Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E86C30331F11F0ADE5907DDAE4EC9C.roa
File: 13E86C30331F11F0ADE5907DDAE4EC9C.roa (raw, json)
Hash identifier: zdXauYkO20wJnbwUWW7GZzmtZwuUTwL1Tgjju0+lgYo=
Subject key identifier: BB:15:1A:58:4C:35:EF:2C:A2:BF:CB:93:92:67:88:89:F6:D4:75:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01812C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E86C30331F11F0ADE5907DDAE4EC9C.roa
Signing time: Sat 17 May 2025 13:01:42 +0000
ROA not before: Sat 17 May 2025 13:01:37 +0000
ROA not after: Wed 25 Jun 2025 13:01:37 +0000
asID: 20326
IP address blocks: 154.193.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98604 (0x1812c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 13:01:37 2025 GMT
Not After : Jun 25 13:01:37 2025 GMT
Subject: CN=682888b6-0b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:9b:b0:08:f2:d7:aa:b5:66:63:bc:07:53:
f6:19:6f:bf:da:9e:03:66:b2:e5:82:f3:d9:8f:3d:
d3:91:41:9e:86:4b:15:76:3f:81:05:7f:02:ac:3e:
9a:40:50:47:07:5e:99:9a:3a:8c:44:2c:e5:01:d6:
aa:03:3d:df:c9:b2:2a:52:09:f2:29:7f:84:cb:b3:
a8:ac:91:96:8d:66:9a:6f:60:08:02:da:85:cf:65:
52:57:1b:49:fe:ca:37:48:89:67:99:03:2b:46:c7:
80:03:da:20:ed:59:2c:29:52:96:37:4f:0a:0e:e1:
14:9f:38:27:3f:36:d2:ee:0a:52:21:e9:dc:16:da:
83:39:31:36:fa:d5:6c:43:cd:c3:67:c9:74:fd:44:
74:ac:0d:d0:07:3f:2f:69:59:62:1a:53:46:c2:97:
91:2c:93:0e:ef:d2:a9:3e:81:7c:02:43:f0:a6:10:
50:b7:fb:51:78:9a:21:88:76:f9:cf:43:09:96:86:
97:a1:2d:bf:c6:18:80:77:3d:c6:72:9a:85:72:0f:
e1:a2:d1:b8:04:4a:9b:f7:ee:4b:b0:66:52:9e:6d:
6e:b4:4e:1b:26:96:9d:98:9f:2c:ef:96:05:f4:25:
b6:99:6a:c7:2e:37:b9:5e:29:33:62:70:84:08:f0:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:1A:58:4C:35:EF:2C:A2:BF:CB:93:92:67:88:89:F6:D4:75:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13E86C30331F11F0ADE5907DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.132.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ee:8f:ae:ce:fd:37:1d:ac:ab:cd:63:62:3e:41:a8:d8:c1:
e8:dd:f0:f0:30:d7:13:7d:86:8b:d9:e5:8b:b9:82:2d:63:43:
28:90:ef:1c:c0:07:00:1f:3d:9c:0a:67:5f:9c:38:1c:eb:8d:
65:07:69:ba:aa:91:1f:5b:11:5b:57:1a:4a:78:f7:95:2b:be:
0e:23:3c:1a:42:e5:9e:a8:44:3b:20:1a:50:21:08:a0:90:49:
9e:5d:5f:3f:5a:c8:a8:a7:a0:90:94:c8:35:06:f6:f7:8a:cb:
bd:f7:d0:77:c7:b7:65:4e:33:52:0c:c4:2e:af:a5:23:17:2f:
88:18:e8:dc:af:73:6d:93:9e:b6:64:af:96:6e:4f:c7:cf:73:
57:b1:d6:5d:f3:fd:44:ec:d2:f2:a3:7b:b9:ea:aa:d0:95:05:
a7:92:46:94:e3:f5:85:a5:ab:fc:85:5a:26:f5:8a:38:cf:1d:
15:d2:29:23:a1:82:02:e8:f8:0b:4b:ee:3f:f0:fa:ac:40:73:
aa:ad:87:eb:10:0b:f8:55:26:03:fd:e2:7a:7e:a4:11:59:77:
22:88:d5:8a:a6:8b:36:83:79:0b:05:f8:df:b6:15:be:c8:20:
9d:1a:47:ff:16:ce:bd:e4:da:41:cd:af:99:f5:38:91:29:0c:
8d:0b:01:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYEsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE3MTMwMTM3WhcNMjUwNjI1MTMwMTM3WjAYMRYw
FAYDVQQDEw02ODI4ODhiNi0wYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2BSbsAjy16q1ZmO8B1P2GW+/2p4DZrLlgvPZjz3TkUGehksVdj+BBX8C
rD6aQFBHB16ZmjqMRCzlAdaqAz3fybIqUgnyKX+Ey7OorJGWjWaab2AIAtqFz2VS
VxtJ/so3SIlnmQMrRseAA9og7VksKVKWN08KDuEUnzgnPzbS7gpSIencFtqDOTE2
+tVsQ83DZ8l0/UR0rA3QBz8vaVliGlNGwpeRLJMO79KpPoF8AkPwphBQt/tReJoh
iHb5z0MJloaXoS2/xhiAdz3GcpqFcg/hotG4BEqb9+5LsGZSnm1utE4bJpadmJ8s
75YF9CW2mWrHLje5XikzYnCECPD9EwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLsV
GlhMNe8sor/Lk5JniIn21HWDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xM0U4NkMzMDMzMUYxMUYwQURFNTkwN0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGEMA0GCSqGSIb3DQEB
CwUAA4IBAQCq7o+uzv03HayrzWNiPkGo2MHo3fDwMNcTfYaL2eWLuYItY0MokO8c
wAcAHz2cCmdfnDgc641lB2m6qpEfWxFbVxpKePeVK74OIzwaQuWeqEQ7IBpQIQig
kEmeXV8/Wsiop6CQlMg1Bvb3isu999B3x7dlTjNSDMQur6UjFy+IGOjcr3Ntk562
ZK+Wbk/Hz3NXsdZd8/1E7NLyo3u56qrQlQWnkkaU4/WFpav8hVom9Yo4zx0V0ikj
oYIC6PgLS+4/8PqsQHOqrYfrEAv4VSYD/eJ6fqQRWXciiNWKpos2g3kLBfjfthW+
yCCdGkf/Fs695NpBza+Z9TiRKQyNCwFh
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:32 2025 by rpki-client