Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366A289EF65111EF9AA2B68E762E951A.roa
File: 366A289EF65111EF9AA2B68E762E951A.roa (raw, json)
Hash identifier: T6/ea6yubnSwqX71WU8QZSf0/uOsH7fgGl14K6tbmdo=
Subject key identifier: FE:A5:87:23:55:3C:D8:30:B3:3C:5C:91:5A:A8:22:86:D5:C9:BD:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366A289EF65111EF9AA2B68E762E951A.roa
Signing time: Sat 01 Mar 2025 03:56:54 +0000
ROA not before: Sat 01 Mar 2025 03:56:50 +0000
ROA not after: Thu 19 Feb 2026 03:56:50 +0000
asID: 984
IP address blocks: 154.205.77.0/24 maxlen: 24
154.205.78.0/24 maxlen: 24
154.205.79.0/24 maxlen: 24
154.205.80.0/24 maxlen: 24
154.205.81.0/24 maxlen: 24
154.205.82.0/24 maxlen: 24
154.205.83.0/24 maxlen: 24
154.205.84.0/24 maxlen: 24
154.205.85.0/24 maxlen: 24
154.205.86.0/24 maxlen: 24
154.205.87.0/24 maxlen: 24
154.205.88.0/24 maxlen: 24
154.205.89.0/24 maxlen: 24
154.205.90.0/24 maxlen: 24
154.205.91.0/24 maxlen: 24
154.205.92.0/24 maxlen: 24
154.205.93.0/24 maxlen: 24
154.205.94.0/24 maxlen: 24
154.205.95.0/24 maxlen: 24
154.205.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93436 (0x16cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 03:56:50 2025 GMT
Not After : Feb 19 03:56:50 2026 GMT
Subject: CN=67c28586-a552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:e0:6b:e1:5a:07:4e:d1:08:5c:02:81:27:
83:6b:38:df:29:51:0e:14:2c:54:b3:9d:98:ae:54:
5f:cb:e3:d8:9f:48:ba:e2:37:a7:f6:02:1e:66:b7:
40:43:85:0e:ed:20:9d:1f:1b:be:4a:21:79:93:25:
60:4f:f4:64:ec:8b:2a:30:58:cf:15:8a:3c:ff:1e:
74:04:d9:78:2c:a6:b0:30:db:65:be:e1:bf:00:ae:
84:aa:89:eb:f0:51:29:6f:ff:3b:b3:9b:35:27:8f:
8b:43:e4:bc:48:f8:3b:58:bc:91:16:bb:53:75:4e:
e6:07:8e:1b:a8:72:47:a9:9c:e9:c4:1a:8c:5f:bb:
6f:aa:83:d4:3d:35:f7:4d:e0:e6:8c:2e:10:c9:23:
96:1d:29:d0:d0:f2:e6:23:d7:58:05:e2:51:46:7a:
91:8f:cf:9b:ef:1a:1f:7c:b5:df:a7:52:14:59:b0:
4b:84:24:e2:71:74:83:20:2f:08:1e:63:4b:e2:6e:
b2:9c:3e:b8:9e:6a:7d:7a:ff:9c:6e:d8:19:22:d8:
00:bc:ee:76:61:2b:ef:4d:21:8a:f9:e7:93:4f:9d:
01:f8:81:6e:14:4e:bf:11:be:21:ad:aa:8e:a1:42:
b8:88:6e:a8:d0:7e:2f:97:97:35:0d:fb:dd:cc:61:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:87:23:55:3C:D8:30:B3:3C:5C:91:5A:A8:22:86:D5:C9:BD:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366A289EF65111EF9AA2B68E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.77.0-154.205.96.255
Signature Algorithm: sha256WithRSAEncryption
a5:50:c7:ff:15:41:8a:dd:39:0f:50:4f:21:66:ba:96:88:68:
ca:eb:a2:fb:ec:aa:46:c9:fd:4f:e9:04:08:d6:7b:30:bc:e6:
8f:c3:26:64:1e:da:1f:42:b0:2d:d2:9b:69:9e:a0:4c:ac:d7:
9b:58:aa:d8:c4:ab:96:55:0c:e4:f6:4f:b9:09:e5:25:72:9c:
69:c9:8f:a0:60:27:1b:89:b3:79:65:76:79:e8:d9:21:26:8f:
41:65:ce:04:b1:27:5b:8d:c0:34:b6:2b:e3:12:97:91:fe:89:
44:43:67:e1:55:35:13:1a:6f:29:28:87:d4:17:f3:51:6c:cd:
77:19:5d:b9:da:dd:8a:3e:2f:a0:cd:67:da:3c:4f:ff:e1:3c:
e5:60:1b:dc:fc:d0:94:b0:65:37:7c:8d:f9:77:61:5d:8c:3a:
9c:26:29:6a:6e:cf:bd:cb:c0:74:d2:d6:5f:25:09:72:90:48:
e9:5e:26:63:0b:95:57:c0:70:7b:1c:51:74:a8:4c:73:04:1f:
a2:e7:98:10:2a:02:53:63:cb:ab:dc:33:51:f5:49:b3:b5:c0:
46:b8:1e:6e:3a:5b:74:bb:73:73:9a:d6:48:13:49:b9:48:54:
51:4c:1b:b6:b3:50:49:96:2e:c3:04:9a:9b:57:b2:a6:d7:22:
ff:7f:a3:dd
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAWz8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDM1NjUwWhcNMjYwMjE5MDM1NjUwWjAYMRYw
FAYDVQQDEw02N2MyODU4Ni1hNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAymzga+FaB07RCFwCgSeDazjfKVEOFCxUs52YrlRfy+PYn0i64jen9gIe
ZrdAQ4UO7SCdHxu+SiF5kyVgT/Rk7IsqMFjPFYo8/x50BNl4LKawMNtlvuG/AK6E
qonr8FEpb/87s5s1J4+LQ+S8SPg7WLyRFrtTdU7mB44bqHJHqZzpxBqMX7tvqoPU
PTX3TeDmjC4QySOWHSnQ0PLmI9dYBeJRRnqRj8+b7xoffLXfp1IUWbBLhCTicXSD
IC8IHmNL4m6ynD64nmp9ev+cbtgZItgAvO52YSvvTSGK+eeTT50B+IFuFE6/Eb4h
raqOoUK4iG6o0H4vl5c1DfvdzGFATwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFP6l
hyNVPNgwszxckVqoIobVyb34MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNjZBMjg5RUY2NTExMUVGOUFBMkI2OEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazU0DBACazWAwDQYJ
KoZIhvcNAQELBQADggEBAKVQx/8VQYrdOQ9QTyFmupaIaMrrovvsqkbJ/U/pBAjW
ezC85o/DJmQe2h9CsC3Sm2meoEys15tYqtjEq5ZVDOT2T7kJ5SVynGnJj6BgJxuJ
s3lldnno2SEmj0FlzgSxJ1uNwDS2K+MSl5H+iURDZ+FVNRMabykoh9QX81FszXcZ
Xbna3Yo+L6DNZ9o8T//hPOVgG9z80JSwZTd8jfl3YV2MOpwmKWpuz73LwHTS1l8l
CXKQSOleJmMLlVfAcHscUXSoTHMEH6LnmBAqAlNjy6vcM1H1SbO1wEa4Hm46W3S7
c3Oa1kgTSblIVFFMG7azUEmWLsMEmptXsqbXIv9/o90=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:46 2025 by rpki-client