Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CE10B1E332E11F0B62984E2DAE4EC9C.roa
File: 9CE10B1E332E11F0B62984E2DAE4EC9C.roa (raw, json)
Hash identifier: GauyoytN66C9TwuAx4J7++aimFARqPbaGWKW61D3dbA=
Subject key identifier: DC:1B:81:F5:AD:F9:A6:54:BE:AA:98:D3:89:14:AC:FB:E2:8C:70:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01814A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CE10B1E332E11F0B62984E2DAE4EC9C.roa
Signing time: Sat 17 May 2025 14:52:55 +0000
ROA not before: Sat 17 May 2025 14:52:49 +0000
ROA not after: Tue 16 Jun 2026 14:52:49 +0000
asID: 984
IP address blocks: 154.82.128.0/24 maxlen: 24
154.82.135.0/24 maxlen: 24
154.82.140.0/24 maxlen: 24
154.82.141.0/24 maxlen: 24
154.82.142.0/24 maxlen: 24
154.82.143.0/24 maxlen: 24
154.82.144.0/24 maxlen: 24
154.82.145.0/24 maxlen: 24
154.82.146.0/24 maxlen: 24
154.82.147.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.66.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
154.90.190.0/24 maxlen: 24
154.90.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98634 (0x1814a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 14:52:49 2025 GMT
Not After : Jun 16 14:52:49 2026 GMT
Subject: CN=6828a2c7-1e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:39:d5:65:ec:d6:f2:03:a8:90:04:03:6e:
1c:fe:9c:6e:59:78:9b:45:e9:73:94:38:40:07:03:
6f:de:53:33:d0:b9:ec:71:7c:47:dc:64:67:f9:85:
7d:b2:b1:f7:56:aa:d4:86:9f:ff:93:46:34:5e:1f:
41:d2:78:20:1a:58:f3:aa:83:76:93:fd:a7:93:27:
a9:f2:99:3d:38:f7:0e:78:2f:cf:5c:c7:71:fb:2d:
c5:c3:a6:f4:7a:fb:d7:3c:92:ef:f9:d1:f3:92:a8:
3e:cc:57:87:24:ee:39:e4:2c:c4:f9:9f:3b:a8:fd:
52:3a:ed:51:6d:38:f6:c7:15:a0:c4:58:2e:12:f3:
48:3b:4c:fc:6b:ff:f3:bb:e5:d3:e8:ea:3b:0e:94:
85:55:61:bc:1f:81:61:a8:d2:f6:1f:72:2d:75:8a:
04:c7:8c:22:0e:fb:09:bc:e9:2b:ad:c0:7b:c1:f3:
3e:11:c7:3c:48:6c:9f:36:18:8d:f2:28:ef:fa:1a:
2f:37:41:8c:33:6a:e9:92:5d:05:56:e3:45:13:1c:
ff:ee:09:51:f2:22:26:bf:82:c5:24:1b:c3:6c:76:
e3:c5:e7:97:10:42:72:84:8a:da:df:08:89:b6:c2:
0b:30:24:27:bd:f0:61:9d:18:b1:6b:02:d4:f2:b6:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:81:F5:AD:F9:A6:54:BE:AA:98:D3:89:14:AC:FB:E2:8C:70:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CE10B1E332E11F0B62984E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.128.0/24
154.82.135.0/24
154.82.140.0-154.82.147.255
154.82.196.0/22
154.83.65.0-154.83.67.255
154.90.189.0-154.90.191.255
Signature Algorithm: sha256WithRSAEncryption
ce:a0:af:1f:a8:5c:04:eb:e2:c5:5a:53:67:e3:af:bf:37:70:
7e:b2:42:4d:12:00:42:90:6f:e4:22:8e:24:63:ad:91:ee:f8:
92:2e:31:de:5a:67:6e:6e:5d:60:0e:6f:d5:83:95:71:e0:35:
06:2b:ab:ff:27:38:c0:6b:d6:25:21:ea:72:f5:a4:f3:8a:07:
f1:dc:51:00:95:16:64:cd:e2:a9:ec:e9:2d:74:f2:3f:76:50:
98:80:ce:67:90:1e:31:83:58:e4:67:95:65:00:e4:a5:22:8c:
cc:78:e0:de:3f:85:90:78:27:6f:fd:dc:36:04:e5:16:52:d4:
5d:d1:22:02:6d:38:6d:1f:cd:3e:c0:41:d3:53:4e:8d:28:9d:
0f:37:62:b4:e2:06:b5:5e:8b:6a:90:35:40:1b:5c:a0:55:1f:
df:3b:5b:ad:39:00:93:95:86:ff:59:5c:48:af:05:2d:76:61:
35:ea:52:87:0f:e1:2e:dc:db:63:61:78:0c:81:35:b1:9b:e3:
3c:b0:11:3b:08:dc:56:2b:31:3c:c6:55:9a:31:a8:87:90:42:
f9:57:ed:8a:a1:1e:be:2e:62:df:40:77:a0:29:c6:72:6f:2c:
d9:15:f2:a8:97:bf:04:8c:83:3f:6d:d3:b2:ce:83:0e:28:cc:
4c:b8:98:b8
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAYFKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE3MTQ1MjQ5WhcNMjYwNjE2MTQ1MjQ5WjAYMRYw
FAYDVQQDEw02ODI4YTJjNy0xZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoew51WXs1vIDqJAEA24c/pxuWXibRelzlDhABwNv3lMz0LnscXxH3GRn
+YV9srH3VqrUhp//k0Y0Xh9B0nggGljzqoN2k/2nkyep8pk9OPcOeC/PXMdx+y3F
w6b0evvXPJLv+dHzkqg+zFeHJO455CzE+Z87qP1SOu1RbTj2xxWgxFguEvNIO0z8
a//zu+XT6Oo7DpSFVWG8H4FhqNL2H3ItdYoEx4wiDvsJvOkrrcB7wfM+Ecc8SGyf
NhiN8ijv+hovN0GMM2rpkl0FVuNFExz/7glR8iImv4LFJBvDbHbjxeeXEEJyhIra
3wiJtsILMCQnvfBhnRixawLU8rYd/wIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFNwb
gfWt+aZUvqqY04kUrPvijHDEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0UxMEIxRTMzMkUxMUYwQjYyOTg0RTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmlKAAwQAmlKHMAwDBAKa
UowDBAKaUpADBAKaUsQwDAMEAJpTQQMEAppTQDAMAwQAmlq9AwQGmlqAMA0GCSqG
SIb3DQEBCwUAA4IBAQDOoK8fqFwE6+LFWlNn46+/N3B+skJNEgBCkG/kIo4kY62R
7viSLjHeWmdubl1gDm/Vg5Vx4DUGK6v/JzjAa9YlIepy9aTzigfx3FEAlRZkzeKp
7OktdPI/dlCYgM5nkB4xg1jkZ5VlAOSlIozMeODeP4WQeCdv/dw2BOUWUtRd0SIC
bThtH80+wEHTU06NKJ0PN2K04ga1XotqkDVAG1ygVR/fO1utOQCTlYb/WVxIrwUt
dmE16lKHD+Eu3NtjYXgMgTWxm+M8sBE7CNxWKzE8xlWaMaiHkEL5V+2KoR6+LmLf
QHegKcZybyzZFfKol78EjIM/bdOyzoMOKMxMuJi4
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:10:12 2025 by rpki-client