Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A956BC59AB11F0A26EDD91DAE4EC9C.roa
File: A6A956BC59AB11F0A26EDD91DAE4EC9C.roa (raw, json)
Hash identifier: 0OfCUS/WsIacWtuij0KbcElXPg/FkVLtK7eInHPYAbM=
Subject key identifier: BE:E0:14:08:21:B7:0A:72:6D:CA:7D:4D:60:E6:C3:9F:E4:EC:7F:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A956BC59AB11F0A26EDD91DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:23:42 +0000
ROA not before: Sat 05 Jul 2025 14:23:37 +0000
ROA not after: Sun 24 Aug 2025 14:23:37 +0000
asID: 138195
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101126 (0x18b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:23:37 2025 GMT
Not After : Aug 24 14:23:37 2025 GMT
Subject: CN=6869356e-e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:18:e7:51:4b:ef:f7:ff:35:94:39:5d:8c:
20:8e:65:f9:fe:b4:0b:e5:fa:bb:7d:86:f3:39:af:
17:39:37:d8:db:80:d1:f1:18:a2:cc:31:d1:ec:00:
a8:66:71:01:cb:30:f8:ee:2d:3f:9f:48:7b:dd:18:
7c:ea:9c:a2:f5:cb:a8:41:8f:5b:b0:de:32:84:ae:
dc:9c:58:4b:00:fa:25:7c:4e:6f:0c:92:7e:ef:5c:
6f:4f:50:83:cc:48:57:1a:ef:dc:c4:fc:ee:59:9f:
b0:0b:f6:e2:f3:77:34:cf:f3:78:7a:b6:c7:39:21:
26:b1:a8:27:d2:18:30:24:f4:82:7f:5e:c5:30:83:
8a:27:f1:fe:8b:dd:33:d8:7b:d6:ab:9f:d0:44:16:
41:54:cc:8f:ab:01:04:5b:81:c0:b4:5b:5b:72:32:
82:d5:33:a2:84:20:49:b4:44:ed:2f:67:a8:d5:db:
cd:a1:96:97:5d:ac:e3:41:a2:42:ae:af:c4:fd:05:
1b:eb:f8:f4:ce:35:34:22:eb:a8:13:8b:e5:f6:45:
98:c4:03:a0:89:30:da:f4:77:4f:1c:61:bb:1f:8e:
62:2c:03:3b:2c:fd:92:4a:a0:39:ed:90:72:78:3e:
13:63:4f:a6:3a:7f:b4:62:fc:8f:3a:db:71:a5:c1:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:14:08:21:B7:0A:72:6D:CA:7D:4D:60:E6:C3:9F:E4:EC:7F:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6A956BC59AB11F0A26EDD91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:12:23:25:f5:1d:37:7f:17:f6:17:04:9c:c2:7c:e7:c0:36:
14:65:30:45:a9:b2:33:18:3c:7a:4c:76:a9:c3:7c:0a:0f:0c:
9d:46:43:72:91:14:3d:d4:8a:2a:35:4a:f6:47:2d:b8:3d:04:
03:3f:d3:78:cf:c8:46:10:2c:ec:97:2f:6e:a2:a1:c0:3e:b0:
ba:46:d1:29:4f:04:8f:f1:fe:87:d4:bf:47:1e:8e:dc:61:7d:
92:cc:3d:c0:da:cb:40:bc:07:71:cb:77:39:d1:49:fb:cb:86:
4a:10:29:f7:8c:b7:4f:a4:53:e7:86:ba:4a:fc:dd:66:08:1c:
32:70:f8:92:9c:af:d7:a2:cc:ff:4e:c5:85:21:28:63:06:25:
4f:6e:2f:76:c5:ea:9a:60:d7:cf:c6:56:68:1a:70:78:8e:6a:
2d:12:e3:ae:23:68:77:ae:e6:02:36:d1:1a:f1:40:ac:e1:7a:
e9:bb:39:19:b9:51:7b:d4:88:54:af:e0:a8:ac:a5:cb:f3:18:
0a:3d:ad:d2:26:27:25:0f:b9:7c:c9:bb:6a:e3:58:98:42:83:
79:af:8c:50:b4:e7:3d:1c:f7:2c:59:59:fb:07:2f:a2:57:ef:
82:b4:b6:a0:f8:19:82:f1:29:a1:af:fc:34:ce:31:2b:99:a5:
57:77:c4:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYsGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTQyMzM3WhcNMjUwODI0MTQyMzM3WjAYMRYw
FAYDVQQDEw02ODY5MzU2ZS1lNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0y8Y51FL7/f/NZQ5XYwgjmX5/rQL5fq7fYbzOa8XOTfY24DR8RiizDHR
7ACoZnEByzD47i0/n0h73Rh86pyi9cuoQY9bsN4yhK7cnFhLAPolfE5vDJJ+71xv
T1CDzEhXGu/cxPzuWZ+wC/bi83c0z/N4erbHOSEmsagn0hgwJPSCf17FMIOKJ/H+
i90z2HvWq5/QRBZBVMyPqwEEW4HAtFtbcjKC1TOihCBJtETtL2eo1dvNoZaXXazj
QaJCrq/E/QUb6/j0zjU0IuuoE4vl9kWYxAOgiTDa9HdPHGG7H45iLAM7LP2SSqA5
7ZByeD4TY0+mOn+0YvyPOttxpcEWNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL7g
FAghtwpybcp9TWDmw5/k7H9cMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNkE5NTZCQzU5QUIxMUYwQTI2RUREOTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQBwEiMl9R03fxf2FwScwnznwDYUZTBFqbIzGDx6THapw3wKDwydRkNy
kRQ91IoqNUr2Ry24PQQDP9N4z8hGECzsly9uoqHAPrC6RtEpTwSP8f6H1L9HHo7c
YX2SzD3A2stAvAdxy3c50Un7y4ZKECn3jLdPpFPnhrpK/N1mCBwycPiSnK/Xosz/
TsWFIShjBiVPbi92xeqaYNfPxlZoGnB4jmotEuOuI2h3ruYCNtEa8UCs4XrpuzkZ
uVF71IhUr+CorKXL8xgKPa3SJiclD7l8ybtq41iYQoN5r4xQtOc9HPcsWVn7By+i
V++CtLag+BmC8Smhr/w0zjErmaVXd8QH
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:03 2025 by rpki-client