Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11EE192E42D411F0B58C72DCDAE4EC9C.roa
File: 11EE192E42D411F0B58C72DCDAE4EC9C.roa (raw, json)
Hash identifier: 2rq+B7zzBHoL9aQPe88HA9i1fI+toavE2AJGCxgy84M=
Subject key identifier: 04:2C:34:84:98:3F:FD:5A:A4:C3:39:AB:CB:FA:14:9D:69:E9:60:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018526
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11EE192E42D411F0B58C72DCDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 12:45:05 +0000
ROA not before: Fri 06 Jun 2025 12:45:00 +0000
ROA not after: Sun 31 Aug 2025 12:45:00 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99622 (0x18526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 12:45:00 2025 GMT
Not After : Aug 31 12:45:00 2025 GMT
Subject: CN=6842e2d1-3316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:a4:29:b7:37:56:7a:bd:00:1c:c4:b9:07:
d3:b7:4c:c4:5d:1b:f6:af:13:ac:af:0b:94:0a:24:
90:54:82:0d:f0:a2:0f:14:61:8a:4a:13:9d:d2:aa:
56:d2:b6:de:54:7f:64:22:0a:01:93:a9:00:92:0f:
eb:95:45:0f:90:72:79:a6:e9:d5:fe:47:d1:49:1c:
85:93:41:0a:3b:d5:71:2a:6a:26:fc:73:5a:73:5c:
2b:b1:2e:01:20:75:0a:ad:77:b6:dd:60:2c:94:f8:
21:f6:d7:67:f0:2a:cb:4b:57:f9:83:13:fe:a4:a9:
ed:dd:83:ca:af:c4:14:f8:73:86:53:59:9e:be:d8:
2d:c6:b8:2b:40:e6:f6:92:3e:cd:1d:6d:66:cd:bc:
ce:09:7c:3b:4e:17:6c:48:33:44:ed:1f:d0:74:00:
cc:ea:b9:f4:e3:fc:6e:6e:6a:aa:35:69:d4:57:51:
dc:6b:a9:e1:55:de:55:44:39:67:7f:0f:d4:1e:34:
d5:94:c3:9b:a0:af:2f:81:86:2d:43:e1:71:e8:92:
86:70:c0:d3:8c:a2:98:6d:9f:34:3d:45:fa:8b:20:
76:87:c9:be:68:bc:5a:77:67:14:74:78:19:e1:dc:
d4:bb:a5:cb:71:a2:a3:69:dd:b3:43:c3:e6:5b:53:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2C:34:84:98:3F:FD:5A:A4:C3:39:AB:CB:FA:14:9D:69:E9:60:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11EE192E42D411F0B58C72DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.66.255
Signature Algorithm: sha256WithRSAEncryption
35:14:28:a1:b8:b4:cc:ce:ce:4d:04:37:a4:a7:d4:97:dd:72:
35:5b:61:66:23:f3:94:57:87:56:37:2a:c6:08:11:a1:05:7a:
fc:31:48:c9:a8:26:2d:6c:fa:27:40:8e:91:c2:76:2c:23:de:
30:c8:ed:67:24:bc:b1:37:3c:a9:20:f7:2c:e9:29:87:d6:b3:
b9:0c:11:a4:3e:9c:96:60:65:e7:e4:08:6f:ab:31:58:8a:5c:
18:52:1e:55:e7:48:0e:64:c1:69:de:7e:cf:6c:cb:0f:80:ef:
9b:08:3c:f8:0c:43:67:ff:ba:61:96:64:9f:63:9b:c6:34:74:
b8:4f:30:97:88:f6:2a:68:56:f7:be:38:73:12:ae:4d:38:fa:
bb:f9:05:0e:fb:39:e3:19:10:ef:9b:df:43:7a:95:9b:5a:1b:
15:6f:6e:aa:18:ab:ee:b2:49:ea:f7:f2:ba:02:14:37:5a:ae:
4d:74:6b:7f:8c:1a:7d:6f:bb:bc:1d:5f:6d:b5:19:45:5c:d4:
57:50:23:87:91:95:46:a8:2c:16:5d:e4:2e:2c:43:be:82:d4:
59:2e:b1:6b:a2:16:49:b0:c0:56:26:d2:7b:d7:5e:1e:16:f8:
df:33:d5:d1:4c:cf:22:f0:f3:84:90:22:e9:e9:fc:91:6b:1f:
dc:96:0e:82
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYUmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA2MTI0NTAwWhcNMjUwODMxMTI0NTAwWjAYMRYw
FAYDVQQDEw02ODQyZTJkMS0zMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwRqkKbc3Vnq9ABzEuQfTt0zEXRv2rxOsrwuUCiSQVIIN8KIPFGGKShOd
0qpW0rbeVH9kIgoBk6kAkg/rlUUPkHJ5punV/kfRSRyFk0EKO9VxKmom/HNac1wr
sS4BIHUKrXe23WAslPgh9tdn8CrLS1f5gxP+pKnt3YPKr8QU+HOGU1mevtgtxrgr
QOb2kj7NHW1mzbzOCXw7ThdsSDNE7R/QdADM6rn04/xubmqqNWnUV1Hca6nhVd5V
RDlnfw/UHjTVlMOboK8vgYYtQ+Fx6JKGcMDTjKKYbZ80PUX6iyB2h8m+aLxad2cU
dHgZ4dzUu6XLcaKjad2zQ8PmW1MsdwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAQs
NISYP/1apMM5q8v6FJ1p6WBsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUVFMTkyRTQyRDQxMUYwQjU4QzcyRENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaW0ADBACaW0IwDQYJ
KoZIhvcNAQELBQADggEBADUUKKG4tMzOzk0EN6Sn1JfdcjVbYWYj85RXh1Y3KsYI
EaEFevwxSMmoJi1s+idAjpHCdiwj3jDI7WckvLE3PKkg9yzpKYfWs7kMEaQ+nJZg
ZefkCG+rMViKXBhSHlXnSA5kwWnefs9syw+A75sIPPgMQ2f/umGWZJ9jm8Y0dLhP
MJeI9ipoVve+OHMSrk04+rv5BQ77OeMZEO+b30N6lZtaGxVvbqoYq+6ySer38roC
FDdark10a3+MGn1vu7wdX221GUVc1FdQI4eRlUaoLBZd5C4sQ76C1FkusWuiFkmw
wFYm0nvXXh4W+N8z1dFMzyLw84SQIunp/JFrH9yWDoI=
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:57:09 2025 by rpki-client