Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5C4CA025B6D11F08D178F7FDAE4EC9C.roa
File: E5C4CA025B6D11F08D178F7FDAE4EC9C.roa (raw, json)
Hash identifier: /gLizXldC7zI3jmPNRzk2Kgn6WK57MiIEiwShAZsGyk=
Subject key identifier: FD:D2:FF:76:FA:C2:05:05:07:3B:45:CC:44:B7:E0:B0:86:52:A2:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5C4CA025B6D11F08D178F7FDAE4EC9C.roa
Signing time: Mon 07 Jul 2025 20:06:42 +0000
ROA not before: Mon 07 Jul 2025 20:06:36 +0000
ROA not after: Wed 03 Sep 2025 20:06:36 +0000
asID: 18229
IP address blocks: 154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
154.210.135.0/24 maxlen: 24
154.210.136.0/24 maxlen: 24
154.210.137.0/24 maxlen: 24
154.210.138.0/24 maxlen: 24
154.210.139.0/24 maxlen: 24
154.210.140.0/24 maxlen: 24
154.210.157.0/24 maxlen: 24
154.210.158.0/24 maxlen: 24
154.210.160.0/24 maxlen: 24
154.210.161.0/24 maxlen: 24
154.210.162.0/24 maxlen: 24
154.210.163.0/24 maxlen: 24
154.210.164.0/24 maxlen: 24
154.210.165.0/24 maxlen: 24
154.210.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101464 (0x18c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 20:06:36 2025 GMT
Not After : Sep 3 20:06:36 2025 GMT
Subject: CN=686c28d2-8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:c3:94:25:8f:3a:34:3c:3a:76:a4:8e:b8:
63:83:66:9c:56:b0:4e:3a:bb:c5:43:a3:a4:cc:b8:
07:1d:4b:34:a5:ea:ae:bf:ae:43:45:e1:76:2b:86:
c8:48:1e:05:f5:df:54:66:0e:48:0c:20:9f:3c:b9:
fa:4a:83:dc:c6:5b:1a:7e:ea:c9:8c:dc:ea:93:e1:
ed:06:b7:36:94:24:bd:83:12:8c:f9:78:ab:6c:e9:
9e:3a:4c:e8:c0:aa:af:26:a6:93:49:11:3e:c0:66:
eb:4b:b6:29:fd:6e:b5:86:e0:56:f8:65:b4:05:66:
d3:3f:f9:c5:51:2c:c4:88:70:36:a7:96:f7:ae:59:
ad:bc:4c:94:3e:91:20:e6:dc:d1:24:1e:04:b7:ab:
bd:49:b3:87:80:c2:73:5b:c2:26:78:37:b1:98:bd:
50:8d:99:71:be:52:f2:aa:95:89:87:23:d2:c0:6c:
ac:78:19:9e:ed:f4:05:c9:f8:44:92:17:a5:44:f4:
7e:eb:39:17:88:c7:f6:ae:dd:90:9c:a7:18:a1:87:
3e:83:a6:78:b3:34:fb:ab:08:e9:15:a4:1f:d7:d5:
ee:c1:7d:e1:19:52:1b:ef:90:2a:09:a8:77:e0:07:
22:b9:e2:39:4f:51:3c:41:a9:cd:f9:fc:19:8e:b6:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:FF:76:FA:C2:05:05:07:3B:45:CC:44:B7:E0:B0:86:52:A2:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5C4CA025B6D11F08D178F7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.130.0-154.210.140.255
154.210.157.0-154.210.158.255
154.210.160.0-154.210.165.255
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3d:ae:ae:53:f2:2b:65:59:51:3b:d4:57:69:39:bf:35:63:
39:06:a1:0c:4e:af:c0:74:0d:87:86:ac:bb:52:27:01:e8:4f:
24:11:1c:aa:1a:6b:5a:11:ac:d1:83:56:12:0a:5b:98:4b:ef:
fe:bd:a8:31:3c:65:8a:96:6f:1f:7c:fd:d4:4e:07:73:d7:f9:
be:89:eb:12:2b:ce:f5:3d:74:b7:25:b9:eb:8f:3e:64:c9:7c:
48:42:27:98:a9:36:d5:84:3a:b4:f4:9a:f0:8c:58:b1:65:68:
a1:1d:3e:f8:47:04:dc:1f:35:58:09:17:93:5f:8b:01:a0:78:
ba:15:18:14:90:7a:6b:5e:8e:1a:5d:09:fd:71:c2:e7:a6:38:
e6:86:c5:37:64:75:f2:9c:39:97:9b:ee:12:03:b8:1e:d2:54:
c8:0b:62:48:8d:c2:5e:d7:7d:a6:6b:58:ed:01:d4:65:b3:c6:
25:01:07:25:bd:3b:82:c9:64:f9:e3:78:48:ca:d3:bb:cc:2f:
fa:74:13:a1:8d:e0:54:38:91:04:17:e0:97:b6:37:1b:34:5e:
51:78:11:25:49:14:4f:51:e7:b2:86:2a:1b:c2:18:14:6e:bb:
74:2f:d6:24:05:9c:fd:31:80:c3:42:da:b9:d0:70:cc:ad:21:
98:0c:23:cc
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAYxYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA3MjAwNjM2WhcNMjUwOTAzMjAwNjM2WjAYMRYw
FAYDVQQDEw02ODZjMjhkMi04ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApCzDlCWPOjQ8Onakjrhjg2acVrBOOrvFQ6OkzLgHHUs0pequv65DReF2
K4bISB4F9d9UZg5IDCCfPLn6SoPcxlsafurJjNzqk+HtBrc2lCS9gxKM+XirbOme
OkzowKqvJqaTSRE+wGbrS7Yp/W61huBW+GW0BWbTP/nFUSzEiHA2p5b3rlmtvEyU
PpEg5tzRJB4Et6u9SbOHgMJzW8ImeDexmL1QjZlxvlLyqpWJhyPSwGyseBme7fQF
yfhEkhelRPR+6zkXiMf2rt2QnKcYoYc+g6Z4szT7qwjpFaQf19XuwX3hGVIb75Aq
Cah34AciueI5T1E8QanN+fwZjrbAnwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFP3S
/3b6wgUFBztFzES34LCGUqJ/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNUM0Q0EwMjVCNkQxMUYwOEQxNzhGN0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAGa0oIDBACa0owwDAME
AJrSnQMEAJrSnjAMAwQFmtKgAwQBmtKkAwQAmtLfMA0GCSqGSIb3DQEBCwUAA4IB
AQBlPa6uU/IrZVlRO9RXaTm/NWM5BqEMTq/AdA2Hhqy7UicB6E8kERyqGmtaEazR
g1YSCluYS+/+vagxPGWKlm8ffP3UTgdz1/m+iesSK871PXS3Jbnrjz5kyXxIQieY
qTbVhDq09JrwjFixZWihHT74RwTcHzVYCReTX4sBoHi6FRgUkHprXo4aXQn9ccLn
pjjmhsU3ZHXynDmXm+4SA7ge0lTIC2JIjcJe132ma1jtAdRls8YlAQclvTuCyWT5
43hIytO7zC/6dBOhjeBUOJEEF+CXtjcbNF5ReBElSRRPUeeyhiobwhgUbrt0L9Yk
BZz9MYDDQtq50HDMrSGYDCPM
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:57 2025 by rpki-client