Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07C422FE3C8011F0A1DDEBBBDAE4EC9C.roa
File: 07C422FE3C8011F0A1DDEBBBDAE4EC9C.roa (raw, json)
Hash identifier: OWA5JyhFY735CUIr05PiSZS9tObyHOoNX2nuCug2Ev4=
Subject key identifier: 00:86:9C:44:90:10:9C:71:26:41:1C:2A:82:3D:99:B5:5B:B3:7B:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07C422FE3C8011F0A1DDEBBBDAE4EC9C.roa
Signing time: Thu 29 May 2025 11:28:24 +0000
ROA not before: Thu 29 May 2025 11:28:19 +0000
ROA not after: Sun 29 Jun 2025 11:28:19 +0000
asID: 214143
IP address blocks: 154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99262 (0x183be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 11:28:19 2025 GMT
Not After : Jun 29 11:28:19 2025 GMT
Subject: CN=683844d8-9450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:3d:6a:19:a5:02:4e:e4:39:22:fd:91:86:
98:0b:cb:4f:cc:3f:0e:f6:8f:06:40:18:2a:a3:bf:
af:5a:b5:79:bd:1a:e0:86:80:b3:0f:88:d9:2c:c8:
df:cb:fe:a6:40:d6:55:3a:6a:37:f0:fd:e2:69:35:
f6:a9:44:98:e5:11:25:b8:71:f6:97:f5:4f:2e:b9:
d9:b2:fb:93:7b:1b:9f:06:bc:6d:b3:17:73:4c:27:
a2:de:20:da:21:dd:23:db:e8:dc:7d:ef:cd:06:51:
d4:48:23:f4:27:4e:89:eb:4e:fe:33:95:07:9b:1e:
bc:7e:62:79:7e:be:b4:b0:a7:b7:c0:44:62:6f:75:
47:5b:a2:84:1e:a0:04:4b:82:b2:fc:42:6f:cc:0d:
a6:ee:c6:c7:38:01:60:ca:80:d8:1c:ba:94:81:28:
6b:1b:aa:d2:54:31:93:1a:49:b7:96:99:57:f2:0b:
e3:c6:22:95:97:50:59:52:d7:ce:1f:f2:d8:92:e6:
5d:66:26:81:85:e3:24:74:0b:98:da:8a:aa:71:2a:
a7:fb:dc:33:1d:07:89:f3:26:2f:8b:47:fc:6f:13:
1b:8e:cb:bd:39:19:dc:ad:2d:67:26:bc:d9:37:0b:
af:38:ca:93:8d:1d:9a:05:f4:83:5e:99:4a:00:0d:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:9C:44:90:10:9C:71:26:41:1C:2A:82:3D:99:B5:5B:B3:7B:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07C422FE3C8011F0A1DDEBBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
70:da:68:0e:ea:e0:b5:87:8e:4f:0d:31:69:2c:0f:61:68:8b:
78:ca:b9:e0:86:4f:86:c5:87:d5:bf:e6:fe:23:29:39:11:c4:
d9:5e:10:32:58:4d:14:0e:cf:75:05:0b:94:17:42:27:05:d3:
f1:9a:f4:b9:b3:53:7f:0e:a2:3c:f9:be:bd:1e:a6:5f:76:7a:
b5:1c:25:aa:6e:4c:35:c4:02:f5:c1:ca:12:70:b7:d3:ba:64:
c7:0f:a6:e5:2f:25:d3:b7:a0:93:bf:9e:42:36:d8:83:0e:ab:
86:85:3f:eb:4d:13:de:eb:cf:31:1f:b6:84:bb:54:80:00:9a:
22:14:d4:25:c6:32:4f:42:d4:de:f6:8c:f5:32:47:ee:26:a0:
1d:44:94:03:b4:2b:8c:63:c1:32:7c:e6:0d:65:55:d4:11:76:
8f:cb:83:a6:8f:c4:d2:62:9e:9f:0c:94:8b:01:68:8c:5f:03:
99:b6:3a:d1:db:9b:64:3a:79:b7:94:73:d1:5a:f2:1d:2f:f8:
59:0b:be:3a:58:b2:54:29:fe:a4:9b:46:86:f5:ac:a5:67:f8:
d5:0e:86:be:56:ec:5e:a8:22:8b:63:9d:19:25:2d:fa:59:30:
f6:32:77:9e:40:ff:7a:b0:d8:05:01:57:d4:f2:3e:55:87:85:
f9:ec:d9:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAYO+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI5MTEyODE5WhcNMjUwNjI5MTEyODE5WjAYMRYw
FAYDVQQDEw02ODM4NDRkOC05NDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqiM9ahmlAk7kOSL9kYaYC8tPzD8O9o8GQBgqo7+vWrV5vRrghoCzD4jZ
LMjfy/6mQNZVOmo38P3iaTX2qUSY5REluHH2l/VPLrnZsvuTexufBrxtsxdzTCei
3iDaId0j2+jcfe/NBlHUSCP0J06J607+M5UHmx68fmJ5fr60sKe3wERib3VHW6KE
HqAES4Ky/EJvzA2m7sbHOAFgyoDYHLqUgShrG6rSVDGTGkm3lplX8gvjxiKVl1BZ
UtfOH/LYkuZdZiaBheMkdAuY2oqqcSqn+9wzHQeJ8yYvi0f8bxMbjsu9ORncrS1n
JrzZNwuvOMqTjR2aBfSDXplKAA3D3wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFACG
nESQEJxxJkEcKoI9mbVbs3tIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wN0M0MjJGRTNDODAxMUYwQTFEREVCQkJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAml0BAwQAml0DAwQAml0a
AwQAml4jMA0GCSqGSIb3DQEBCwUAA4IBAQBw2mgO6uC1h45PDTFpLA9haIt4yrng
hk+GxYfVv+b+Iyk5EcTZXhAyWE0UDs91BQuUF0InBdPxmvS5s1N/DqI8+b69HqZf
dnq1HCWqbkw1xAL1wcoScLfTumTHD6blLyXTt6CTv55CNtiDDquGhT/rTRPe688x
H7aEu1SAAJoiFNQlxjJPQtTe9oz1MkfuJqAdRJQDtCuMY8EyfOYNZVXUEXaPy4Om
j8TSYp6fDJSLAWiMXwOZtjrR25tkOnm3lHPRWvIdL/hZC746WLJUKf6km0aG9ayl
Z/jVDoa+VuxeqCKLY50ZJS36WTD2MneeQP96sNgFAVfU8j5Vh4X57Nlx
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:47:12 2025 by rpki-client