Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C5C5525CB411F09D2FCCD9DAE4EC9C.roa
File: F6C5C5525CB411F09D2FCCD9DAE4EC9C.roa (raw, json)
Hash identifier: pzKJnX3XNyh6HoZa0jO30vVYF+tFh3EP6YltZcvZmQs=
Subject key identifier: E1:70:11:96:87:DC:72:53:44:50:4D:A0:53:E8:BB:2B:60:7D:4F:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018CBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C5C5525CB411F09D2FCCD9DAE4EC9C.roa
Signing time: Wed 09 Jul 2025 11:07:56 +0000
ROA not before: Wed 09 Jul 2025 11:07:51 +0000
ROA not after: Wed 06 Aug 2025 11:07:51 +0000
asID: 45194
IP address blocks: 154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101563 (0x18cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 11:07:51 2025 GMT
Not After : Aug 6 11:07:51 2025 GMT
Subject: CN=686e4d8c-de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:f1:57:1e:a4:47:ce:12:4e:aa:14:08:09:
c7:67:48:ce:a9:b0:89:8c:57:74:bc:4f:00:c6:5b:
41:23:e2:57:cf:e6:8e:fc:3b:fc:99:5f:d0:a7:57:
14:cb:58:af:c2:7a:8c:aa:d9:89:0b:d6:c1:59:6c:
09:b6:f2:6a:ee:b7:66:56:dd:21:60:99:16:2b:9a:
22:da:65:97:14:f1:74:54:c9:7a:d8:d6:f5:0a:e6:
2a:d4:c5:8c:35:fe:70:b3:a0:94:cb:f3:b0:25:d6:
18:7f:4d:9b:e5:26:4f:67:ab:e3:95:a7:e2:d8:af:
41:17:30:4a:30:4e:f1:c3:12:81:b3:b7:63:34:02:
d6:dd:35:ff:e6:f3:f9:51:91:ab:14:e8:30:6d:e0:
37:87:fd:6e:23:d7:c9:cd:1d:05:37:11:b3:0f:00:
9a:ad:2b:b7:3a:10:3a:92:0c:c4:5c:b7:06:71:ac:
df:00:73:ce:38:25:aa:89:ee:82:75:e4:08:c4:43:
79:06:d1:36:e6:a0:15:44:db:21:a5:9c:00:30:cd:
dc:b4:bb:f4:18:c0:3a:2b:5f:a6:44:c5:9f:ae:c2:
6f:6b:b6:fd:41:9e:7c:1e:fe:6b:f3:b3:be:d4:a0:
2c:c6:fd:9f:13:f0:d8:6f:69:3b:8c:56:b3:f7:cf:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:70:11:96:87:DC:72:53:44:50:4D:A0:53:E8:BB:2B:60:7D:4F:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C5C5525CB411F09D2FCCD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.228.0/23
154.84.231.0/24
154.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3b:b3:df:48:bd:af:57:dc:ad:3c:2a:d9:2a:18:a1:b7:52:
99:85:ee:f5:74:2f:7a:2c:a6:46:28:eb:b6:96:eb:17:58:3d:
0c:6a:e1:cf:23:9c:01:45:e6:f9:97:1a:fb:cf:d9:96:7a:c0:
45:8e:ba:71:dd:cb:7a:89:30:72:6c:da:de:12:33:62:c6:f6:
36:d0:bc:4f:89:c9:8b:74:2f:f0:71:6e:a5:ac:8b:47:29:ea:
2c:b5:c8:03:13:29:1b:34:51:6a:ae:58:37:50:f3:12:4a:39:
98:34:24:0c:61:2b:7d:f0:a3:5a:50:1f:c7:28:68:bf:30:19:
e3:df:a9:6d:d2:7a:7a:1c:d2:1b:7e:3d:44:26:21:64:22:67:
75:5c:c9:fe:78:69:5a:1d:95:67:4c:31:fb:83:b2:d9:cc:2c:
1f:de:fd:db:77:40:dc:c4:8f:dc:4e:71:5c:57:9e:ee:15:86:
67:b7:e1:9c:87:61:57:8f:97:e4:a9:52:31:2a:03:58:68:24:
b3:5f:d1:8f:4c:06:b6:0c:ca:77:aa:a5:d4:46:66:9a:b5:04:
52:0a:b3:6a:16:69:1e:d2:25:ea:12:d6:4d:90:7d:51:10:ab:
aa:79:76:b7:01:7c:37:8b:8f:12:97:86:f8:56:a2:f1:0c:fb:
3d:a5:e3:5e
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAYy7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA5MTEwNzUxWhcNMjUwODA2MTEwNzUxWjAYMRYw
FAYDVQQDEw02ODZlNGQ4Yy1kZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA15XxVx6kR84STqoUCAnHZ0jOqbCJjFd0vE8AxltBI+JXz+aO/Dv8mV/Q
p1cUy1ivwnqMqtmJC9bBWWwJtvJq7rdmVt0hYJkWK5oi2mWXFPF0VMl62Nb1CuYq
1MWMNf5ws6CUy/OwJdYYf02b5SZPZ6vjlafi2K9BFzBKME7xwxKBs7djNALW3TX/
5vP5UZGrFOgwbeA3h/1uI9fJzR0FNxGzDwCarSu3OhA6kgzEXLcGcazfAHPOOCWq
ie6CdeQIxEN5BtE25qAVRNshpZwAMM3ctLv0GMA6K1+mRMWfrsJva7b9QZ58Hv5r
87O+1KAsxv2fE/DYb2k7jFaz98/zOwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFOFw
EZaH3HJTRFBNoFPouytgfU8LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNkM1QzU1MjVDQjQxMUYwOUQyRkNDRDlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmlTkAwQAmlTnAwQAmlTw
MA0GCSqGSIb3DQEBCwUAA4IBAQBGO7PfSL2vV9ytPCrZKhiht1KZhe71dC96LKZG
KOu2lusXWD0MauHPI5wBReb5lxr7z9mWesBFjrpx3ct6iTBybNreEjNixvY20LxP
icmLdC/wcW6lrItHKeostcgDEykbNFFqrlg3UPMSSjmYNCQMYSt98KNaUB/HKGi/
MBnj36lt0np6HNIbfj1EJiFkImd1XMn+eGlaHZVnTDH7g7LZzCwf3v3bd0DcxI/c
TnFcV57uFYZnt+Gch2FXj5fkqVIxKgNYaCSzX9GPTAa2DMp3qqXURmaatQRSCrNq
Fmke0iXqEtZNkH1REKuqeXa3AXw3i48Sl4b4VqLxDPs9peNe
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:50 2025 by rpki-client