Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50294BD0513111F0AA1648E0DAE4EC9C.roa
File: 50294BD0513111F0AA1648E0DAE4EC9C.roa (raw, json)
Hash identifier: /ZOjw6Is2mOPHbwr9L9ZNCuFT4ZIN6LvQQ5PPlgDSf4=
Subject key identifier: 1B:9B:EB:DC:BD:F4:40:C7:2F:3D:AF:A7:A0:B3:E5:56:97:5B:9E:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50294BD0513111F0AA1648E0DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 19:27:49 +0000
ROA not before: Tue 24 Jun 2025 19:27:45 +0000
ROA not after: Fri 15 Aug 2025 19:27:45 +0000
asID: 63139
IP address blocks: 154.203.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Jul 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100514 (0x188a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:27:45 2025 GMT
Not After : Aug 15 19:27:45 2025 GMT
Subject: CN=685afc35-148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:81:c7:60:f7:5b:6c:f6:df:9c:64:24:06:
35:73:5e:15:da:69:95:e7:b6:54:08:c8:19:a8:cf:
e4:3f:f0:77:bd:3b:58:fe:3d:59:39:0b:3b:fe:6c:
b6:ff:85:8b:2c:5f:8d:b9:43:da:d5:66:4f:79:c0:
23:ab:18:4e:95:74:16:c9:af:e4:69:b6:7f:af:49:
4f:bc:23:8c:dc:9c:b6:91:66:34:6d:14:52:a7:e0:
e4:3c:d4:83:29:a2:e3:d0:64:ee:4f:db:dc:af:57:
db:9e:6b:19:d0:29:d0:60:15:78:17:7f:a0:f9:db:
d5:ae:0d:ca:44:3a:ed:45:59:1e:7a:a7:c2:20:7e:
ae:c9:e6:40:a2:5d:14:b1:56:e4:cc:74:ff:4c:ff:
6d:7b:aa:c3:e2:b0:a4:ab:88:54:fa:38:37:1c:3b:
c3:2e:95:af:ba:bf:de:92:f6:16:aa:59:ea:91:bb:
5d:c2:c4:8f:1f:7c:a4:f5:0c:6d:02:47:9e:de:e1:
50:07:36:af:c4:46:b9:9f:d1:d9:b8:f5:0a:60:2c:
e3:9e:45:8b:9b:ed:7a:24:d8:a5:fd:05:5d:fd:b4:
7b:19:d0:9e:7a:a1:a5:54:9c:c2:97:1f:75:95:8d:
5f:d9:dd:2c:a7:f2:09:9d:ef:fc:53:47:99:66:b2:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:EB:DC:BD:F4:40:C7:2F:3D:AF:A7:A0:B3:E5:56:97:5B:9E:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50294BD0513111F0AA1648E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.179.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cf:0e:f5:48:48:8d:c4:e5:80:88:a3:e4:40:59:e6:61:ea:
fc:c9:f0:d4:20:8d:06:82:8c:74:e1:d1:94:f7:6e:f9:9f:c5:
c8:7d:da:29:91:53:df:04:0c:db:45:ee:de:58:31:8b:cb:76:
ed:e1:65:c9:68:77:8f:d2:94:cc:e8:11:13:37:c2:60:d3:c7:
90:22:e2:e3:4f:ad:24:6b:0d:82:8d:c6:c3:63:8c:10:d3:74:
8a:c0:e5:60:ed:ec:aa:6f:95:6c:d5:d4:d8:23:9b:d1:51:4e:
6e:31:f0:9d:d8:b0:cd:b6:d1:7b:be:93:83:a1:d6:1b:40:8c:
e7:e4:79:c2:1b:9f:a0:83:20:e5:52:15:e6:69:79:ed:b8:e1:
a9:e0:82:db:70:e3:07:d7:72:c8:00:9f:99:1e:18:5c:f0:25:
81:80:42:51:d1:21:38:43:7e:9c:47:ca:1f:0d:d1:d2:85:95:
9c:cc:8a:30:8a:a2:3a:7d:2c:18:71:92:f5:92:23:33:0e:67:
e2:2f:13:d7:4b:48:a0:d4:d8:54:94:93:fc:27:4c:ab:fc:67:
9e:42:5e:49:5f:1a:9b:4e:ed:0b:ef:d4:c3:6a:48:93:d9:e9:
f7:68:75:3e:be:16:a2:8e:2d:70:1e:7f:37:53:56:f7:01:cb:
46:c5:ba:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYiiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI0MTkyNzQ1WhcNMjUwODE1MTkyNzQ1WjAYMRYw
FAYDVQQDEw02ODVhZmMzNS0xNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxQyBx2D3W2z235xkJAY1c14V2mmV57ZUCMgZqM/kP/B3vTtY/j1ZOQs7
/my2/4WLLF+NuUPa1WZPecAjqxhOlXQWya/kabZ/r0lPvCOM3Jy2kWY0bRRSp+Dk
PNSDKaLj0GTuT9vcr1fbnmsZ0CnQYBV4F3+g+dvVrg3KRDrtRVkeeqfCIH6uyeZA
ol0UsVbkzHT/TP9te6rD4rCkq4hU+jg3HDvDLpWvur/ekvYWqlnqkbtdwsSPH3yk
9QxtAkee3uFQBzavxEa5n9HZuPUKYCzjnkWLm+16JNil/QVd/bR7GdCeeqGlVJzC
lx91lY1f2d0sp/IJne/8U0eZZrJzWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBub
69y99EDHLz2vp6Cz5VaXW54SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MDI5NEJEMDUxMzExMUYwQUExNjQ4RTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuzMA0GCSqGSIb3DQEB
CwUAA4IBAQCSzw71SEiNxOWAiKPkQFnmYer8yfDUII0Ggox04dGU9275n8XIfdop
kVPfBAzbRe7eWDGLy3bt4WXJaHeP0pTM6BETN8Jg08eQIuLjT60kaw2CjcbDY4wQ
03SKwOVg7eyqb5Vs1dTYI5vRUU5uMfCd2LDNttF7vpODodYbQIzn5HnCG5+ggyDl
UhXmaXntuOGp4ILbcOMH13LIAJ+ZHhhc8CWBgEJR0SE4Q36cR8ofDdHShZWczIow
iqI6fSwYcZL1kiMzDmfiLxPXS0ig1NhUlJP8J0yr/GeeQl5JXxqbTu0L79TDakiT
2en3aHU+vhaiji1wHn83U1b3ActGxbr/
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:27 2025 by rpki-client