Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616A902802B11F08E4E9DEEDAE4EC9C.roa
File: E616A902802B11F08E4E9DEEDAE4EC9C.roa (raw, json)
Hash identifier: x12riqOI5/GVviBwBFVbxo0OqM4YZRtue8oJpquCaEY=
Subject key identifier: 3C:2D:FE:71:1B:A0:94:E4:58:0F:D2:BB:B4:76:9F:18:03:56:00:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616A902802B11F08E4E9DEEDAE4EC9C.roa
Signing time: Sat 23 Aug 2025 14:17:29 +0000
ROA not before: Sat 23 Aug 2025 14:17:24 +0000
ROA not after: Wed 01 Oct 2025 14:17:24 +0000
asID: 57043
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103893 (0x195d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 14:17:24 2025 GMT
Not After : Oct 1 14:17:24 2025 GMT
Subject: CN=68a9cd78-b6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:2e:5d:33:74:52:99:1e:37:d4:45:c1:04:
00:98:72:f2:47:68:d7:ad:01:a5:f4:8e:24:de:a8:
df:b8:9e:5e:44:c4:1b:fa:8d:e7:7f:48:a3:ce:a7:
ae:aa:01:2f:a8:b2:e3:cb:bc:ea:aa:8d:d1:fd:8a:
f9:ef:53:5b:b3:b1:f4:7c:8b:d3:35:ee:d7:f1:98:
b8:5a:76:3c:eb:0f:93:d2:67:d2:52:bf:25:6f:f8:
7e:50:83:03:b8:38:37:74:04:8f:b6:44:d5:1a:cc:
79:1f:49:d6:37:05:1f:22:77:8a:f5:36:7b:c8:96:
8d:97:22:f6:03:7d:d8:a7:b0:5f:54:a3:92:b9:5b:
61:b2:9f:39:fe:ca:16:92:8f:c3:e8:d3:bd:2e:cc:
71:fb:db:cf:65:ed:d4:40:cc:65:f3:45:2d:95:1a:
9b:ff:d1:bf:a1:1c:94:fb:61:e7:b2:53:76:61:4e:
3f:f8:95:aa:5d:48:32:95:8e:3e:a3:28:3a:df:94:
bc:8f:65:76:c0:54:df:fd:e2:24:85:60:53:b3:8a:
b8:78:d4:1d:85:ba:05:d1:16:f7:e0:3c:28:8f:95:
2e:32:e4:1a:fc:50:4f:b7:60:a8:12:53:19:78:be:
1d:7f:00:3e:b8:1f:2f:ed:81:30:7a:72:78:0e:f3:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2D:FE:71:1B:A0:94:E4:58:0F:D2:BB:B4:76:9F:18:03:56:00:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616A902802B11F08E4E9DEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
71:75:8c:43:40:7d:a9:27:14:2e:e0:c1:75:3b:48:a9:50:88:
94:00:b7:95:fa:e7:6c:8a:9c:11:50:2f:82:71:18:45:0e:ae:
0a:60:b5:7a:de:3d:c9:e1:7e:e3:6f:07:03:63:eb:31:ca:6c:
90:77:24:60:9a:01:e6:21:d0:05:84:6a:ee:11:75:a7:a2:0f:
7a:ad:62:cc:62:bb:61:57:88:e7:2f:57:b8:1d:2d:57:ca:08:
60:ec:bb:17:9a:79:3b:fd:24:29:f6:0b:65:76:9a:25:42:8e:
c4:73:bf:10:d0:da:9b:75:a1:c2:e5:58:25:22:b4:86:f3:77:
80:de:ff:e4:bb:9b:93:5d:fa:35:a8:47:25:b3:1f:59:d0:c2:
29:34:21:4b:1a:a9:47:4e:08:55:3d:15:88:df:6e:88:de:79:
3e:71:54:6f:68:40:08:b5:e4:ab:81:7b:1e:dd:d8:29:e6:c9:
0c:30:9f:24:74:32:d8:04:8a:62:44:b8:d5:7f:45:e5:42:42:
ab:70:0d:d9:03:9c:5d:e6:5d:9b:4b:6e:87:6a:a5:88:dc:53:
72:c5:a2:60:4e:11:50:ec:7c:2a:11:45:e0:d8:eb:89:2a:06:
fc:82:f3:ac:3b:4d:48:c6:4d:28:de:97:d7:8e:1f:8e:5d:03:
21:7d:6f:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZXVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIzMTQxNzI0WhcNMjUxMDAxMTQxNzI0WjAYMRYw
FAYDVQQDEw02OGE5Y2Q3OC1iNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuQwuXTN0UpkeN9RFwQQAmHLyR2jXrQGl9I4k3qjfuJ5eRMQb+o3nf0ij
zqeuqgEvqLLjy7zqqo3R/Yr571Nbs7H0fIvTNe7X8Zi4WnY86w+T0mfSUr8lb/h+
UIMDuDg3dASPtkTVGsx5H0nWNwUfIneK9TZ7yJaNlyL2A33Yp7BfVKOSuVthsp85
/soWko/D6NO9Lsxx+9vPZe3UQMxl80UtlRqb/9G/oRyU+2HnslN2YU4/+JWqXUgy
lY4+oyg635S8j2V2wFTf/eIkhWBTs4q4eNQdhboF0Rb34Dwoj5UuMuQa/FBPt2Co
ElMZeL4dfwA+uB8v7YEwenJ4DvN2BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDwt
/nEboJTkWA/Su7R2nxgDVgDJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjE2QTkwMjgwMkIxMUYwOEU0RTlERUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4KMA0GCSqGSIb3DQEB
CwUAA4IBAQBxdYxDQH2pJxQu4MF1O0ipUIiUALeV+udsipwRUC+CcRhFDq4KYLV6
3j3J4X7jbwcDY+sxymyQdyRgmgHmIdAFhGruEXWnog96rWLMYrthV4jnL1e4HS1X
yghg7LsXmnk7/SQp9gtldpolQo7Ec78Q0NqbdaHC5VglIrSG83eA3v/ku5uTXfo1
qEclsx9Z0MIpNCFLGqlHTghVPRWI326I3nk+cVRvaEAIteSrgXse3dgp5skMMJ8k
dDLYBIpiRLjVf0XlQkKrcA3ZA5xd5l2bS26HaqWI3FNyxaJgThFQ7HwqEUXg2OuJ
Kgb8gvOsO01Ixk0o3pfXjh+OXQMhfW8I
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:32:04 2025 by rpki-client