Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E23B9876C411F0BB1E6CF3DAE4EC9C.roa
File: D0E23B9876C411F0BB1E6CF3DAE4EC9C.roa (raw, json)
Hash identifier: khytSWq+l5Vvp0AG+lOPkU3M4KTNX0zy66lJtc+XIEo=
Subject key identifier: 38:D5:16:7D:23:F0:49:23:A1:47:D1:3E:26:A2:C9:56:64:F8:BD:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019151
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E23B9876C411F0BB1E6CF3DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 15:06:54 +0000
ROA not before: Mon 11 Aug 2025 15:06:49 +0000
ROA not after: Tue 16 Sep 2025 15:06:49 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.82.3.0/24 maxlen: 24
154.82.4.0/24 maxlen: 24
154.82.5.0/24 maxlen: 24
154.82.6.0/24 maxlen: 24
154.82.7.0/24 maxlen: 24
154.82.8.0/24 maxlen: 24
154.82.9.0/24 maxlen: 24
154.82.10.0/24 maxlen: 24
154.90.8.0/24 maxlen: 24
154.90.9.0/24 maxlen: 24
154.90.10.0/24 maxlen: 24
154.90.11.0/24 maxlen: 24
154.90.12.0/24 maxlen: 24
154.90.13.0/24 maxlen: 24
154.90.14.0/24 maxlen: 24
154.90.15.0/24 maxlen: 24
154.90.16.0/24 maxlen: 24
154.90.17.0/24 maxlen: 24
154.94.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102737 (0x19151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 15:06:49 2025 GMT
Not After : Sep 16 15:06:49 2025 GMT
Subject: CN=689a070e-e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:61:f6:fe:90:e3:b9:6c:36:0d:f6:48:e2:
59:cc:72:ab:42:75:d5:c0:9b:5e:14:e0:79:40:2d:
da:85:67:b0:ad:ba:b0:d9:73:dc:1f:64:90:b6:34:
4f:84:3c:1d:d8:0d:d4:2d:c9:93:3a:19:1f:1a:cb:
0a:60:91:04:6c:54:6b:39:fd:91:49:c2:bd:f3:12:
f0:b2:9d:14:44:ce:91:41:48:2c:a8:7c:4d:85:28:
aa:3b:17:10:b4:01:16:d3:3f:58:bc:d5:95:0c:14:
a5:14:a1:9e:7e:f2:3c:43:36:09:6b:e9:1d:87:61:
59:24:62:47:b1:66:41:01:b0:d7:ef:6d:e3:98:e9:
18:e5:88:06:58:27:8a:11:0c:20:02:e7:dd:15:7d:
a3:4a:7f:f8:d7:75:b9:c5:f3:e2:23:ef:89:ae:bc:
9f:9b:76:0c:84:2d:0e:99:0b:c9:e4:fd:46:60:06:
b6:5f:93:40:7f:49:2d:20:eb:88:63:f2:bf:e8:89:
6b:6b:62:df:ac:4e:4f:ad:1e:03:cc:34:b8:4a:46:
d0:e6:4e:18:8a:ba:50:c8:8e:ad:e5:e9:a2:b6:53:
34:ed:21:26:e0:5a:fa:c7:12:76:a8:11:55:53:29:
d2:e7:80:ee:cc:7a:16:5c:f6:60:ec:ca:ad:bc:a0:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:16:7D:23:F0:49:23:A1:47:D1:3E:26:A2:C9:56:64:F8:BD:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E23B9876C411F0BB1E6CF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0-154.82.10.255
154.90.8.0-154.90.17.255
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
09:f4:f6:bc:e3:f5:5b:3b:33:1d:d0:20:ff:f1:36:70:46:43:
44:8f:53:8f:10:a3:d4:93:9d:65:2f:71:60:1a:f7:be:83:56:
dd:54:06:b6:a1:8e:54:87:ae:31:39:50:25:f7:73:6f:6d:b9:
92:92:f1:1a:65:80:30:77:a8:8e:b7:ed:de:21:9d:16:5e:39:
31:7f:df:3a:33:38:c1:11:af:8a:0e:d4:67:63:ea:68:f7:81:
39:cc:e4:cc:6c:cb:2d:77:35:e0:59:a6:37:2c:d5:cb:08:ed:
6b:7a:81:4a:92:44:e2:b8:d1:91:c4:d6:23:48:cb:4a:e0:35:
18:1d:f8:bf:49:e4:b7:38:18:dd:a0:74:db:4f:5f:1e:4c:21:
4e:8a:91:0c:56:48:7b:fb:ac:8b:35:8d:bb:63:b4:a1:59:b3:
aa:f3:ce:49:04:5e:1f:67:ad:b9:7a:99:7d:12:55:0d:6a:76:
f8:d2:9a:f8:51:c3:ac:72:7c:a1:f5:6d:c5:56:e8:01:9d:ea:
61:5a:16:b9:b5:80:43:9f:9d:a4:81:fa:11:7f:63:72:63:ca:
aa:98:eb:1a:8e:d1:86:9c:68:20:2f:e1:2a:95:2e:b3:07:24:
3e:57:63:ef:24:a0:f9:26:46:80:e5:38:d4:61:09:ad:42:79:
14:93:7a:85
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAZFRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODExMTUwNjQ5WhcNMjUwOTE2MTUwNjQ5WjAYMRYw
FAYDVQQDEw02ODlhMDcwZS1lNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbdh9v6Q47lsNg32SOJZzHKrQnXVwJteFOB5QC3ahWewrbqw2XPcH2SQ
tjRPhDwd2A3ULcmTOhkfGssKYJEEbFRrOf2RScK98xLwsp0URM6RQUgsqHxNhSiq
OxcQtAEW0z9YvNWVDBSlFKGefvI8QzYJa+kdh2FZJGJHsWZBAbDX723jmOkY5YgG
WCeKEQwgAufdFX2jSn/413W5xfPiI++Jrryfm3YMhC0OmQvJ5P1GYAa2X5NAf0kt
IOuIY/K/6Ilra2LfrE5PrR4DzDS4SkbQ5k4YirpQyI6t5emitlM07SEm4Fr6xxJ2
qBFVUynS54DuzHoWXPZg7MqtvKCXkQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFDjV
Fn0j8EkjoUfRPiaiyVZk+L0rMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMEUyM0I5ODc2QzQxMUYwQkIxRTZDRjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAGaUgIDBACaUgowDAME
A5paCAMEAZpaEAMEBZpewDANBgkqhkiG9w0BAQsFAAOCAQEACfT2vOP1WzszHdAg
//E2cEZDRI9TjxCj1JOdZS9xYBr3voNW3VQGtqGOVIeuMTlQJfdzb225kpLxGmWA
MHeojrft3iGdFl45MX/fOjM4wRGvig7UZ2PqaPeBOczkzGzLLXc14FmmNyzVywjt
a3qBSpJE4rjRkcTWI0jLSuA1GB34v0nktzgY3aB0209fHkwhToqRDFZIe/usizWN
u2O0oVmzqvPOSQReH2etuXqZfRJVDWp2+NKa+FHDrHJ8ofVtxVboAZ3qYVoWubWA
Q5+dpIH6EX9jcmPKqpjrGo7RhpxoIC/hKpUuswckPldj7ySg+SZGgOU41GEJrUJ5
FJN6hQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:58 2025 by rpki-client