Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14BA973C3D5B11F082ABBAC8DAE4EC9C.roa
File: 14BA973C3D5B11F082ABBAC8DAE4EC9C.roa (raw, json)
Hash identifier: gbKrmuuG6sHlN33z6ZWoJVUh+2Nye4cIfxqUo97E/Ps=
Subject key identifier: DF:53:EB:0C:61:BA:92:20:5D:21:A9:09:AC:CC:1B:E0:A3:F0:01:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14BA973C3D5B11F082ABBAC8DAE4EC9C.roa
Signing time: Fri 30 May 2025 13:36:25 +0000
ROA not before: Fri 30 May 2025 13:36:20 +0000
ROA not after: Tue 08 Jul 2025 13:36:20 +0000
asID: 44559
IP address blocks: 154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.73.0/24 maxlen: 24
154.219.74.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
154.219.83.0/24 maxlen: 24
154.219.84.0/24 maxlen: 24
154.219.85.0/24 maxlen: 24
154.219.86.0/24 maxlen: 24
154.219.87.0/24 maxlen: 24
154.219.88.0/24 maxlen: 24
154.219.89.0/24 maxlen: 24
154.219.90.0/24 maxlen: 24
154.219.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99299 (0x183e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 13:36:20 2025 GMT
Not After : Jul 8 13:36:20 2025 GMT
Subject: CN=6839b459-a657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:1e:0f:0b:8d:39:ad:c4:fb:3d:b0:22:46:
f9:d3:ed:ba:27:4e:c8:09:bf:ab:85:b5:44:67:7c:
7a:b9:5d:c5:2c:d3:bb:af:2d:5a:ee:cf:a8:22:12:
09:07:c6:62:f7:51:14:a8:2d:54:6c:4c:98:42:b5:
1f:5e:d0:60:ac:a6:60:6a:9d:6b:dd:8b:5c:42:6c:
57:83:4d:1c:ef:d7:6c:7e:9a:4b:61:05:87:29:90:
bf:5a:cc:51:35:5c:bc:4a:8a:e0:75:0a:7e:5a:8d:
3a:0e:3f:8f:1c:e9:28:47:0c:1f:c9:8f:5b:01:b6:
64:f6:80:1f:c0:84:5b:3a:27:12:3a:ef:2a:98:5f:
87:93:8b:86:5f:e1:82:59:ea:61:a7:84:ef:e3:1e:
49:3e:7a:b9:a8:87:bf:3b:e6:8e:1e:93:3e:f3:62:
cd:e9:ed:82:44:05:c1:b6:ad:f8:37:53:53:60:cc:
d3:42:7a:3b:c8:16:a4:59:97:0d:e8:2c:c4:44:a2:
9f:e7:0b:12:f9:2b:83:97:49:2d:7b:3b:2d:03:f0:
5a:21:0c:b6:ff:9b:d7:4f:63:32:eb:6b:04:30:d6:
e9:20:e5:b9:eb:ee:8e:1a:dc:ec:73:07:ed:a0:05:
46:56:69:2c:a3:20:d5:02:20:88:33:8c:f0:9c:b2:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:EB:0C:61:BA:92:20:5D:21:A9:09:AC:CC:1B:E0:A3:F0:01:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14BA973C3D5B11F082ABBAC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.71.0-154.219.74.255
154.219.76.0-154.219.91.255
Signature Algorithm: sha256WithRSAEncryption
78:64:23:a2:92:33:dc:bb:53:37:34:1e:cf:12:4a:13:53:4d:
5c:fd:1a:60:90:0b:c1:f7:6c:9a:90:5f:c9:2d:cf:97:24:42:
7b:90:3e:7e:66:79:0d:94:4c:57:e6:e3:b0:b3:21:39:9a:c7:
49:19:51:ab:c6:cb:27:4c:60:68:ed:56:23:11:38:a0:77:20:
96:af:ac:35:40:e4:69:53:eb:db:c6:90:17:89:84:20:b4:a6:
5e:8f:ee:a4:a3:13:21:bd:01:20:cb:fc:56:6e:5e:b6:e9:58:
38:c6:82:37:e3:8a:6d:b4:87:76:d3:6b:c9:e4:c8:5f:ed:f7:
47:ec:14:35:9a:4a:74:6e:88:a8:a9:4f:81:bc:16:7c:57:18:
6a:4f:cb:87:4f:aa:2b:00:ce:6e:7a:cb:83:18:c3:e3:bf:33:
40:34:40:42:b7:5f:ff:c8:93:e3:49:da:3f:08:44:d8:fc:e7:
fd:53:67:dc:e4:30:bb:05:30:2c:dc:b4:3d:ac:c0:5f:ca:59:
ff:6e:3b:88:6d:a6:68:f9:b9:fa:e0:04:fd:48:5f:82:40:72:
0b:2e:fc:f5:2e:9b:c3:0b:7f:53:82:5c:53:f7:d4:41:3c:e2:
1a:96:4d:00:5a:04:b8:65:5f:1c:52:e2:6b:80:05:c0:4a:8f:
dd:25:ba:13
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAYPjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMwMTMzNjIwWhcNMjUwNzA4MTMzNjIwWjAYMRYw
FAYDVQQDEw02ODM5YjQ1OS1hNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7OoeDwuNOa3E+z2wIkb50+26J07ICb+rhbVEZ3x6uV3FLNO7ry1a7s+o
IhIJB8Zi91EUqC1UbEyYQrUfXtBgrKZgap1r3YtcQmxXg00c79dsfppLYQWHKZC/
WsxRNVy8SorgdQp+Wo06Dj+PHOkoRwwfyY9bAbZk9oAfwIRbOicSOu8qmF+Hk4uG
X+GCWephp4Tv4x5JPnq5qIe/O+aOHpM+82LN6e2CRAXBtq34N1NTYMzTQno7yBak
WZcN6CzERKKf5wsS+SuDl0ktezstA/BaIQy2/5vXT2My62sEMNbpIOW56+6OGtzs
cwftoAVGVmksoyDVAiCIM4zwnLJtIwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFN9T
6wxhupIgXSGpCazMG+Cj8AHXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNEJBOTczQzNENUIxMUYwODJBQkJBQzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACa20cDBACa20owDAME
AprbTAMEAprbWDANBgkqhkiG9w0BAQsFAAOCAQEAeGQjopIz3LtTNzQezxJKE1NN
XP0aYJALwfdsmpBfyS3PlyRCe5A+fmZ5DZRMV+bjsLMhOZrHSRlRq8bLJ0xgaO1W
IxE4oHcglq+sNUDkaVPr28aQF4mEILSmXo/upKMTIb0BIMv8Vm5etulYOMaCN+OK
bbSHdtNryeTIX+33R+wUNZpKdG6IqKlPgbwWfFcYak/Lh0+qKwDObnrLgxjD478z
QDRAQrdf/8iT40naPwhE2Pzn/VNn3OQwuwUwLNy0PazAX8pZ/247iG2maPm5+uAE
/UhfgkByCy789S6bwwt/U4JcU/fUQTziGpZNAFoEuGVfHFLia4AFwEqP3SW6Ew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:49:05 2025 by rpki-client