Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD19726413211F0A15683C2DAE4EC9C.roa
File: 4CD19726413211F0A15683C2DAE4EC9C.roa (raw, json)
Hash identifier: i9WPecq8jZ0xTjUU+Mim81lyGIrqz7Q4IArDmOddSVg=
Subject key identifier: BA:5A:45:A9:19:F8:03:4A:33:1E:94:ED:E9:98:AB:8D:90:EB:1F:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD19726413211F0A15683C2DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 10:54:34 +0000
ROA not before: Wed 04 Jun 2025 10:54:29 +0000
ROA not after: Thu 11 Dec 2025 10:54:29 +0000
asID: 139871
IP address blocks: 154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99526 (0x184c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 10:54:29 2025 GMT
Not After : Dec 11 10:54:29 2025 GMT
Subject: CN=684025ea-5a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:c1:56:98:9a:92:a3:3f:41:4d:f8:1a:0d:
e6:e2:73:28:dd:7d:e5:28:c8:56:2a:ee:f3:f2:c7:
93:af:22:70:3e:8e:ed:b1:e0:2f:7d:db:69:6b:30:
ca:55:7b:40:42:41:9a:77:58:15:25:c5:e6:1f:32:
ca:5b:ca:88:f4:fd:43:c2:ef:d6:5b:c9:46:b1:42:
5a:54:44:4d:0a:75:8d:68:2a:b8:b8:06:cc:38:1f:
ca:b2:06:f8:8d:9d:6f:ce:a7:e3:2e:2c:0e:a4:29:
e0:f9:56:e9:4f:c7:59:51:a1:3d:3b:e6:26:46:ef:
03:33:a0:35:76:46:85:20:c6:c0:ca:1f:72:09:27:
d8:58:0d:ca:73:af:5c:de:54:2e:bf:23:7e:15:7b:
dc:41:38:f7:d9:79:11:f1:a0:65:10:ab:11:2b:52:
1f:11:3c:e8:e3:31:50:d4:30:76:be:08:bb:c3:23:
09:e5:4a:9f:df:36:dc:1b:d4:5e:a6:b9:96:18:2a:
78:c6:5c:77:18:47:f4:33:e5:64:a9:cd:d8:90:64:
a8:52:68:d0:7d:e2:ab:17:f8:7f:b2:d2:7d:2e:b0:
4a:e3:44:d1:b0:56:c3:9c:f3:b1:ea:87:c9:90:43:
df:b7:b4:85:d8:f4:c8:9e:d3:ff:76:67:53:1c:4d:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:45:A9:19:F8:03:4A:33:1E:94:ED:E9:98:AB:8D:90:EB:1F:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD19726413211F0A15683C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:eb:46:62:fe:19:0f:e6:32:1b:38:57:0a:be:e9:d8:10:0d:
6e:52:2b:99:ca:cc:ad:f2:b0:d9:77:52:90:20:af:f3:c8:cf:
7f:55:f6:c5:db:a3:cb:77:d2:f0:7b:1e:33:08:65:36:f8:8b:
c8:07:df:50:ce:95:d7:8e:2c:a1:20:7c:6e:09:7e:2d:39:bd:
b9:07:24:59:16:80:77:49:c0:28:1b:8d:94:a2:7b:4d:17:3b:
98:da:27:b0:01:74:f9:f6:b3:47:a6:0c:54:da:18:31:05:48:
44:06:fd:d2:48:16:f5:ba:25:f9:e4:73:28:98:9a:68:2a:49:
b2:fd:d2:9c:66:2b:79:0a:28:80:46:5b:a0:d5:db:31:fb:28:
40:0a:36:7e:97:df:bb:67:e3:1b:09:ab:02:bc:43:59:3a:f8:
38:6f:ae:17:1e:22:a5:c3:4e:51:c1:98:e8:d0:50:2a:19:f5:
87:bc:10:ad:ec:ff:e2:cc:1e:5f:c6:ec:07:c0:39:98:f0:9c:
d9:e3:39:32:73:e1:e4:f5:5e:6e:ab:5a:0b:15:f8:66:89:d8:
43:22:4f:1a:ee:e2:d0:66:88:a2:8a:1e:33:01:c2:3b:0a:a5:
4a:aa:29:37:45:ea:ef:07:8f:7d:b3:6e:b0:e1:04:3a:a2:7d:
ee:5d:6a:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYTGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA0MTA1NDI5WhcNMjUxMjExMTA1NDI5WjAYMRYw
FAYDVQQDEw02ODQwMjVlYS01YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuHbBVpiakqM/QU34Gg3m4nMo3X3lKMhWKu7z8seTryJwPo7tseAvfdtp
azDKVXtAQkGad1gVJcXmHzLKW8qI9P1Dwu/WW8lGsUJaVERNCnWNaCq4uAbMOB/K
sgb4jZ1vzqfjLiwOpCng+VbpT8dZUaE9O+YmRu8DM6A1dkaFIMbAyh9yCSfYWA3K
c69c3lQuvyN+FXvcQTj32XkR8aBlEKsRK1IfETzo4zFQ1DB2vgi7wyMJ5Uqf3zbc
G9ReprmWGCp4xlx3GEf0M+Vkqc3YkGSoUmjQfeKrF/h/stJ9LrBK40TRsFbDnPOx
6ofJkEPft7SF2PTIntP/dmdTHE2fawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLpa
RakZ+ANKMx6U7emYq42Q6x87MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Q0QxOTcyNjQxMzIxMUYwQTE1NjgzQzJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVTMA0GCSqGSIb3DQEB
CwUAA4IBAQB/60Zi/hkP5jIbOFcKvunYEA1uUiuZysyt8rDZd1KQIK/zyM9/VfbF
26PLd9Lwex4zCGU2+IvIB99QzpXXjiyhIHxuCX4tOb25ByRZFoB3ScAoG42UontN
FzuY2iewAXT59rNHpgxU2hgxBUhEBv3SSBb1uiX55HMomJpoKkmy/dKcZit5CiiA
Rlug1dsx+yhACjZ+l9+7Z+MbCasCvENZOvg4b64XHiKlw05RwZjo0FAqGfWHvBCt
7P/izB5fxuwHwDmY8JzZ4zkyc+Hk9V5uq1oLFfhmidhDIk8a7uLQZoiiih4zAcI7
CqVKqik3RervB499s26w4QQ6on3uXWoO
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:03:35 2025 by rpki-client