Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E41075164B6F11F09EE8C5E8DAE4EC9C.roa
File: E41075164B6F11F09EE8C5E8DAE4EC9C.roa (raw, json)
Hash identifier: m7vXhPVt4g/HQmJbIIaiXWZUPC230RAxew7BKG5cssk=
Subject key identifier: DA:CA:F6:50:56:D4:D9:97:62:9E:4A:C0:E4:A2:C2:B3:10:2B:95:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018715
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E41075164B6F11F09EE8C5E8DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 11:40:39 +0000
ROA not before: Tue 17 Jun 2025 11:40:34 +0000
ROA not after: Thu 24 Jul 2025 11:40:34 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
154.89.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100117 (0x18715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 11:40:34 2025 GMT
Not After : Jul 24 11:40:34 2025 GMT
Subject: CN=68515437-e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:0e:1c:2a:3f:4d:0b:13:e4:6a:8a:1c:3c:
7f:f7:34:a4:a4:02:38:05:86:2d:53:e6:85:b1:f0:
ac:98:b5:6e:50:44:98:00:63:dc:0c:fd:38:f6:4a:
84:b0:55:92:f4:32:2f:8c:35:5d:05:1f:6c:27:6e:
47:96:36:77:dc:1c:2a:ac:04:a8:a1:73:a4:57:86:
df:d0:67:36:79:4c:ff:83:db:8d:17:3c:24:01:13:
00:d8:f8:53:11:44:54:d9:7b:a0:8c:e2:30:8d:f0:
3d:43:75:38:3c:00:1d:06:80:19:31:73:be:0e:d8:
4c:50:7a:40:cc:c9:ac:fa:aa:a8:b2:f6:2d:ec:9d:
bd:70:fc:53:47:b3:35:fe:23:5d:7d:38:00:4f:d1:
ee:46:6b:92:57:22:0e:94:a4:95:05:79:54:28:41:
07:91:d3:a4:a0:df:6f:26:d1:cb:76:ff:59:9f:a1:
bd:cf:72:8f:b7:df:c4:89:75:03:de:04:1f:cc:ba:
07:88:d7:57:64:4a:dd:43:b2:88:24:d3:ab:e1:1b:
92:ab:32:00:69:b5:34:b6:7a:52:b6:77:1c:6a:7d:
7d:e3:ef:52:25:f5:b4:2e:0d:0d:20:dd:35:8a:d4:
d6:95:13:18:e1:10:12:49:0e:43:f0:cc:fc:e1:6d:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:F6:50:56:D4:D9:97:62:9E:4A:C0:E4:A2:C2:B3:10:2B:95:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E41075164B6F11F09EE8C5E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
154.89.200.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:b5:02:46:47:cf:54:0f:af:47:1e:78:c8:33:9c:4f:f0:77:
8f:c2:85:be:94:ea:18:29:fe:e6:fd:22:ea:47:32:8b:cc:d5:
05:e1:5d:d9:79:63:77:e6:77:96:86:71:31:f5:52:87:33:ea:
bd:2e:73:1f:0b:5b:5b:46:c1:d6:a5:27:00:8f:63:02:1f:57:
7a:3d:b4:72:65:3d:01:0d:7c:80:61:09:2c:29:5a:13:a0:00:
8e:4d:21:b0:19:ba:d0:6d:ed:c1:c7:7d:a5:74:b6:3c:4e:85:
04:e2:f8:4d:09:3f:33:0a:78:29:29:0e:cd:65:e2:0b:0f:02:
36:02:a0:2a:dd:80:81:77:33:1b:f3:fd:87:7a:34:0f:76:13:
d9:99:a7:88:3a:6b:c7:8a:ce:d8:75:c9:80:8e:00:64:49:4f:
0b:e2:38:e1:5a:b9:c7:b6:09:52:71:fa:18:00:8b:4e:cf:45:
16:1d:2e:f7:f2:47:b8:36:bd:34:d5:5e:1f:2f:b7:e2:cc:0d:
45:1c:63:c7:fa:bb:6b:69:18:3a:8a:c6:fd:01:b7:08:2d:db:
f1:26:93:6b:af:08:23:ca:a8:71:a3:15:aa:78:c6:c3:f7:14:
84:64:5c:85:8b:08:d9:bb:70:1c:ba:5c:3b:76:e8:67:89:16:
e0:72:3f:48
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYcVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE3MTE0MDM0WhcNMjUwNzI0MTE0MDM0WjAYMRYw
FAYDVQQDEw02ODUxNTQzNy1lMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwFsOHCo/TQsT5GqKHDx/9zSkpAI4BYYtU+aFsfCsmLVuUESYAGPcDP04
9kqEsFWS9DIvjDVdBR9sJ25HljZ33BwqrASooXOkV4bf0Gc2eUz/g9uNFzwkARMA
2PhTEURU2XugjOIwjfA9Q3U4PAAdBoAZMXO+DthMUHpAzMms+qqosvYt7J29cPxT
R7M1/iNdfTgAT9HuRmuSVyIOlKSVBXlUKEEHkdOkoN9vJtHLdv9Zn6G9z3KPt9/E
iXUD3gQfzLoHiNdXZErdQ7KIJNOr4RuSqzIAabU0tnpStnccan194+9SJfW0Lg0N
IN01itTWlRMY4RASSQ5D8Mz84W0/8QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNrK
9lBW1NmXYp5KwOSiwrMQK5WYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNDEwNzUxNjRCNkYxMUYwOUVFOEM1RThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmlmgAwQDmlnIMA0GCSqG
SIb3DQEBCwUAA4IBAQAOtQJGR89UD69HHnjIM5xP8HePwoW+lOoYKf7m/SLqRzKL
zNUF4V3ZeWN35neWhnEx9VKHM+q9LnMfC1tbRsHWpScAj2MCH1d6PbRyZT0BDXyA
YQksKVoToACOTSGwGbrQbe3Bx32ldLY8ToUE4vhNCT8zCngpKQ7NZeILDwI2AqAq
3YCBdzMb8/2HejQPdhPZmaeIOmvHis7YdcmAjgBkSU8L4jjhWrnHtglScfoYAItO
z0UWHS738ke4Nr001V4fL7fizA1FHGPH+rtraRg6isb9AbcILdvxJpNrrwgjyqhx
oxWqeMbD9xSEZFyFiwjZu3Aculw7duhniRbgcj9I
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:54:39 2025 by rpki-client