Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F34A83237FF11F0850F3CE4DAE4EC9C.roa
File: 9F34A83237FF11F0850F3CE4DAE4EC9C.roa (raw, json)
Hash identifier: WVsvD2fT3MMGaw/DjoW86qRgEz4m+rVcKRvKOjp8YlY=
Subject key identifier: 47:05:E2:6A:CB:3B:90:CA:C3:5E:36:32:F6:04:B3:7B:72:69:70:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018249
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F34A83237FF11F0850F3CE4DAE4EC9C.roa
Signing time: Fri 23 May 2025 17:59:08 +0000
ROA not before: Fri 23 May 2025 17:59:03 +0000
ROA not after: Thu 03 Jul 2025 17:59:03 +0000
asID: 203020
IP address blocks: 154.205.186.0/24 maxlen: 24
154.223.137.0/24 maxlen: 24
154.223.138.0/24 maxlen: 24
154.223.139.0/24 maxlen: 24
154.223.140.0/24 maxlen: 24
154.223.143.0/24 maxlen: 24
154.223.160.0/24 maxlen: 24
154.223.161.0/24 maxlen: 24
154.223.186.0/24 maxlen: 24
154.223.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98889 (0x18249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:59:03 2025 GMT
Not After : Jul 3 17:59:03 2025 GMT
Subject: CN=6830b76c-586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:c5:b1:8b:1c:54:08:53:2c:05:31:19:87:
a5:ac:3a:47:5c:3f:dc:17:db:70:88:2e:84:3b:4f:
a6:39:fc:b2:91:80:49:00:ea:88:22:43:92:66:75:
93:c7:44:49:71:2e:9a:63:41:9b:f8:c8:e6:11:7e:
5e:00:a2:17:38:7c:f0:58:e0:b6:bb:e8:88:48:9f:
72:55:51:4b:45:2a:73:db:08:a8:3c:ad:16:37:92:
b5:06:76:43:b8:54:59:f5:56:8d:a3:15:eb:87:23:
f0:57:cf:5c:54:de:c6:60:3c:6e:17:ef:b2:c1:a4:
51:40:01:cd:5b:c6:81:44:70:8f:91:17:2a:12:9e:
ac:13:e7:0c:7b:a5:84:b3:dd:db:be:25:3a:20:c4:
1f:3e:44:f8:3f:ed:32:73:8a:00:60:46:4c:72:d1:
8b:38:d6:e6:ae:94:06:f3:da:e6:30:6f:1e:55:58:
6e:50:a8:0c:64:da:a4:a5:c9:93:0f:b7:05:16:e9:
24:a9:71:88:e3:0e:bb:f8:5c:64:5c:a7:16:bc:b5:
fa:a7:8d:22:ee:e2:85:0f:51:62:fe:b4:c3:33:f1:
d7:44:a4:de:00:57:24:dd:46:f2:44:f7:aa:82:ef:
fc:64:da:a0:76:f1:0c:a5:e1:9c:2e:34:a5:9e:cf:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:E2:6A:CB:3B:90:CA:C3:5E:36:32:F6:04:B3:7B:72:69:70:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F34A83237FF11F0850F3CE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.186.0/24
154.223.137.0-154.223.140.255
154.223.143.0/24
154.223.160.0/23
154.223.186.0/23
Signature Algorithm: sha256WithRSAEncryption
be:8d:7a:4b:06:63:f9:3c:5d:e5:43:36:de:4e:f4:35:32:48:
6b:33:f8:29:7d:bc:24:85:de:17:db:ba:4d:98:2e:0f:bf:be:
27:f1:d7:7a:22:f2:8d:34:c0:4b:62:cb:bb:a2:8d:11:4f:b3:
20:aa:e5:57:2f:b0:f0:68:df:58:90:ee:7c:fa:f1:a3:c5:d0:
c0:38:3f:02:41:ae:3d:29:14:e1:21:c0:85:dd:f1:9c:19:6f:
3c:eb:a2:c3:92:50:7b:47:e7:ac:02:62:96:19:79:a5:bc:a9:
fd:0c:a5:74:cb:47:7f:60:61:db:53:ec:d3:44:08:6e:24:0f:
42:3f:92:00:67:c2:92:ab:04:1f:4a:7b:bf:be:c7:cd:49:38:
85:e4:16:04:f3:f3:30:cf:01:60:3e:3e:ec:84:e9:8a:79:55:
a2:66:d7:4e:f5:db:82:92:fa:25:2a:2a:44:e4:12:48:9d:1b:
61:64:b3:84:bc:7e:25:8c:8e:c7:dc:19:0e:31:a2:5d:34:6c:
6e:1c:80:93:63:b7:ca:4d:82:dc:ec:fc:72:34:9c:bf:1d:77:
ee:86:14:8c:3d:87:62:54:e7:c5:02:dc:3b:ac:90:0f:d4:9d:
74:98:22:fc:e8:1c:9c:5d:51:f8:fd:2d:af:ae:7e:c6:fb:21:
a3:50:c9:2d
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAYJJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMTc1OTAzWhcNMjUwNzAzMTc1OTAzWjAYMRYw
FAYDVQQDEw02ODMwYjc2Yy01ODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApqvFsYscVAhTLAUxGYelrDpHXD/cF9twiC6EO0+mOfyykYBJAOqIIkOS
ZnWTx0RJcS6aY0Gb+MjmEX5eAKIXOHzwWOC2u+iISJ9yVVFLRSpz2wioPK0WN5K1
BnZDuFRZ9VaNoxXrhyPwV89cVN7GYDxuF++ywaRRQAHNW8aBRHCPkRcqEp6sE+cM
e6WEs93bviU6IMQfPkT4P+0yc4oAYEZMctGLONbmrpQG89rmMG8eVVhuUKgMZNqk
pcmTD7cFFukkqXGI4w67+FxkXKcWvLX6p40i7uKFD1Fi/rTDM/HXRKTeAFck3Uby
RPeqgu/8ZNqgdvEMpeGcLjSlns8/hwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFEcF
4mrLO5DKw142MvYEs3tyaXBfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RjM0QTgzMjM3RkYxMUYwODUwRjNDRTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAms26MAwDBACa34kDBACa
34wDBACa348DBAGa36ADBAGa37owDQYJKoZIhvcNAQELBQADggEBAL6NeksGY/k8
XeVDNt5O9DUySGsz+Cl9vCSF3hfbuk2YLg+/vifx13oi8o00wEtiy7uijRFPsyCq
5VcvsPBo31iQ7nz68aPF0MA4PwJBrj0pFOEhwIXd8ZwZbzzrosOSUHtH56wCYpYZ
eaW8qf0MpXTLR39gYdtT7NNECG4kD0I/kgBnwpKrBB9Ke7++x81JOIXkFgTz8zDP
AWA+PuyE6Yp5VaJm107124KS+iUqKkTkEkidG2Fks4S8fiWMjsfcGQ4xol00bG4c
gJNjt8pNgtzs/HI0nL8dd+6GFIw9h2JU58UC3DuskA/UnXSYIvzoHJxdUfj9La+u
fsb7IaNQyS0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:41 2025 by rpki-client