Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE660C23D5111F085C7378DDAE4EC9C.roa
File: 9DE660C23D5111F085C7378DDAE4EC9C.roa (raw, json)
Hash identifier: AU4YSNWl/j4VEwJEsl9sZGKW05YJY8CSJEe+wS2U5/s=
Subject key identifier: 8D:E8:11:EA:55:CD:EA:5D:F8:DF:60:C8:32:6B:DF:CA:B9:F7:12:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE660C23D5111F085C7378DDAE4EC9C.roa
Signing time: Fri 30 May 2025 12:28:40 +0000
ROA not before: Fri 30 May 2025 12:28:35 +0000
ROA not after: Wed 17 Jun 2026 12:28:35 +0000
asID: 21859
IP address blocks: 154.193.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99281 (0x183d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 12:28:35 2025 GMT
Not After : Jun 17 12:28:35 2026 GMT
Subject: CN=6839a478-f351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:43:f5:fc:ec:42:ce:22:7c:c0:8d:f6:0e:
d7:89:0f:99:8d:e1:4c:4c:ca:6e:f2:c7:9c:43:74:
f6:c3:d6:ba:d3:85:f8:b5:bf:f8:25:3d:44:e3:ce:
fb:17:25:59:b2:de:79:84:7f:24:4a:52:69:5c:f2:
cc:e3:1b:42:fd:27:ed:9d:2f:5f:1c:44:20:11:65:
02:45:13:95:d3:11:9e:60:ce:b6:92:02:75:c0:55:
cc:f7:a9:94:62:60:61:b2:51:08:9a:c1:d8:d4:b2:
20:b3:eb:4b:d0:22:86:a1:d7:d5:b3:4f:6e:fd:1a:
a2:33:1d:15:f3:f1:cb:7d:b1:ef:ee:72:4c:51:9c:
04:9d:2f:2e:8c:44:61:e1:f4:12:8e:dc:06:76:23:
02:94:f4:78:a3:e8:46:b5:8f:c1:7d:60:94:cd:e0:
00:70:ae:67:45:e6:b7:4b:2c:29:7b:75:0c:fc:4b:
7e:fc:15:f2:4f:2f:ff:93:6e:a6:98:96:e4:79:c2:
ec:04:75:63:65:44:8f:44:f2:96:8e:4d:73:ec:c3:
82:15:f3:e5:f9:65:2e:f4:c4:e1:41:c4:bf:0e:ea:
41:01:8e:98:51:c7:27:33:89:f1:ac:8c:36:28:84:
2f:c5:f1:86:33:20:7c:78:b7:b5:17:2d:e2:02:4a:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E8:11:EA:55:CD:EA:5D:F8:DF:60:C8:32:6B:DF:CA:B9:F7:12:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE660C23D5111F085C7378DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.248.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:fe:43:2e:34:5e:17:0c:bc:9a:27:cd:00:44:88:26:83:20:
8e:cf:bd:e6:7c:71:14:8e:e9:4d:e9:df:95:8d:36:7b:b0:f4:
97:b2:8c:08:69:a8:14:04:5f:01:14:3a:76:55:d0:aa:ed:1b:
5e:78:56:44:9e:9e:74:f7:3e:20:f5:43:31:3e:59:f5:d4:47:
a9:c7:d9:05:49:c1:bc:6a:f0:ac:17:e7:d0:9b:e7:2c:d4:5c:
2a:5a:8a:16:e6:cd:e5:7d:88:42:3a:fd:59:5e:2b:23:c8:92:
42:5a:ed:2b:6f:31:6c:30:5d:50:61:55:c3:8c:0e:05:e3:5c:
80:fa:29:28:67:e4:b3:7e:cb:a9:79:1f:12:d0:55:c5:ab:5f:
d4:83:8d:9d:b8:3c:95:22:10:e6:f8:c6:7c:dd:38:07:0b:b0:
35:54:4c:dc:36:9d:21:2b:5c:be:c0:17:03:67:ac:11:23:cf:
8e:dd:ee:9f:2b:33:43:eb:92:7c:8b:52:9b:49:fa:00:ae:d9:
ea:c0:9d:32:ea:1c:a5:5f:71:70:92:0a:2c:c6:29:d9:d2:4f:
f5:c5:e8:28:12:a1:47:ec:bd:d9:43:62:74:0e:36:14:54:7a:
77:b4:8c:b3:a9:40:6b:38:67:fc:b1:b5:76:30:da:96:2e:02:
f3:cf:a4:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYPRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMwMTIyODM1WhcNMjYwNjE3MTIyODM1WjAYMRYw
FAYDVQQDEw02ODM5YTQ3OC1mMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxQ1D9fzsQs4ifMCN9g7XiQ+ZjeFMTMpu8secQ3T2w9a604X4tb/4JT1E
4877FyVZst55hH8kSlJpXPLM4xtC/SftnS9fHEQgEWUCRROV0xGeYM62kgJ1wFXM
96mUYmBhslEImsHY1LIgs+tL0CKGodfVs09u/RqiMx0V8/HLfbHv7nJMUZwEnS8u
jERh4fQSjtwGdiMClPR4o+hGtY/BfWCUzeAAcK5nRea3Sywpe3UM/Et+/BXyTy//
k26mmJbkecLsBHVjZUSPRPKWjk1z7MOCFfPl+WUu9MThQcS/DupBAY6YUccnM4nx
rIw2KIQvxfGGMyB8eLe1Fy3iAkpilwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI3o
EepVzepd+N9gyDJr38q59xIfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85REU2NjBDMjNENTExMUYwODVDNzM3OEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsH4MA0GCSqGSIb3DQEB
CwUAA4IBAQAr/kMuNF4XDLyaJ80ARIgmgyCOz73mfHEUjulN6d+VjTZ7sPSXsowI
aagUBF8BFDp2VdCq7RteeFZEnp509z4g9UMxPln11Eepx9kFScG8avCsF+fQm+cs
1FwqWooW5s3lfYhCOv1ZXisjyJJCWu0rbzFsMF1QYVXDjA4F41yA+ikoZ+Szfsup
eR8S0FXFq1/Ug42duDyVIhDm+MZ83TgHC7A1VEzcNp0hK1y+wBcDZ6wRI8+O3e6f
KzND65J8i1KbSfoArtnqwJ0y6hylX3FwkgosxinZ0k/1xegoEqFH7L3ZQ2J0DjYU
VHp3tIyzqUBrOGf8sbV2MNqWLgLzz6S5
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:14 2025 by rpki-client