Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB9109C76B511F0945A5C96DAE4EC9C.roa
File: DAB9109C76B511F0945A5C96DAE4EC9C.roa (raw, json)
Hash identifier: eRwkYAsnNKJbwoW4h3FoQtsLF1y+bm/7bZTquaPNRrY=
Subject key identifier: 28:71:61:9A:61:0A:EE:9F:D9:79:A9:08:14:2A:6C:33:B8:D7:1A:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01914D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB9109C76B511F0945A5C96DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 13:19:48 +0000
ROA not before: Mon 11 Aug 2025 13:19:42 +0000
ROA not after: Tue 16 Sep 2025 13:19:42 +0000
asID: 213702
IP address blocks: 154.194.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102733 (0x1914d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 13:19:42 2025 GMT
Not After : Sep 16 13:19:42 2025 GMT
Subject: CN=6899edf4-43f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:70:3e:e6:76:2f:80:11:cc:16:e8:c5:d9:
0b:01:51:7b:a7:cd:00:d9:cf:70:68:5e:44:4f:49:
8e:90:8d:ad:be:48:59:ef:0d:af:14:88:e1:1f:41:
5a:e6:17:83:23:06:a6:35:9c:ba:bd:27:05:de:ac:
56:c2:d3:35:ae:da:fb:60:a6:c9:64:b9:5c:6b:e8:
b2:02:35:35:82:30:45:21:6e:45:23:07:6b:cb:69:
b0:5b:06:ad:5a:cd:33:c6:83:5f:40:a7:de:75:be:
32:45:27:6c:da:e1:aa:71:56:67:ce:a8:38:10:c8:
39:f2:fe:4f:fc:2d:e7:6c:71:72:0f:a3:76:f7:6a:
d1:e5:eb:a8:18:0c:e2:e2:2a:ff:25:28:4d:c3:df:
8a:25:d5:81:f8:7f:86:d2:29:d1:e8:ab:25:e4:92:
2c:74:63:9f:b9:6a:0e:32:ec:f9:60:46:48:51:8b:
8c:0e:54:e7:3d:40:01:b7:c4:23:d5:17:bf:28:07:
50:06:43:5f:4f:6f:7d:ec:6f:74:a9:35:ad:ee:ec:
27:15:3a:ea:21:7e:72:2b:00:61:08:37:ab:18:4b:
2e:50:55:bf:3b:42:5e:1c:25:f4:1d:a6:8b:4d:a5:
31:19:50:e4:0f:d2:df:0a:93:9c:5a:13:09:10:42:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:61:9A:61:0A:EE:9F:D9:79:A9:08:14:2A:6C:33:B8:D7:1A:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB9109C76B511F0945A5C96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/23
Signature Algorithm: sha256WithRSAEncryption
84:c1:55:1c:76:cc:e4:35:65:d2:44:dd:8b:3d:e2:f3:03:e1:
95:e0:f0:fc:45:7f:45:3e:ee:83:8a:c6:48:7a:2c:84:a4:27:
79:f1:fb:7a:74:1e:cb:97:d8:4f:ac:6e:05:3f:e0:99:b1:d8:
ac:2c:f6:e8:55:77:fc:d2:b3:be:02:98:73:2d:78:99:3e:96:
94:83:58:12:8e:0e:0f:16:c3:97:d8:51:20:6a:d5:59:59:4f:
aa:bf:91:93:c4:f0:4b:64:f2:fb:13:d8:92:fd:86:1e:83:b5:
64:72:af:b8:88:46:1e:1b:e7:12:97:66:66:eb:1b:56:2b:20:
79:53:52:8c:84:68:3e:51:f8:d2:b8:09:66:b5:9f:0a:f3:aa:
a8:13:ee:4b:e8:46:59:15:4c:4a:35:09:33:f8:7f:87:31:97:
6f:c6:96:35:0e:9f:dc:dd:43:c4:a8:da:e3:79:47:7e:09:3d:
71:4b:1a:49:1e:c3:8c:c7:15:d4:65:01:25:17:ff:ca:4e:58:
3c:79:37:7b:bc:e1:a8:5d:b3:37:5d:6f:5c:61:04:35:a5:c6:
71:ee:9e:d6:50:c9:b7:b4:28:ca:ce:de:03:78:51:b6:96:6a:
4b:f0:8e:dc:34:53:c8:a6:c5:68:60:5a:1b:4c:e3:20:df:c3:
19:b8:8b:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZFNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODExMTMxOTQyWhcNMjUwOTE2MTMxOTQyWjAYMRYw
FAYDVQQDEw02ODk5ZWRmNC00M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsoVwPuZ2L4ARzBboxdkLAVF7p80A2c9waF5ET0mOkI2tvkhZ7w2vFIjh
H0Fa5heDIwamNZy6vScF3qxWwtM1rtr7YKbJZLlca+iyAjU1gjBFIW5FIwdry2mw
WwatWs0zxoNfQKfedb4yRSds2uGqcVZnzqg4EMg58v5P/C3nbHFyD6N292rR5euo
GAzi4ir/JShNw9+KJdWB+H+G0inR6Ksl5JIsdGOfuWoOMuz5YEZIUYuMDlTnPUAB
t8Qj1Re/KAdQBkNfT2997G90qTWt7uwnFTrqIX5yKwBhCDerGEsuUFW/O0JeHCX0
HaaLTaUxGVDkD9LfCpOcWhMJEEJ99QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFChx
YZphCu6f2XmpCBQqbDO41xrMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQUI5MTA5Qzc2QjUxMUYwOTQ1QTVDOTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsLgMA0GCSqGSIb3DQEB
CwUAA4IBAQCEwVUcdszkNWXSRN2LPeLzA+GV4PD8RX9FPu6DisZIeiyEpCd58ft6
dB7Ll9hPrG4FP+CZsdisLPboVXf80rO+AphzLXiZPpaUg1gSjg4PFsOX2FEgatVZ
WU+qv5GTxPBLZPL7E9iS/YYeg7Vkcq+4iEYeG+cSl2Zm6xtWKyB5U1KMhGg+UfjS
uAlmtZ8K86qoE+5L6EZZFUxKNQkz+H+HMZdvxpY1Dp/c3UPEqNrjeUd+CT1xSxpJ
HsOMxxXUZQElF//KTlg8eTd7vOGoXbM3XW9cYQQ1pcZx7p7WUMm3tCjKzt4DeFG2
lmpL8I7cNFPIpsVoYFobTOMg38MZuIs4
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:57 2025 by rpki-client