Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/905509305B5C11F08D10C88FDAE4EC9C.roa
File: 905509305B5C11F08D10C88FDAE4EC9C.roa (raw, json)
Hash identifier: s6RqJHv45Key3qNoeGtscWCojwCqmjp65nowMkYmXm4=
Subject key identifier: 6F:16:ED:13:1D:DD:B8:38:43:30:BC:61:FB:A1:E1:33:9B:58:C0:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/905509305B5C11F08D10C88FDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 18:02:37 +0000
ROA not before: Mon 07 Jul 2025 18:02:32 +0000
ROA not after: Fri 17 Jul 2026 18:02:32 +0000
asID: 55020
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101440 (0x18c40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 18:02:32 2025 GMT
Not After : Jul 17 18:02:32 2026 GMT
Subject: CN=686c0bbd-9d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:40:a2:7f:de:b1:d4:6a:84:91:21:ce:4b:
02:f3:70:3d:8b:1c:eb:12:a6:2f:7e:bd:59:cc:44:
fa:a3:76:67:88:a9:fc:2a:2d:98:78:f4:c2:10:3e:
0d:d0:22:74:d3:0a:a6:d6:9d:ef:86:45:b7:39:36:
05:df:28:dc:f2:21:e5:0d:93:c2:93:52:b0:97:6c:
8d:c7:ba:06:97:49:0f:c2:4e:92:da:88:2b:ca:40:
33:38:c3:c7:40:98:b1:84:5b:ba:aa:20:fd:8e:1b:
ac:a3:aa:81:2d:61:d1:95:87:58:90:62:37:0b:04:
51:0c:90:df:d0:68:6a:5b:5a:c2:f4:92:5f:9a:81:
69:ab:b7:f8:54:b8:d0:7a:6d:47:a6:23:b2:3d:d3:
9c:4b:69:80:51:6e:47:8a:9b:ba:22:2e:9f:43:3d:
f5:38:62:38:ce:fb:11:20:4e:f1:80:dd:19:31:00:
ac:f6:e9:b5:1e:56:8f:d6:b3:37:a5:4a:b6:8f:64:
5c:92:91:a3:44:59:30:59:8d:d2:78:82:31:8a:e7:
e2:2e:a0:24:24:18:34:b3:63:f2:1b:bb:05:5a:8c:
93:f1:f3:40:db:c5:24:7a:f2:96:ef:b4:6f:5b:6b:
ee:53:e2:c3:8e:ea:51:13:dc:51:2b:7d:96:76:95:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:ED:13:1D:DD:B8:38:43:30:BC:61:FB:A1:E1:33:9B:58:C0:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/905509305B5C11F08D10C88FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
1a:54:eb:d2:e3:07:62:d8:38:f5:66:0c:ab:ea:1e:62:23:4a:
b4:4b:4d:34:79:f0:59:6e:04:86:8c:41:3f:56:d5:25:c7:4a:
47:5c:b1:15:e2:f2:80:59:f3:91:fb:0b:03:a7:e9:5a:2d:18:
4c:92:26:a7:89:76:3a:db:44:9d:a9:25:22:87:47:b2:ba:7a:
91:90:3e:95:cb:44:c4:33:ac:42:b9:9f:02:85:f4:e6:fa:65:
7c:ea:10:07:b6:7d:a3:72:1e:b7:10:ae:b5:ab:58:7b:41:76:
94:7b:c3:47:c3:df:71:e0:36:c8:df:38:86:5c:06:46:17:ff:
3d:53:fb:2c:7f:c5:db:e3:a5:ad:46:f4:54:78:6a:d0:f0:13:
35:c4:cc:81:b7:a1:bb:29:a0:43:5c:03:39:8e:ae:9f:84:67:
9c:d8:f0:61:d0:9e:3d:11:e7:a2:0d:7e:4e:23:81:13:11:d4:
34:44:f5:cf:ea:31:d5:a5:85:50:02:cd:b3:56:e8:06:e0:3f:
29:f0:05:76:14:f9:9d:7a:24:01:8d:85:21:26:0c:cd:2e:79:
7c:b9:ca:b1:1d:18:24:b5:1b:c9:d8:1e:23:d4:4a:0e:c0:6c:
73:b9:e1:1a:8a:2a:a2:12:9c:ed:7f:26:35:19:59:63:0a:91:
ca:9f:85:59
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIDAYxAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA3MTgwMjMyWhcNMjYwNzE3MTgwMjMyWjAYMRYw
FAYDVQQDEw02ODZjMGJiZC05ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtvNAon/esdRqhJEhzksC83A9ixzrEqYvfr1ZzET6o3ZniKn8Ki2YePTC
ED4N0CJ00wqm1p3vhkW3OTYF3yjc8iHlDZPCk1Kwl2yNx7oGl0kPwk6S2ogrykAz
OMPHQJixhFu6qiD9jhuso6qBLWHRlYdYkGI3CwRRDJDf0GhqW1rC9JJfmoFpq7f4
VLjQem1HpiOyPdOcS2mAUW5Hipu6Ii6fQz31OGI4zvsRIE7xgN0ZMQCs9um1HlaP
1rM3pUq2j2RckpGjRFkwWY3SeIIxiufiLqAkJBg0s2PyG7sFWoyT8fNA28UkevKW
77RvW2vuU+LDjupRE9xRK32WdpWzYwIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFG8W
7RMd3bg4QzC8Yfuh4TObWMDAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MDU1MDkzMDVCNUMxMUYwOEQxMEM4OEZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3AwQGmsHAAwQAmsp1AwQDmsp4
AwQDmswIAwQGmsyAAwQAmtICAwQCmtMEMAsDBAGa2eoDAwGa2DANBgkqhkiG9w0B
AQsFAAOCAQEAGlTr0uMHYtg49WYMq+oeYiNKtEtNNHnwWW4EhoxBP1bVJcdKR1yx
FeLygFnzkfsLA6fpWi0YTJImp4l2OttEnaklIodHsrp6kZA+lctExDOsQrmfAoX0
5vplfOoQB7Z9o3IetxCutatYe0F2lHvDR8PfceA2yN84hlwGRhf/PVP7LH/F2+Ol
rUb0VHhq0PATNcTMgbehuymgQ1wDOY6un4RnnNjwYdCePRHnog1+TiOBExHUNET1
z+ox1aWFUALNs1boBuA/KfAFdhT5nXokAY2FISYMzS55fLnKsR0YJLUbydgeI9RK
DsBsc7nhGooqohKc7X8mNRlZYwqRyp+FWQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:37 2025 by rpki-client