Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E17832609B11F0B3034D96DAE4EC9C.roa
File: E9E17832609B11F0B3034D96DAE4EC9C.roa (raw, json)
Hash identifier: AoQ7iuEDMO8YNKW+4DdxlMtzY10MYQyOUg1JXy4d3o4=
Subject key identifier: 1F:D1:2A:BF:31:C5:55:E2:46:F5:8C:84:77:D7:FB:F7:89:42:A3:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E17832609B11F0B3034D96DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 10:18:41 +0000
ROA not before: Mon 14 Jul 2025 10:18:36 +0000
ROA not after: Mon 21 Jul 2025 10:18:36 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.214.32.0/19 maxlen: 24
154.215.0.0/24 maxlen: 24
154.216.128.0/18 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 21 Jul 2025 10:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101811 (0x18db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:18:36 2025 GMT
Not After : Jul 21 10:18:36 2025 GMT
Subject: CN=6874d981-d437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:d3:85:90:6d:c0:8c:68:f8:45:76:1f:19:
80:39:29:6f:0e:4f:26:37:a8:c0:d1:84:e7:84:3b:
5e:55:66:ba:8f:c8:18:93:f7:0c:1e:b9:fb:35:e2:
05:14:4c:3c:3b:b9:e5:c5:11:b0:bb:75:c5:e8:4d:
09:aa:96:15:bb:17:dd:7d:e9:59:9f:1d:a9:6d:ac:
a8:8e:9d:a6:78:57:1f:92:de:5a:ac:38:32:2c:ed:
db:4f:0c:d2:e4:db:bf:ca:2c:3f:5c:f7:1b:c4:e8:
1f:68:5c:77:d0:61:8c:a8:c8:d2:e9:55:33:6f:f2:
c1:81:25:22:6b:17:3c:d4:dd:26:68:75:5b:ef:89:
71:7f:56:77:ec:ea:c8:07:7e:23:d7:79:9b:62:b9:
96:65:19:f7:28:4b:c0:b5:a2:3e:0c:70:2f:3a:16:
cd:c2:98:83:2a:c9:0e:0d:2c:d8:3b:16:ae:8e:d1:
b3:94:e9:4b:5d:b3:08:fb:7e:41:a2:e1:87:fb:ca:
b3:d1:39:14:5c:5e:e2:ce:d9:39:90:c1:8e:00:8f:
6f:c4:2c:96:8e:d8:e3:f6:f8:9e:b7:14:35:61:96:
4d:51:36:ad:16:88:60:17:cd:c5:eb:55:49:5e:07:
62:32:e7:51:11:c8:0f:11:6d:9c:29:70:b2:34:06:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:2A:BF:31:C5:55:E2:46:F5:8C:84:77:D7:FB:F7:89:42:A3:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9E17832609B11F0B3034D96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.214.32.0/19
154.215.0.0/24
154.216.128.0/18
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:26:a3:59:b6:94:5d:91:23:fc:be:5e:3c:f3:8b:e4:38:0b:
af:ab:12:84:4b:31:e2:95:a6:25:ad:ad:c0:df:4e:5f:01:c2:
46:50:e6:25:2b:be:4a:ee:9b:35:ab:d2:eb:6d:15:86:b8:20:
2f:5c:88:bc:39:6a:ec:f0:57:ba:e6:22:c6:fb:83:6e:0c:88:
3c:1d:e4:66:8a:bd:47:68:d9:50:38:dc:65:ce:23:ab:41:d7:
e5:b3:b3:12:ba:76:01:1b:99:e5:7c:2e:1b:d6:0e:b7:22:35:
18:51:63:ff:59:e9:4b:ff:10:24:37:0a:9b:de:4b:05:5a:fa:
5e:d1:58:99:80:3d:37:c3:d5:b6:35:56:d0:2b:4d:29:8f:b9:
bc:60:bc:f5:07:74:73:60:c5:08:6c:5e:c3:7a:c9:bc:35:53:
d0:cd:21:39:11:70:a4:17:70:55:b2:1b:72:7e:4e:9c:a1:61:
39:d2:b1:6c:a3:dc:da:46:af:38:18:62:36:70:2c:c8:6e:e0:
c8:04:32:a5:38:f7:67:56:cf:45:56:02:c8:c8:83:9c:ec:26:
f0:b3:e8:e8:32:4b:f7:f1:ec:f8:66:3f:e0:5d:aa:fe:26:9b:
e2:d7:27:0b:ec:7b:75:f7:28:19:91:7b:78:e7:26:f5:37:4b:
6b:99:f2:40
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIDAY2zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE0MTAxODM2WhcNMjUwNzIxMTAxODM2WjAYMRYw
FAYDVQQDEw02ODc0ZDk4MS1kNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA00LThZBtwIxo+EV2HxmAOSlvDk8mN6jA0YTnhDteVWa6j8gYk/cMHrn7
NeIFFEw8O7nlxRGwu3XF6E0JqpYVuxfdfelZnx2pbayojp2meFcfkt5arDgyLO3b
TwzS5Nu/yiw/XPcbxOgfaFx30GGMqMjS6VUzb/LBgSUiaxc81N0maHVb74lxf1Z3
7OrIB34j13mbYrmWZRn3KEvAtaI+DHAvOhbNwpiDKskODSzYOxaujtGzlOlLXbMI
+35BouGH+8qz0TkUXF7iztk5kMGOAI9vxCyWjtjj9vietxQ1YZZNUTatFohgF83F
61VJXgdiMudREcgPEW2cKXCyNAZoJQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFB/R
Kr8xxVXiRvWMhHfX+/eJQqMnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOUUxNzgzMjYwOUIxMUYwQjMwMzREOTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmswAMAwDBAKa0AwDBAWa
0AADBACa1IADBAWa1iADBACa1wADBAaa2IADBACa2gADBACa3QAwDQYJKoZIhvcN
AQELBQADggEBAMsmo1m2lF2RI/y+Xjzzi+Q4C6+rEoRLMeKVpiWtrcDfTl8BwkZQ
5iUrvkrumzWr0uttFYa4IC9ciLw5auzwV7rmIsb7g24MiDwd5GaKvUdo2VA43GXO
I6tB1+WzsxK6dgEbmeV8LhvWDrciNRhRY/9Z6Uv/ECQ3CpveSwVa+l7RWJmAPTfD
1bY1VtArTSmPubxgvPUHdHNgxQhsXsN6ybw1U9DNITkRcKQXcFWyG3J+TpyhYTnS
sWyj3NpGrzgYYjZwLMhu4MgEMqU492dWz0VWAsjIg5zsJvCz6OgyS/fx7PhmP+Bd
qv4mm+LXJwvse3X3KBmRe3jnJvU3S2uZ8kA=
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:32:32 2025 by rpki-client