Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4057B560381911F09161BB8BDAE4EC9C.roa
File: 4057B560381911F09161BB8BDAE4EC9C.roa (raw, json)
Hash identifier: OTc8bFArojMXFzaFDLYoLzYwEbSzEvn5j7kVYTWUuzc=
Subject key identifier: 76:DB:19:02:E9:94:B5:65:F5:DB:FA:24:1F:95:A1:9C:5E:3F:0D:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018261
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4057B560381911F09161BB8BDAE4EC9C.roa
Signing time: Fri 23 May 2025 21:02:36 +0000
ROA not before: Fri 23 May 2025 21:02:31 +0000
ROA not after: Wed 17 Jun 2026 21:02:31 +0000
asID: 395886
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98913 (0x18261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 21:02:31 2025 GMT
Not After : Jun 17 21:02:31 2026 GMT
Subject: CN=6830e26c-991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:a5:27:75:9f:99:ac:8e:bb:01:97:8b:f7:
ec:a3:8e:ba:cb:a0:2a:b3:69:b4:c9:c8:69:da:eb:
da:98:d7:79:59:64:e0:15:31:a9:6a:90:ee:62:0f:
76:a8:86:2c:56:b6:b4:4a:cf:7e:65:d8:33:85:07:
a8:4c:1c:21:f0:5d:77:59:ef:7b:50:c6:8d:96:56:
93:59:36:c6:fd:d9:03:13:50:49:0c:14:7a:e7:09:
6b:49:7f:91:33:91:12:b1:67:5f:60:bf:22:3f:2c:
1c:c2:53:d1:cd:8a:2c:78:4a:46:ef:77:24:45:1b:
31:65:20:8f:37:d3:36:76:2a:4c:47:bc:ad:72:29:
01:f3:01:18:1e:33:ce:a8:1b:02:f4:d9:c6:71:6b:
66:76:ed:3c:9a:01:06:64:ba:fc:87:57:bf:6c:3b:
c8:a7:24:97:5b:64:e1:d3:6d:95:22:29:f7:c0:bb:
3c:04:2d:8b:d2:1b:f9:30:1e:51:60:27:69:f8:70:
53:c5:23:01:ae:ed:28:c2:84:d5:5d:76:db:5e:8d:
3d:fd:7e:80:6e:08:6c:b4:6b:45:b0:c9:31:52:31:
b9:5e:a2:3c:e1:00:99:4d:dc:62:9a:4d:63:b1:44:
a1:39:e8:03:be:1f:6b:80:fe:e8:bf:3f:eb:a7:f1:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DB:19:02:E9:94:B5:65:F5:DB:FA:24:1F:95:A1:9C:5E:3F:0D:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4057B560381911F09161BB8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
15:46:b6:46:e5:44:00:c7:17:34:e5:b2:ec:8e:e9:47:92:a8:
be:e8:1e:1b:dc:e5:9b:74:d5:28:f0:28:66:0c:35:d8:27:d6:
99:86:3d:1d:94:b7:e2:b6:9e:b8:c7:aa:50:09:7c:2c:c1:28:
3a:62:96:cd:34:77:63:fd:7e:a4:79:fc:cd:f0:d9:66:eb:05:
81:05:65:62:0e:cd:25:5f:7b:b9:3e:01:06:61:eb:f1:87:a4:
e9:39:27:03:70:82:c8:51:fe:c7:b2:b9:28:13:b1:11:05:2b:
f0:7a:b7:74:e7:4b:1d:30:fd:86:26:2c:51:46:af:a9:0a:02:
07:db:b0:d0:0b:53:a6:c4:94:32:4b:12:c0:24:8e:c7:6c:c4:
9e:c4:4d:4c:f1:69:94:65:9f:b0:8e:3e:fa:60:c5:75:70:46:
9d:e6:cd:8f:e8:8a:ad:dd:71:8a:47:1c:54:48:05:69:50:62:
b2:21:e4:a1:77:2e:60:b6:84:76:cb:87:b7:07:8c:44:dc:30:
63:eb:b4:09:e7:7e:7a:56:b6:86:5d:90:52:dd:9f:67:99:0c:
7f:dd:b0:fd:28:4c:ef:b3:f7:7f:d9:28:ba:9a:56:e6:e6:8f:
9d:87:35:99:71:e6:93:6a:69:e6:67:b2:7b:76:ac:b7:4a:07:
5c:cb:af:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYJhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMjEwMjMxWhcNMjYwNjE3MjEwMjMxWjAYMRYw
FAYDVQQDEw02ODMwZTI2Yy05OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA08ylJ3WfmayOuwGXi/fso466y6Aqs2m0ychp2uvamNd5WWTgFTGpapDu
Yg92qIYsVra0Ss9+ZdgzhQeoTBwh8F13We97UMaNllaTWTbG/dkDE1BJDBR65wlr
SX+RM5ESsWdfYL8iPywcwlPRzYoseEpG73ckRRsxZSCPN9M2dipMR7ytcikB8wEY
HjPOqBsC9NnGcWtmdu08mgEGZLr8h1e/bDvIpySXW2Th022VIin3wLs8BC2L0hv5
MB5RYCdp+HBTxSMBru0owoTVXXbbXo09/X6AbghstGtFsMkxUjG5XqI84QCZTdxi
mk1jsUShOegDvh9rgP7ovz/rp/ESPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHbb
GQLplLVl9dv6JB+VoZxePw2pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MDU3QjU2MDM4MTkxMUYwOTE2MUJCOEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsHAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVRrZG5UQAxxc05bLsjulHkqi+6B4b3OWbdNUo8ChmDDXYJ9aZhj0d
lLfitp64x6pQCXwswSg6YpbNNHdj/X6kefzN8Nlm6wWBBWViDs0lX3u5PgEGYevx
h6TpOScDcILIUf7HsrkoE7ERBSvwerd050sdMP2GJixRRq+pCgIH27DQC1OmxJQy
SxLAJI7HbMSexE1M8WmUZZ+wjj76YMV1cEad5s2P6Iqt3XGKRxxUSAVpUGKyIeSh
dy5gtoR2y4e3B4xE3DBj67QJ5356VraGXZBS3Z9nmQx/3bD9KEzvs/d/2Si6mlbm
5o+dhzWZceaTamnmZ7J7dqy3Sgdcy68c
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:16:22 2025 by rpki-client