Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB29D5E2632711F0998E7BB3DAE4EC9C.roa
File: AB29D5E2632711F0998E7BB3DAE4EC9C.roa (raw, json)
Hash identifier: /KkgY2jfc2iINO8RdwWv//9Y+0WEMIvHvZvieN/dL7k=
Subject key identifier: 64:EE:C4:A3:65:D4:D7:7D:46:15:DE:DE:0E:F1:83:BE:EC:08:17:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB29D5E2632711F0998E7BB3DAE4EC9C.roa
Signing time: Thu 17 Jul 2025 16:04:08 +0000
ROA not before: Thu 17 Jul 2025 16:04:03 +0000
ROA not after: Sun 31 Aug 2025 16:04:03 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101970 (0x18e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 16:04:03 2025 GMT
Not After : Aug 31 16:04:03 2025 GMT
Subject: CN=68791ef8-a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:e1:7e:4b:fc:3b:0d:c6:00:f8:89:5b:a4:
b7:c8:d3:b4:15:78:f4:1b:f6:3c:7e:09:19:cc:79:
ce:59:75:0f:42:11:82:b3:a7:c0:9b:d3:b0:8f:93:
e0:84:22:25:52:d2:97:b8:fc:80:d5:05:a3:ed:c2:
81:36:89:8f:1a:82:27:09:ce:8e:2e:24:27:8d:07:
ba:48:af:55:0d:f5:aa:f8:10:1d:4b:2f:c4:fd:9d:
a2:ca:5b:fa:be:9e:3f:55:b1:74:02:1d:75:b4:bf:
66:02:81:7a:76:f8:4c:70:96:43:08:1f:ac:dc:49:
88:e2:a9:66:f5:32:3f:35:fc:5a:40:7e:b7:de:96:
44:1b:d6:f4:bb:94:ff:ba:b2:a9:3f:2f:27:46:19:
f0:38:c2:01:87:af:6a:aa:5b:c6:f2:5d:90:98:17:
f2:2d:03:ac:52:6a:36:23:95:c1:1c:e1:21:7a:c9:
1b:85:c2:37:46:01:16:ef:36:ad:e1:3b:ef:e1:86:
b5:1b:44:50:44:8d:d2:7f:1c:54:f9:74:66:2e:a8:
d9:02:21:cb:50:d1:23:02:3f:b5:08:52:29:74:a6:
3b:9f:1a:7e:35:87:11:01:a4:11:77:f7:72:e9:f9:
4c:3d:77:64:e3:6a:f5:53:f6:ef:be:6e:88:25:35:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:C4:A3:65:D4:D7:7D:46:15:DE:DE:0E:F1:83:BE:EC:08:17:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB29D5E2632711F0998E7BB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.233.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
49:b5:0a:e7:8e:de:0a:7c:52:f1:e2:de:c1:73:45:a8:f5:91:
0b:85:77:5d:16:ab:be:6b:26:54:99:1e:7b:db:bd:1f:d2:7f:
72:f4:7b:b6:29:05:96:e4:a3:81:4e:b2:14:93:37:ca:26:59:
a0:42:93:97:6b:b1:66:f5:f4:85:b2:91:37:ae:e9:11:b8:37:
99:11:f1:9b:75:c4:d5:73:52:91:77:d7:cb:0d:10:91:84:5f:
4d:52:0c:35:71:f9:87:87:a7:89:41:f9:e5:92:31:b3:10:f1:
38:dc:62:00:c4:18:bc:55:3a:f7:d0:8b:e0:87:d4:2e:e3:63:
2d:0e:11:b1:a6:be:6b:25:69:7a:c7:94:ad:34:27:6e:b4:1f:
15:c3:f0:df:5c:ed:22:56:2c:64:41:98:11:6c:ff:c7:b6:72:
dc:27:f2:a7:13:35:5d:85:9f:d1:32:45:4b:2d:2a:a5:e3:a1:
1c:15:2a:32:47:e9:53:eb:b4:58:58:4c:66:fa:0c:bd:a2:53:
2a:15:9b:68:41:1e:28:2e:ce:ca:86:ea:19:99:cc:aa:fb:49:
27:80:24:b5:0e:c5:a2:fc:83:bc:62:09:58:47:af:a5:10:b4:
11:de:59:a0:b6:b7:e7:2a:62:af:cc:47:ed:61:00:54:62:ec:
53:4a:88:24
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAY5SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE3MTYwNDAzWhcNMjUwODMxMTYwNDAzWjAYMRYw
FAYDVQQDEw02ODc5MWVmOC1hNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwrXhfkv8Ow3GAPiJW6S3yNO0FXj0G/Y8fgkZzHnOWXUPQhGCs6fAm9Ow
j5PghCIlUtKXuPyA1QWj7cKBNomPGoInCc6OLiQnjQe6SK9VDfWq+BAdSy/E/Z2i
ylv6vp4/VbF0Ah11tL9mAoF6dvhMcJZDCB+s3EmI4qlm9TI/NfxaQH633pZEG9b0
u5T/urKpPy8nRhnwOMIBh69qqlvG8l2QmBfyLQOsUmo2I5XBHOEheskbhcI3RgEW
7zat4Tvv4Ya1G0RQRI3SfxxU+XRmLqjZAiHLUNEjAj+1CFIpdKY7nxp+NYcRAaQR
d/dy6flMPXdk42r1U/bvvm6IJTXdiQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGTu
xKNl1Nd9RhXe3g7xg77sCBd+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjI5RDVFMjYzMjcxMUYwOTk4RTdCQjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmsYkAwQAmsv7MAwDBACa
zekDBACazfAwDQYJKoZIhvcNAQELBQADggEBAEm1CueO3gp8UvHi3sFzRaj1kQuF
d10Wq75rJlSZHnvbvR/Sf3L0e7YpBZbko4FOshSTN8omWaBCk5drsWb19IWykTeu
6RG4N5kR8Zt1xNVzUpF318sNEJGEX01SDDVx+YeHp4lB+eWSMbMQ8TjcYgDEGLxV
OvfQi+CH1C7jYy0OEbGmvmslaXrHlK00J260HxXD8N9c7SJWLGRBmBFs/8e2ctwn
8qcTNV2Fn9EyRUstKqXjoRwVKjJH6VPrtFhYTGb6DL2iUyoVm2hBHiguzsqG6hmZ
zKr7SSeAJLUOxaL8g7xiCVhHr6UQtBHeWaC2t+cqYq/MR+1hAFRi7FNKiCQ=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:01 2025 by rpki-client