ptmy+WmKI59aMw/lLdBaTf9
zileA0BkrfCj6FHWQFkgCxTS890DfLNQwG1Y9O5899HfYy+Y+RFf2hIxld7vyV0u
aOmGXpaRKxLOMJd2f6TygoMXY+gK+WwsWFVcE4oAJeTdmGzw
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:31 2025 by rpki-client