Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9181B36754411F0ACF0D3AFDAE4EC9C.roa
File: F9181B36754411F0ACF0D3AFDAE4EC9C.roa (raw, json)
Hash identifier: ti0znJxs25zA5NvZO86CgwJdGwkza2qUz7ic/rsmFXY=
Subject key identifier: 6B:D5:88:43:C7:3C:D4:A9:BC:9F:19:5A:77:6D:94:13:01:E5:76:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01913F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9181B36754411F0ACF0D3AFDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 17:19:15 +0000
ROA not before: Sat 09 Aug 2025 17:19:10 +0000
ROA not after: Wed 15 Oct 2025 17:19:10 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102719 (0x1913f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 17:19:10 2025 GMT
Not After : Oct 15 17:19:10 2025 GMT
Subject: CN=68978313-90e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:f8:e7:ed:a1:19:c5:14:7b:ad:80:18:4e:
a1:d0:5e:96:74:21:ca:aa:00:e0:2e:52:fa:79:46:
b7:e2:a6:8e:41:d7:0e:5b:41:51:5c:27:d8:a9:2c:
f9:a5:55:5d:3c:6c:a2:54:8b:91:01:91:a6:ed:82:
5f:6a:fc:67:ee:50:0b:30:1b:31:2f:0f:e9:ad:04:
53:77:c7:39:c3:b2:db:0e:a5:02:1b:f7:8c:f3:86:
39:4e:1f:a1:2c:e4:5c:19:b7:05:a3:08:ab:ea:59:
14:76:44:b2:46:44:93:10:85:da:41:01:08:75:91:
23:43:33:92:a7:31:e8:15:bc:3c:c9:82:c7:d3:c0:
03:14:ae:fb:5e:ff:95:73:e0:e5:49:36:5c:6e:90:
d0:2f:b2:b3:84:e8:37:fd:d4:f2:17:88:e5:51:f6:
b3:4c:64:eb:26:2a:c4:dd:0b:0a:1f:3a:18:b4:46:
1f:c2:00:60:fc:12:a4:25:47:48:f5:84:e7:19:89:
a5:48:3f:68:b6:41:38:b8:3c:f9:28:31:37:cd:3a:
93:75:ae:54:51:12:64:55:72:27:62:17:ad:a6:00:
88:36:76:3e:71:9c:5a:b3:bc:4e:ed:d3:69:6c:12:
ac:a0:73:df:70:06:06:56:4e:8a:c9:05:f0:02:be:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D5:88:43:C7:3C:D4:A9:BC:9F:19:5A:77:6D:94:13:01:E5:76:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9181B36754411F0ACF0D3AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ff:1b:dd:21:21:13:3f:65:43:0e:c1:cc:09:7a:f4:0f:6c:
b4:31:86:23:2f:f3:a9:66:7a:45:16:82:40:be:b4:11:f5:30:
d8:62:5a:9d:93:2b:2d:9f:9e:26:09:05:4a:ef:47:e1:71:a1:
4e:4f:7a:43:1f:32:12:8f:55:d7:51:b3:fe:1c:21:db:b8:8c:
88:53:83:7e:7e:24:d9:64:b4:9f:f4:00:cc:78:ad:a2:da:66:
10:ea:96:e4:d9:48:56:d5:f4:5a:60:9c:90:a6:66:c3:3d:d8:
37:45:17:59:99:51:6f:3f:9c:6f:6c:aa:63:33:d1:97:1c:1c:
54:a6:97:bf:32:58:c2:9c:e1:cb:11:92:19:c4:28:54:92:b1:
a3:70:91:70:b3:df:f6:e6:ca:23:70:d8:7a:1b:5a:c6:a2:8a:
53:a5:af:2c:78:d9:75:d1:1d:1c:88:15:77:d5:6f:3d:32:2f:
97:ce:77:30:0d:5c:50:e9:cf:86:84:f9:8f:17:6f:e0:e7:59:
c5:39:90:cb:1d:f2:28:6e:52:79:0e:f1:93:be:2b:b9:b4:34:
86:1f:15:aa:b9:cd:2d:bf:d2:80:33:be:ff:61:09:f9:de:13:
84:2d:4e:c4:c0:b8:47:37:25:67:e5:96:3f:73:9b:40:c7:f5:
f9:e3:39:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZE/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA5MTcxOTEwWhcNMjUxMDE1MTcxOTEwWjAYMRYw
FAYDVQQDEw02ODk3ODMxMy05MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsk745+2hGcUUe62AGE6h0F6WdCHKqgDgLlL6eUa34qaOQdcOW0FRXCfY
qSz5pVVdPGyiVIuRAZGm7YJfavxn7lALMBsxLw/prQRTd8c5w7LbDqUCG/eM84Y5
Th+hLORcGbcFowir6lkUdkSyRkSTEIXaQQEIdZEjQzOSpzHoFbw8yYLH08ADFK77
Xv+Vc+DlSTZcbpDQL7KzhOg3/dTyF4jlUfazTGTrJirE3QsKHzoYtEYfwgBg/BKk
JUdI9YTnGYmlSD9otkE4uDz5KDE3zTqTda5UURJkVXInYhetpgCINnY+cZxas7xO
7dNpbBKsoHPfcAYGVk6KyQXwAr7CSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGvV
iEPHPNSpvJ8ZWndtlBMB5XaxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTE4MUIzNjc1NDQxMUYwQUNGMEQzQUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoDMA0GCSqGSIb3DQEB
CwUAA4IBAQDL/xvdISETP2VDDsHMCXr0D2y0MYYjL/OpZnpFFoJAvrQR9TDYYlqd
kystn54mCQVK70fhcaFOT3pDHzISj1XXUbP+HCHbuIyIU4N+fiTZZLSf9ADMeK2i
2mYQ6pbk2UhW1fRaYJyQpmbDPdg3RRdZmVFvP5xvbKpjM9GXHBxUppe/MljCnOHL
EZIZxChUkrGjcJFws9/25sojcNh6G1rGoopTpa8seNl10R0ciBV31W89Mi+Xzncw
DVxQ6c+GhPmPF2/g51nFOZDLHfIoblJ5DvGTviu5tDSGHxWquc0tv9KAM77/YQn5
3hOELU7EwLhHNyVn5ZY/c5tAx/X54zm0
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:23 2025 by rpki-client