Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C93D1CD072A711F089CB23B0DAE4EC9C.roa
File: C93D1CD072A711F089CB23B0DAE4EC9C.roa (raw, json)
Hash identifier: FjradFluKghR+XJRbPKwXJOFlqLvZHOCkpH+OScmFAo=
Subject key identifier: 8D:A5:47:81:C6:E4:8F:AB:57:E9:CA:D5:74:D1:6A:CE:D1:CD:39:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C93D1CD072A711F089CB23B0DAE4EC9C.roa
Signing time: Wed 06 Aug 2025 09:29:01 +0000
ROA not before: Wed 06 Aug 2025 09:28:56 +0000
ROA not after: Sat 30 Aug 2025 09:28:56 +0000
asID: 61461
IP address blocks: 154.216.192.0/18 maxlen: 24
154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102580 (0x190b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 09:28:56 2025 GMT
Not After : Aug 30 09:28:56 2025 GMT
Subject: CN=6893205d-ddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:8d:56:e9:5f:eb:46:a7:08:1f:39:e8:58:
26:c9:67:79:ce:6d:e5:da:03:e3:aa:32:17:ab:f8:
e6:ae:40:77:e8:b0:db:9a:1b:d8:16:34:87:ea:99:
8c:bc:c9:8f:d5:56:0e:32:df:bb:b4:c2:2f:9d:1e:
0d:74:2d:8f:c8:ea:f1:40:09:45:46:cc:46:36:70:
99:be:66:24:a5:a3:11:6b:94:e9:ca:77:3e:e0:4f:
81:f7:6e:8d:26:0c:11:ad:d0:1c:a5:a1:51:12:86:
c7:a5:38:42:d2:2f:af:3e:be:f5:b0:8f:93:1e:79:
38:3d:b4:89:d8:c9:e0:71:04:7b:33:9a:3a:93:09:
6e:4d:59:82:42:6a:fb:b2:11:59:33:80:24:6e:41:
da:fd:50:8a:bd:dd:c1:fa:6a:65:2f:4c:6d:79:df:
c6:59:58:77:da:70:6e:a4:ef:40:46:1e:42:46:fc:
26:d9:f6:e2:9a:e7:f0:3f:d7:24:b3:21:d7:5f:c3:
99:b1:6a:d9:96:fc:52:cb:cd:c6:e8:a5:44:b6:74:
ea:a0:99:f7:a6:ad:b4:9f:cd:d8:fd:ba:8d:f2:9e:
ff:53:d5:cd:0b:cf:a8:1d:be:55:9c:78:3e:c9:88:
ea:8c:87:a6:92:9c:23:03:d8:62:82:d8:ea:55:56:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:47:81:C6:E4:8F:AB:57:E9:CA:D5:74:D1:6A:CE:D1:CD:39:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C93D1CD072A711F089CB23B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b5:e3:ae:ef:3a:9a:a3:71:a6:7f:6d:fa:05:1e:18:b3:37:fc:
7b:12:cf:55:92:7a:72:4a:90:38:11:b2:04:ba:c2:02:a8:68:
f8:54:0a:45:73:9b:b4:52:3f:98:98:21:21:ae:62:e3:8c:ff:
3e:35:b4:9d:55:b5:cb:fb:8d:89:3e:c8:48:3d:45:2f:bd:49:
8e:82:3e:20:7e:d3:2a:31:b9:f4:8e:ac:a5:b6:c3:3d:d2:94:
b8:bc:34:a1:94:2d:9b:3c:8f:62:a2:e5:51:28:0b:e8:d4:f5:
58:2b:f3:ad:68:f1:84:50:1f:b2:8a:01:aa:bb:ef:7b:12:2b:
41:e4:8b:0c:40:d4:ea:5d:7c:91:1f:08:57:35:87:c4:82:61:
4e:29:6e:21:7f:36:aa:90:91:e3:d9:16:81:be:f6:d9:1a:2c:
c2:b6:c5:49:63:52:a5:63:e2:ac:58:ce:5e:a7:2e:ec:ae:05:
b7:0b:45:07:56:44:18:a9:64:10:71:49:4f:dd:b5:ee:f8:70:
7d:62:c9:dc:b3:89:e7:cf:22:6a:89:1c:5d:58:e5:a7:23:69:
41:18:ea:50:f7:90:f7:3f:1e:f1:22:bf:0d:b4:55:74:56:5b:
22:bc:87:a0:de:ba:34:90:59:33:76:3b:7f:9e:3c:b7:21:10:
12:ca:f7:0e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZC0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA2MDkyODU2WhcNMjUwODMwMDkyODU2WjAYMRYw
FAYDVQQDEw02ODkzMjA1ZC1kZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArP6NVulf60anCB856FgmyWd5zm3l2gPjqjIXq/jmrkB36LDbmhvYFjSH
6pmMvMmP1VYOMt+7tMIvnR4NdC2PyOrxQAlFRsxGNnCZvmYkpaMRa5Tpync+4E+B
926NJgwRrdAcpaFREobHpThC0i+vPr71sI+THnk4PbSJ2MngcQR7M5o6kwluTVmC
Qmr7shFZM4AkbkHa/VCKvd3B+mplL0xted/GWVh32nBupO9ARh5CRvwm2fbimufw
P9cksyHXX8OZsWrZlvxSy83G6KVEtnTqoJn3pq20n83Y/bqN8p7/U9XNC8+oHb5V
nHg+yYjqjIemkpwjA9higtjqVVaMrQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFI2l
R4HG5I+rV+nK1XTRas7RzTm+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOTNEMUNEMDcyQTcxMUYwODlDQjIzQjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGmtjAAwQGmtrAMA0GCSqG
SIb3DQEBCwUAA4IBAQC1467vOpqjcaZ/bfoFHhizN/x7Es9VknpySpA4EbIEusIC
qGj4VApFc5u0Uj+YmCEhrmLjjP8+NbSdVbXL+42JPshIPUUvvUmOgj4gftMqMbn0
jqyltsM90pS4vDShlC2bPI9iouVRKAvo1PVYK/OtaPGEUB+yigGqu+97EitB5IsM
QNTqXXyRHwhXNYfEgmFOKW4hfzaqkJHj2RaBvvbZGizCtsVJY1KlY+KsWM5epy7s
rgW3C0UHVkQYqWQQcUlP3bXu+HB9Ysncs4nnzyJqiRxdWOWnI2lBGOpQ95D3Px7x
Ir8NtFV0VlsivIeg3ro0kFkzdjt/njy3IRASyvcO
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:44 2025 by rpki-client