Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D03A356F65811EFBBE8A2BD762E951A.roa
File: 6D03A356F65811EFBBE8A2BD762E951A.roa (raw, json)
Hash identifier: Dd9BJVt5obDhZhMPewV3+EszZU+WaMPcaGjdjg+17Fo=
Subject key identifier: C6:DE:D0:59:23:E9:38:89:7A:EF:F7:0F:61:AB:D7:65:DD:69:BF:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D03A356F65811EFBBE8A2BD762E951A.roa
Signing time: Sat 01 Mar 2025 04:48:32 +0000
ROA not before: Sat 01 Mar 2025 04:48:28 +0000
ROA not after: Fri 20 Feb 2026 04:48:28 +0000
asID: 984
IP address blocks: 154.195.77.0/24 maxlen: 24
154.195.78.0/24 maxlen: 24
154.195.79.0/24 maxlen: 24
154.195.80.0/24 maxlen: 24
154.195.81.0/24 maxlen: 24
154.195.82.0/24 maxlen: 24
154.195.83.0/24 maxlen: 24
154.195.84.0/24 maxlen: 24
154.195.85.0/24 maxlen: 24
154.195.86.0/24 maxlen: 24
154.195.87.0/24 maxlen: 24
154.195.88.0/24 maxlen: 24
154.195.89.0/24 maxlen: 24
154.195.90.0/24 maxlen: 24
154.195.91.0/24 maxlen: 24
154.195.92.0/24 maxlen: 24
154.195.93.0/24 maxlen: 24
154.195.94.0/24 maxlen: 24
154.195.95.0/24 maxlen: 24
154.199.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93458 (0x16d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:48:28 2025 GMT
Not After : Feb 20 04:48:28 2026 GMT
Subject: CN=67c291a0-23f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:af:af:51:12:06:94:49:40:96:be:b0:fc:
72:4c:df:b6:47:a4:5f:4c:d1:7e:b0:ec:55:9b:c5:
bb:f5:13:2c:7e:0e:c0:03:f7:1b:a9:19:1e:c3:d3:
b2:cb:c2:1f:b5:9c:8b:82:53:db:d9:4c:b9:68:54:
6d:4e:06:6d:fc:c6:40:ae:29:7d:49:a4:ee:5b:c3:
94:46:39:e2:9d:f9:fe:ca:ea:b1:71:c9:14:0a:e0:
96:e9:0d:13:19:fa:3b:80:ba:4e:18:d8:18:59:98:
27:0a:7e:de:21:d5:24:43:bd:38:07:03:22:20:7d:
f7:db:4d:5b:6e:3b:47:86:29:d2:40:14:9d:27:b6:
ed:66:3c:6d:b3:2b:5f:0d:2a:f4:ad:91:46:6a:b3:
43:4c:40:a5:bb:b6:e9:19:59:25:45:59:e5:e5:b1:
48:e0:f9:62:cb:ee:aa:4b:c1:7d:ca:9d:4a:b0:d6:
91:73:fd:bd:fd:d8:75:d0:ca:1e:39:e4:48:bf:f2:
6d:48:ee:7c:33:92:51:76:c1:e2:fa:be:9f:ba:6b:
87:96:00:e8:b4:4d:e4:46:b0:76:6b:d3:b4:66:e0:
1f:11:ee:29:ed:14:09:eb:83:16:eb:15:21:53:26:
e3:34:da:e8:f7:87:57:d7:98:63:be:51:be:08:23:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:D0:59:23:E9:38:89:7A:EF:F7:0F:61:AB:D7:65:DD:69:BF:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D03A356F65811EFBBE8A2BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.77.0-154.195.95.255
154.199.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5c:68:83:44:21:1d:35:bd:b3:23:35:72:c0:c4:cd:e8:a0:
7f:80:d9:9b:6f:24:22:97:25:1f:9e:46:46:e2:90:09:62:4f:
89:45:28:cc:9b:6a:7c:10:c3:5a:5c:7e:56:2f:61:cf:43:e7:
c2:2b:39:40:50:68:aa:11:47:21:98:26:8f:7e:18:93:f4:81:
be:9d:bb:e1:e6:33:fa:5b:b9:c4:1c:f6:15:6f:09:8e:3e:f3:
25:15:b5:55:fc:fd:40:b9:13:3e:8b:d5:32:75:0b:90:a4:51:
48:16:b1:57:c9:3a:07:87:5b:d0:fd:ae:87:1f:c2:fe:1a:88:
a6:e8:94:9e:57:a7:d7:f1:dd:b6:1b:64:71:ed:c5:87:94:de:
5b:9c:40:4a:73:84:7e:45:b6:c3:4f:2c:78:86:9e:31:f2:29:
08:9e:83:4d:1e:b3:7c:4b:b5:7a:59:ee:df:8d:76:ad:59:11:
ab:6e:99:ee:8e:e8:7e:b2:b9:17:62:70:6c:09:d1:fd:85:9b:
49:6f:d5:82:92:d1:2d:fd:a5:3e:63:94:2a:71:bb:21:c4:cc:
5c:a9:a6:25:a9:66:93:37:f6:e8:e1:e9:c1:cb:b4:de:bd:dc:
44:9d:da:c8:e0:ac:4c:45:cd:00:60:b9:53:7a:7e:cc:d2:38:
78:f6:d1:9b
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAW0SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDQ0ODI4WhcNMjYwMjIwMDQ0ODI4WjAYMRYw
FAYDVQQDEw02N2MyOTFhMC0yM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwUavr1ESBpRJQJa+sPxyTN+2R6RfTNF+sOxVm8W79RMsfg7AA/cbqRke
w9Oyy8IftZyLglPb2Uy5aFRtTgZt/MZAril9SaTuW8OURjninfn+yuqxcckUCuCW
6Q0TGfo7gLpOGNgYWZgnCn7eIdUkQ704BwMiIH33201bbjtHhinSQBSdJ7btZjxt
sytfDSr0rZFGarNDTEClu7bpGVklRVnl5bFI4Pliy+6qS8F9yp1KsNaRc/29/dh1
0MoeOeRIv/JtSO58M5JRdsHi+r6fumuHlgDotE3kRrB2a9O0ZuAfEe4p7RQJ64MW
6xUhUybjNNro94dX15hjvlG+CCNy2QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFMbe
0Fkj6TiJeu/3D2Gr12Xdab9vMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RDAzQTM1NkY2NTgxMUVGQkJFOEEyQkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaw00DBAWaw0ADBACa
xwowDQYJKoZIhvcNAQELBQADggEBAA9caINEIR01vbMjNXLAxM3ooH+A2ZtvJCKX
JR+eRkbikAliT4lFKMybanwQw1pcflYvYc9D58IrOUBQaKoRRyGYJo9+GJP0gb6d
u+HmM/pbucQc9hVvCY4+8yUVtVX8/UC5Ez6L1TJ1C5CkUUgWsVfJOgeHW9D9rocf
wv4aiKbolJ5Xp9fx3bYbZHHtxYeU3lucQEpzhH5FtsNPLHiGnjHyKQieg00es3xL
tXpZ7t+Ndq1ZEatume6O6H6yuRdicGwJ0f2Fm0lv1YKS0S39pT5jlCpxuyHEzFyp
piWpZpM39ujh6cHLtN693ESd2sjgrExFzQBguVN6fszSOHj20Zs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:03:46 2025 by rpki-client