Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7390EDE4C5B11F08FD539F5DAE4EC9C.roa
File: C7390EDE4C5B11F08FD539F5DAE4EC9C.roa (raw, json)
Hash identifier: 2fr/YXFJd/D5owhT1dND1Pr7F+PCNTwWgaA2JF9swSc=
Subject key identifier: FF:39:2E:2A:A5:FF:4C:3E:D0:99:4A:1A:D9:DB:92:56:8F:82:5D:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01875D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7390EDE4C5B11F08FD539F5DAE4EC9C.roa
Signing time: Wed 18 Jun 2025 15:49:12 +0000
ROA not before: Wed 18 Jun 2025 15:49:07 +0000
ROA not after: Mon 28 Jul 2025 15:49:07 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100189 (0x1875d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 15:49:07 2025 GMT
Not After : Jul 28 15:49:07 2025 GMT
Subject: CN=6852dff8-802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:2f:48:ae:26:1d:56:63:59:5c:24:83:e2:
b1:02:d8:02:84:f4:fe:6e:da:8f:ef:ee:aa:3a:d2:
1f:64:ae:6a:b5:16:02:0e:75:da:1d:81:19:84:55:
f3:2b:fb:83:1c:d9:4f:dc:1f:7e:9a:55:7d:c6:d5:
bf:43:10:bb:88:55:d2:24:48:b0:46:6f:d6:08:4d:
49:39:91:73:c2:a2:4a:df:28:42:26:dd:d6:b8:86:
cb:22:82:81:04:69:c8:ec:8b:79:2a:ff:77:02:47:
98:93:8e:60:0c:46:4a:64:e9:31:50:b1:e7:95:f9:
0f:dc:77:6d:0e:1e:7c:61:a8:b7:d4:4b:c6:b2:9c:
d1:92:d8:52:2d:b4:fc:da:0c:07:cf:0f:4b:97:bc:
a2:32:49:c1:be:74:86:72:bc:a7:97:a8:60:f4:50:
d7:99:77:0a:d2:df:cf:59:7b:49:c2:3d:e0:04:9b:
c2:18:3c:8d:45:25:d6:62:ba:58:e9:17:80:36:33:
fd:b3:8c:92:f9:7f:0e:84:cf:b6:cf:d2:5f:2c:2e:
c0:53:3d:9e:b3:ac:30:18:59:1d:0f:4d:cd:93:e1:
8d:61:42:74:8b:64:f8:b1:5d:e0:ac:4b:b9:1f:b0:
9d:a1:1e:f7:bd:99:26:77:f9:2f:27:96:41:35:f4:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:2E:2A:A5:FF:4C:3E:D0:99:4A:1A:D9:DB:92:56:8F:82:5D:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7390EDE4C5B11F08FD539F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ae:2f:1f:5d:5a:cc:b5:26:13:9d:d7:09:d1:0e:dd:57:18:
27:39:95:76:68:98:dc:0c:5b:c3:06:b9:b8:fd:2d:55:a8:35:
6c:81:cd:a3:5a:7d:f2:7d:4c:fe:e5:9e:f3:ab:e0:7e:0d:57:
c4:0f:67:16:47:1c:7b:e7:82:96:b9:8a:96:db:f5:9f:b1:1d:
72:a9:59:de:2e:10:0b:87:23:8e:33:33:5f:8c:f1:0f:73:6a:
3c:fc:4d:e9:09:77:5d:32:97:7d:0b:f6:e6:80:51:b2:87:27:
72:26:88:02:4a:e2:f6:84:15:e4:e1:c9:44:9d:8a:3a:7d:f3:
25:5e:4f:5c:06:87:9a:24:6a:0f:8a:63:26:b3:36:af:e0:2c:
43:6b:16:c7:6f:7c:28:62:d5:5e:5d:fc:c2:81:66:71:d1:e3:
36:47:22:ff:05:1d:8c:5f:1e:44:8f:ff:77:f0:d0:0b:2f:84:
ee:93:28:8a:1c:c3:b9:9b:09:07:3a:60:b9:32:8c:c3:ca:e3:
30:ee:e0:69:a5:72:b4:2a:49:ac:30:e6:d3:01:5c:5f:0b:7b:
90:a5:55:ce:2d:d9:ec:f8:c6:fc:a9:dd:1c:92:f6:96:b8:1d:
ab:e0:cb:95:19:69:c8:ff:c6:01:86:c2:a5:88:90:44:a0:d4:
3e:fb:e8:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYddMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE4MTU0OTA3WhcNMjUwNzI4MTU0OTA3WjAYMRYw
FAYDVQQDEw02ODUyZGZmOC04MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1y0vSK4mHVZjWVwkg+KxAtgChPT+btqP7+6qOtIfZK5qtRYCDnXaHYEZ
hFXzK/uDHNlP3B9+mlV9xtW/QxC7iFXSJEiwRm/WCE1JOZFzwqJK3yhCJt3WuIbL
IoKBBGnI7It5Kv93AkeYk45gDEZKZOkxULHnlfkP3HdtDh58Yai31EvGspzRkthS
LbT82gwHzw9Ll7yiMknBvnSGcrynl6hg9FDXmXcK0t/PWXtJwj3gBJvCGDyNRSXW
YrpY6ReANjP9s4yS+X8OhM+2z9JfLC7AUz2es6wwGFkdD03Nk+GNYUJ0i2T4sV3g
rEu5H7CdoR73vZkmd/kvJ5ZBNfSeNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP85
Liql/0w+0JlKGtnbklaPgl10MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNzM5MEVERTRDNUIxMUYwOEZENTM5RjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI3MA0GCSqGSIb3DQEB
CwUAA4IBAQABri8fXVrMtSYTndcJ0Q7dVxgnOZV2aJjcDFvDBrm4/S1VqDVsgc2j
Wn3yfUz+5Z7zq+B+DVfED2cWRxx754KWuYqW2/WfsR1yqVneLhALhyOOMzNfjPEP
c2o8/E3pCXddMpd9C/bmgFGyhydyJogCSuL2hBXk4clEnYo6ffMlXk9cBoeaJGoP
imMmszav4CxDaxbHb3woYtVeXfzCgWZx0eM2RyL/BR2MXx5Ej/938NALL4TukyiK
HMO5mwkHOmC5MozDyuMw7uBppXK0KkmsMObTAVxfC3uQpVXOLdns+Mb8qd0ckvaW
uB2r4MuVGWnI/8YBhsKliJBEoNQ+++jk
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:41 2025 by rpki-client