Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AD673823BA311F09B3A55A2DAE4EC9C.roa
File: 3AD673823BA311F09B3A55A2DAE4EC9C.roa (raw, json)
Hash identifier: /R/gakrLrQJTifArko6jYySy43fdJKEmTtg6c8t+KvA=
Subject key identifier: E2:23:7B:C8:8C:3A:41:D1:A1:C0:38:2A:E5:F6:66:66:8C:9D:47:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01832A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AD673823BA311F09B3A55A2DAE4EC9C.roa
Signing time: Wed 28 May 2025 09:07:50 +0000
ROA not before: Wed 28 May 2025 09:07:46 +0000
ROA not after: Sat 07 Jun 2025 09:07:46 +0000
asID: 9009
IP address blocks: 154.216.195.0/24 maxlen: 24
154.216.199.0/24 maxlen: 24
154.216.203.0/24 maxlen: 24
154.216.217.0/24 maxlen: 24
154.216.218.0/24 maxlen: 24
154.216.224.0/24 maxlen: 24
154.216.233.0/24 maxlen: 24
154.216.242.0/24 maxlen: 24
154.216.249.0/24 maxlen: 24
154.216.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99114 (0x1832a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:07:46 2025 GMT
Not After : Jun 7 09:07:46 2025 GMT
Subject: CN=6836d266-2679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:45:20:a8:a8:5a:b4:14:ea:64:03:31:7b:
f0:1a:26:13:61:ad:d9:88:7f:0c:e8:6a:db:ff:2a:
67:55:e8:94:75:55:6d:57:9c:35:88:e2:38:cb:c5:
0b:7a:79:30:24:54:8c:8f:29:6c:a6:cd:7c:6d:98:
8c:4f:ad:05:31:3f:37:22:55:e4:49:cb:56:f5:38:
a4:3d:db:32:f5:db:b3:17:12:ac:ad:5d:db:75:1f:
d7:e2:fd:37:40:bc:84:2f:62:9a:6c:e3:2f:8f:17:
5c:09:48:4e:9f:14:e7:ff:2f:4b:85:3b:35:60:95:
13:bc:82:55:38:51:3d:0d:b1:31:2d:b8:76:ae:8b:
96:dd:88:ee:91:97:7f:32:27:f3:b2:b7:7c:94:57:
5e:18:16:33:48:cc:76:27:3d:fa:7e:cc:ce:8d:be:
51:87:e3:c6:d0:bf:3e:cb:16:99:7f:cf:4c:06:dc:
be:79:ad:8c:81:a0:0c:77:77:1b:f4:5c:c3:15:b8:
3f:6f:46:50:e5:97:57:04:e6:11:40:1f:5b:b2:58:
01:33:ec:3d:ca:dd:ac:3e:84:75:cd:62:f4:64:3f:
d2:1c:85:8e:9d:7d:94:25:cf:7e:f7:48:d2:0c:5a:
77:39:16:7c:d4:11:08:71:dc:41:2c:5e:1f:6a:4a:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:7B:C8:8C:3A:41:D1:A1:C0:38:2A:E5:F6:66:66:8C:9D:47:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AD673823BA311F09B3A55A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.195.0/24
154.216.199.0/24
154.216.203.0/24
154.216.217.0-154.216.218.255
154.216.224.0/24
154.216.233.0/24
154.216.242.0/24
154.216.249.0/24
154.216.254.0/24
Signature Algorithm: sha256WithRSAEncryption
32:80:09:eb:ce:d7:0b:09:56:3e:9e:2d:b3:0d:53:6f:93:4a:
41:b3:97:0f:3d:b6:4d:5c:c1:fe:f9:61:93:2d:da:8a:ae:c6:
56:28:27:85:99:27:68:f7:32:59:0d:c8:5c:d0:7b:12:d3:62:
73:82:93:88:51:86:13:18:1c:e5:96:2e:6b:fe:80:0d:1a:9a:
8f:84:90:95:e6:77:ce:55:24:c0:3f:27:fb:a3:5d:5b:72:d4:
d3:f1:f8:6e:d7:9c:fd:31:2a:d8:98:72:df:ff:81:7d:c6:84:
b3:6e:ac:26:2f:ba:31:87:6a:d7:cc:70:9c:a2:3c:10:c7:4b:
80:a3:86:69:89:9b:0b:d2:2d:29:09:a8:4e:28:ac:62:99:65:
48:7e:8f:17:44:90:01:02:36:cd:f1:1f:a1:3f:8a:20:2d:ec:
11:a8:48:02:ce:ee:1a:d5:88:5c:6e:14:db:49:ed:98:16:f5:
31:d7:75:cf:7e:c9:f1:66:eb:7c:8d:c0:f1:d3:2e:44:47:43:
f7:ea:91:60:a9:f4:83:f7:1e:05:0a:ef:c1:d8:60:75:b8:59:
b2:6e:7f:29:5a:71:aa:73:91:0a:16:42:81:8f:80:db:7f:e9:
d6:cb:9d:ed:a7:ce:fe:39:72:87:43:dd:3d:97:b0:90:1e:9e:
75:a0:81:ea
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAYMqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI4MDkwNzQ2WhcNMjUwNjA3MDkwNzQ2WjAYMRYw
FAYDVQQDEw02ODM2ZDI2Ni0yNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwcJFIKioWrQU6mQDMXvwGiYTYa3ZiH8M6Grb/ypnVeiUdVVtV5w1iOI4
y8ULenkwJFSMjylsps18bZiMT60FMT83IlXkSctW9TikPdsy9duzFxKsrV3bdR/X
4v03QLyEL2KabOMvjxdcCUhOnxTn/y9LhTs1YJUTvIJVOFE9DbExLbh2rouW3Yju
kZd/Mifzsrd8lFdeGBYzSMx2Jz36fszOjb5Rh+PG0L8+yxaZf89MBty+ea2MgaAM
d3cb9FzDFbg/b0ZQ5ZdXBOYRQB9bslgBM+w9yt2sPoR1zWL0ZD/SHIWOnX2UJc9+
90jSDFp3ORZ81BEIcdxBLF4fakpHswIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFOIj
e8iMOkHRocA4KuX2ZmaMnUdOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQUQ2NzM4MjNCQTMxMUYwOUIzQTU1QTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAmtjDAwQAmtjHAwQAmtjL
MAwDBACa2NkDBACa2NoDBACa2OADBACa2OkDBACa2PIDBACa2PkDBACa2P4wDQYJ
KoZIhvcNAQELBQADggEBADKACevO1wsJVj6eLbMNU2+TSkGzlw89tk1cwf75YZMt
2oquxlYoJ4WZJ2j3MlkNyFzQexLTYnOCk4hRhhMYHOWWLmv+gA0amo+EkJXmd85V
JMA/J/ujXVty1NPx+G7XnP0xKtiYct//gX3GhLNurCYvujGHatfMcJyiPBDHS4Cj
hmmJmwvSLSkJqE4orGKZZUh+jxdEkAECNs3xH6E/iiAt7BGoSALO7hrViFxuFNtJ
7ZgW9THXdc9+yfFm63yNwPHTLkRHQ/fqkWCp9IP3HgUK78HYYHW4WbJufylacapz
kQoWQoGPgNt/6dbLne2nzv45codD3T2XsJAennWggeo=
-----END CERTIFICATE-----
Generated at Tue Jun 3 10:14:36 2025 by rpki-client