Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECB53A30591111F09BA515A1DAE4EC9C.roa
File: ECB53A30591111F09BA515A1DAE4EC9C.roa (raw, json)
Hash identifier: r048J//tW5l6dEiVmHnbbXKQnJptFIHX4sVZIDDSg90=
Subject key identifier: 4B:C4:06:56:54:CA:9A:E5:39:E3:73:7D:74:47:AD:6F:DB:CB:9A:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018AAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECB53A30591111F09BA515A1DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 20:03:17 +0000
ROA not before: Fri 04 Jul 2025 20:03:12 +0000
ROA not after: Mon 08 Dec 2025 20:03:12 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101036 (0x18aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 20:03:12 2025 GMT
Not After : Dec 8 20:03:12 2025 GMT
Subject: CN=68683385-7a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:bc:17:c5:57:9c:e2:29:32:7f:40:96:93:
7e:e0:b2:87:30:b6:c1:95:ac:3d:d3:f5:13:1d:c4:
be:d1:60:3a:77:2c:51:e8:d3:cc:59:d4:53:e3:ac:
fb:11:3a:07:21:51:99:d3:ed:ed:26:f2:01:33:82:
93:de:ce:17:68:ef:ad:0c:22:8a:8e:ad:7a:ae:b6:
a5:9b:8a:6a:57:76:84:4c:6a:13:07:61:56:60:e8:
07:2f:d7:f9:1f:ba:64:37:f1:89:cb:5c:29:46:6e:
aa:97:b6:12:d4:2d:da:57:ff:ad:66:f9:cb:6b:55:
91:75:3b:be:6b:a1:db:91:94:49:6b:ab:64:fe:6d:
49:4a:f0:fa:24:bc:13:c4:af:34:44:26:61:84:9e:
fd:31:2b:b6:cf:93:f6:fb:66:54:6c:0b:6b:7c:c5:
04:38:02:12:d7:6c:1e:bb:8f:67:5f:56:b8:a9:80:
9d:9f:53:40:25:9e:d4:1b:43:c4:95:20:74:5f:1a:
6d:d9:e7:e6:2b:40:48:43:82:dd:26:4e:22:f2:67:
f3:52:15:8b:17:e9:14:3e:f3:92:fc:1d:0d:ec:4a:
8e:c0:f5:35:ef:8b:36:61:a7:1f:f5:fb:c5:8e:4e:
47:2c:29:10:9a:b3:54:75:27:34:65:4d:62:6a:b8:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:06:56:54:CA:9A:E5:39:E3:73:7D:74:47:AD:6F:DB:CB:9A:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECB53A30591111F09BA515A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
b9:58:10:d4:8d:3e:3a:7e:99:91:aa:c7:e1:fc:b5:6d:75:e3:
2b:2f:9a:24:10:00:e2:3b:8d:52:85:5d:dc:f4:8f:7b:1f:a9:
f8:d1:9b:8c:cc:f6:a6:f5:9a:67:ce:e7:7b:08:e3:fe:af:0b:
fb:a0:1a:76:7e:4f:12:b4:94:ec:9e:26:25:48:33:97:49:01:
af:d7:50:c4:04:e0:4e:a6:c0:a3:b0:bf:8e:b8:42:61:ca:30:
6a:b3:93:ae:d8:cb:90:df:0a:c2:24:43:a1:2d:6c:2c:1c:63:
cc:3f:12:f8:ce:d0:48:e8:3e:10:82:86:df:2f:5a:e8:30:0d:
f3:89:42:c7:91:44:82:04:68:c0:2c:ba:67:1c:b9:d0:6f:68:
c9:69:ff:84:ae:8b:fa:5f:32:23:2f:1b:9b:26:74:03:2c:31:
e6:4e:ff:26:f8:f3:0b:f7:17:a0:ea:a6:6d:91:5e:dd:3e:72:
8d:8d:aa:ca:b8:1c:03:72:75:2a:07:05:44:8c:bd:77:21:5d:
aa:b2:de:6a:41:13:c1:e7:25:61:71:53:50:72:77:aa:97:69:
9d:c7:8e:18:71:11:a7:7c:50:16:94:2f:be:21:e4:64:e8:46:
8b:19:32:64:0b:49:61:3c:11:84:8f:12:f6:7e:ab:00:ec:08:
13:44:4f:06
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYqsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA0MjAwMzEyWhcNMjUxMjA4MjAwMzEyWjAYMRYw
FAYDVQQDEw02ODY4MzM4NS03YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxta8F8VXnOIpMn9AlpN+4LKHMLbBlaw90/UTHcS+0WA6dyxR6NPMWdRT
46z7EToHIVGZ0+3tJvIBM4KT3s4XaO+tDCKKjq16rralm4pqV3aETGoTB2FWYOgH
L9f5H7pkN/GJy1wpRm6ql7YS1C3aV/+tZvnLa1WRdTu+a6HbkZRJa6tk/m1JSvD6
JLwTxK80RCZhhJ79MSu2z5P2+2ZUbAtrfMUEOAIS12weu49nX1a4qYCdn1NAJZ7U
G0PElSB0Xxpt2efmK0BIQ4LdJk4i8mfzUhWLF+kUPvOS/B0N7EqOwPU174s2Yacf
9fvFjk5HLCkQmrNUdSc0ZU1iarhigQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEvE
BlZUyprlOeNzfXRHrW/by5o6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQ0I1M0EzMDU5MTExMUYwOUJBNTE1QTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaUp8DBACaUqAwDQYJ
KoZIhvcNAQELBQADggEBALlYENSNPjp+mZGqx+H8tW114ysvmiQQAOI7jVKFXdz0
j3sfqfjRm4zM9qb1mmfO53sI4/6vC/ugGnZ+TxK0lOyeJiVIM5dJAa/XUMQE4E6m
wKOwv464QmHKMGqzk67Yy5DfCsIkQ6EtbCwcY8w/EvjO0EjoPhCCht8vWugwDfOJ
QseRRIIEaMAsumccudBvaMlp/4Sui/pfMiMvG5smdAMsMeZO/yb48wv3F6Dqpm2R
Xt0+co2Nqsq4HANydSoHBUSMvXchXaqy3mpBE8HnJWFxU1Byd6qXaZ3HjhhxEad8
UBaUL74h5GToRosZMmQLSWE8EYSPEvZ+qwDsCBNETwY=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:56:55 2025 by rpki-client