Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA0C4DF05AA511F0A169CDE3DAE4EC9C.roa
File: AA0C4DF05AA511F0A169CDE3DAE4EC9C.roa (raw, json)
Hash identifier: J32o0xaII6RG70rbi/HhLIL5XNiH8CVjICrABMbJ9zI=
Subject key identifier: 44:8F:36:4A:E3:78:9B:96:87:FB:1E:0B:F2:BF:79:B4:FA:B9:50:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA0C4DF05AA511F0A169CDE3DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 20:13:22 +0000
ROA not before: Sun 06 Jul 2025 20:13:17 +0000
ROA not after: Fri 17 Jul 2026 20:13:17 +0000
asID: 55020
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101300 (0x18bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 20:13:17 2025 GMT
Not After : Jul 17 20:13:17 2026 GMT
Subject: CN=686ad8e2-dd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:fe:67:98:a3:87:05:c0:48:48:9f:9c:58:
9f:fc:ad:82:c1:bb:a2:33:81:d8:e2:3e:d2:2b:d2:
30:05:4e:de:aa:a2:33:cf:ea:ed:5b:1d:b3:57:dc:
b4:82:24:85:21:a3:48:25:60:fa:16:c4:1d:5a:45:
0f:bf:09:ce:5d:aa:17:f8:45:64:f0:d0:9f:f1:55:
38:7c:6e:be:c8:d5:93:41:f8:00:a3:7e:4b:74:d6:
ce:06:d8:e3:f1:90:5f:c3:5d:44:2e:34:7a:57:74:
51:2c:5d:78:ac:53:70:cb:61:96:62:63:83:4b:51:
05:97:d4:fe:fe:a5:44:b2:6e:17:63:16:0b:08:87:
67:c1:a3:43:60:81:fe:7c:d4:fd:fa:70:6c:74:12:
6b:de:fb:d3:b5:b7:99:3d:f4:bc:83:96:d8:1e:01:
0b:06:cb:8e:8d:3d:de:8b:ac:4a:32:27:d6:89:2c:
bc:dd:f8:9e:bf:31:ab:46:de:a1:fa:c5:81:53:7a:
ed:89:6d:cc:2a:2b:8d:81:78:d9:f2:05:64:f4:a6:
9e:df:77:58:de:09:e0:38:0a:b0:1d:aa:c2:c6:77:
86:17:5b:95:64:01:d3:94:97:d5:f2:26:ff:c0:0c:
3f:81:b1:a0:bf:50:ea:db:a8:0c:92:23:3b:c4:97:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:36:4A:E3:78:9B:96:87:FB:1E:0B:F2:BF:79:B4:FA:B9:50:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA0C4DF05AA511F0A169CDE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0/24
154.202.120.0/21
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
6b:df:60:16:a6:f6:5c:b6:10:3b:c7:75:7a:3e:7a:71:2b:84:
c1:6c:75:da:81:03:27:0c:20:77:36:79:07:2c:db:f8:1e:cf:
4d:8c:41:1c:f0:64:7f:f8:96:b4:39:ae:d5:93:9a:e4:b6:fe:
ee:46:ef:b9:ff:15:63:22:21:ab:c3:ae:9c:2b:8b:88:68:15:
c6:59:26:2b:6d:fd:4e:dc:64:d7:ac:be:8e:5f:8f:66:77:31:
a1:58:55:15:c2:ed:3d:34:a5:4c:8e:3a:55:5b:e7:13:dd:8f:
da:f9:12:88:e7:7d:ca:5f:0f:08:c3:1c:a8:d3:a0:9d:aa:a9:
5f:22:d6:10:0c:2d:a1:57:33:c3:93:18:c0:4d:1c:e6:46:70:
b7:d0:0b:5a:35:55:7d:bb:ae:9b:b5:c6:80:5b:b8:e5:1a:fb:
c5:96:85:1a:12:7b:5c:e8:78:b2:50:eb:4e:a3:c9:22:24:2e:
5c:f4:b6:b7:b7:c9:eb:04:a0:2c:f4:f1:20:17:a6:f2:e3:08:
2a:84:6b:dc:7a:a4:f0:44:92:3b:78:f9:d2:10:22:84:41:a3:
05:a7:c0:c1:d8:ab:08:5c:cd:80:84:20:4a:04:7d:97:a7:9d:
e8:f7:d6:73:9a:3f:aa:75:96:0d:2d:8f:5a:d2:88:5c:22:39:
99:01:46:14
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIDAYu0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA2MjAxMzE3WhcNMjYwNzE3MjAxMzE3WjAYMRYw
FAYDVQQDEw02ODZhZDhlMi1kZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz4z+Z5ijhwXASEifnFif/K2CwbuiM4HY4j7SK9IwBU7eqqIzz+rtWx2z
V9y0giSFIaNIJWD6FsQdWkUPvwnOXaoX+EVk8NCf8VU4fG6+yNWTQfgAo35LdNbO
Btjj8ZBfw11ELjR6V3RRLF14rFNwy2GWYmODS1EFl9T+/qVEsm4XYxYLCIdnwaND
YIH+fNT9+nBsdBJr3vvTtbeZPfS8g5bYHgELBsuOjT3ei6xKMifWiSy83fievzGr
Rt6h+sWBU3rtiW3MKiuNgXjZ8gVk9Kae33dY3gngOAqwHarCxneGF1uVZAHTlJfV
8ib/wAw/gbGgv1Dq26gMkiM7xJcLewIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFESP
NkrjeJuWh/seC/K/ebT6uVBEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQTBDNERGMDVBQTUxMUYwQTE2OUNERTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3AwQGmsHAAwQAmsp1AwQDmsp4
AwQDmswIAwQGmsyAAwQAmtICAwQCmtMEMAsDBAGa2eoDAwGa2DANBgkqhkiG9w0B
AQsFAAOCAQEAa99gFqb2XLYQO8d1ej56cSuEwWx12oEDJwwgdzZ5Byzb+B7PTYxB
HPBkf/iWtDmu1ZOa5Lb+7kbvuf8VYyIhq8OunCuLiGgVxlkmK239Ttxk16y+jl+P
ZncxoVhVFcLtPTSlTI46VVvnE92P2vkSiOd9yl8PCMMcqNOgnaqpXyLWEAwtoVcz
w5MYwE0c5kZwt9ALWjVVfbuum7XGgFu45Rr7xZaFGhJ7XOh4slDrTqPJIiQuXPS2
t7fJ6wSgLPTxIBem8uMIKoRr3Hqk8ESSO3j50hAihEGjBafAwdirCFzNgIQgSgR9
l6ed6PfWc5o/qnWWDS2PWtKIXCI5mQFGFA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:15 2025 by rpki-client