Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A04A3F8A3E2A11F08CCC8690DAE4EC9C.roa
File: A04A3F8A3E2A11F08CCC8690DAE4EC9C.roa (raw, json)
Hash identifier: +1nN2SN2RDJir4ureVsglux7buOwLkFAmWxHNDGK9EA=
Subject key identifier: 75:B5:A6:AD:A8:36:5B:DA:9D:A3:04:4C:FF:91:27:02:25:8D:5A:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018414
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A04A3F8A3E2A11F08CCC8690DAE4EC9C.roa
Signing time: Sat 31 May 2025 14:22:05 +0000
ROA not before: Sat 31 May 2025 14:22:00 +0000
ROA not after: Mon 07 Jul 2025 14:22:00 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99348 (0x18414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 14:22:00 2025 GMT
Not After : Jul 7 14:22:00 2025 GMT
Subject: CN=683b108d-0458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:86:fa:ae:8d:26:ea:3e:ae:38:60:fd:2e:
5a:f1:7c:f4:02:56:4c:3b:b4:08:ba:15:72:79:49:
29:c0:63:6b:39:33:f3:7c:dc:d5:d3:18:d4:de:b4:
3b:15:d7:e8:e6:b9:fb:d9:72:14:99:14:34:67:d2:
4e:ba:13:c3:dc:55:c1:b1:59:e0:21:d0:55:9d:91:
22:11:3a:e6:15:43:9e:8a:28:83:5c:b2:ea:e4:1c:
07:97:6c:9e:d5:44:50:46:1a:68:2c:bb:75:21:89:
99:1e:14:5b:8f:0c:ad:88:69:51:c9:b9:45:46:7e:
3d:c4:44:a0:ed:5d:ef:07:81:8f:00:06:57:09:c0:
47:97:94:3a:b9:6a:61:76:4e:22:a4:15:67:2a:71:
9e:87:ad:b2:5a:cc:a2:a5:6f:52:96:cb:ba:7e:c9:
a4:94:e0:8a:c1:b6:3b:fe:81:7c:7c:24:66:1a:33:
26:e0:4e:bf:38:31:6f:0f:08:f5:03:fa:76:62:9b:
48:6e:b8:3b:d1:7d:04:ff:ca:25:1a:3c:f6:ca:9f:
58:38:5a:2c:1b:32:3a:31:82:90:d4:e1:26:d4:14:
1a:1b:08:ae:ef:a9:a8:43:bd:50:59:09:56:c5:7e:
36:d6:39:da:8d:7d:39:de:7b:e2:79:21:9d:f6:b5:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:A6:AD:A8:36:5B:DA:9D:A3:04:4C:FF:91:27:02:25:8D:5A:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A04A3F8A3E2A11F08CCC8690DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
21:30:c0:0f:fc:29:c0:65:a2:8f:66:f9:0d:61:db:f6:86:8f:
f5:af:e5:5e:86:68:4c:15:ce:f5:d8:0f:9e:6f:8d:b6:01:a0:
89:06:49:8a:67:cf:5f:9d:e2:c3:56:0f:66:d0:b0:67:df:66:
ac:7b:e7:1c:5c:20:d4:48:41:ad:58:24:73:96:bd:84:c3:51:
dd:c1:93:67:fc:ea:78:13:4d:b1:2d:3e:4c:eb:10:12:7d:e0:
04:e5:60:7e:98:cc:e1:d7:c6:6a:09:48:92:ba:e6:82:de:bb:
eb:f5:9d:e3:85:af:ef:d7:48:b5:19:67:d8:5a:44:c1:47:50:
08:51:37:6d:25:60:0d:ae:1d:02:23:84:aa:44:a0:eb:2a:3c:
c3:29:69:42:51:9f:a4:c0:ac:5f:79:1e:c5:fb:71:f4:84:a4:
5a:6c:f4:f2:b3:67:5b:da:fd:4e:f5:80:96:3c:5a:fb:ad:61:
7c:c9:3d:9a:a1:ea:3b:4d:ae:34:ff:fe:51:fe:9f:3e:21:14:
79:0a:39:d7:1b:68:88:19:a1:de:2a:29:88:a1:dc:1f:0d:67:
1a:61:47:96:e7:c8:32:de:27:86:a5:64:c6:dd:98:81:54:3a:
21:c2:23:4b:ce:6e:21:d8:ae:b4:53:b1:b7:76:a0:f8:d8:81:
3c:6d:43:3e
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAYQUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMxMTQyMjAwWhcNMjUwNzA3MTQyMjAwWjAYMRYw
FAYDVQQDEw02ODNiMTA4ZC0wNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnj+G+q6NJuo+rjhg/S5a8Xz0AlZMO7QIuhVyeUkpwGNrOTPzfNzV0xjU
3rQ7Fdfo5rn72XIUmRQ0Z9JOuhPD3FXBsVngIdBVnZEiETrmFUOeiiiDXLLq5BwH
l2ye1URQRhpoLLt1IYmZHhRbjwytiGlRyblFRn49xESg7V3vB4GPAAZXCcBHl5Q6
uWphdk4ipBVnKnGeh62yWsyipW9Slsu6fsmklOCKwbY7/oF8fCRmGjMm4E6/ODFv
Dwj1A/p2YptIbrg70X0E/8olGjz2yp9YOFosGzI6MYKQ1OEm1BQaGwiu76moQ71Q
WQlWxX421jnajX053nvieSGd9rU45QIDAQABo4ICyzCCAscwHQYDVR0OBBYEFHW1
pq2oNlvanaMETP+RJwIljVqZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMDRBM0Y4QTNFMkExMUYwOENDQzg2OTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmswAMAwDBAKa0AwDBAWa
0AADBACa1IADBACa1wADBACa2gADBACa3QAwDQYJKoZIhvcNAQELBQADggEBACEw
wA/8KcBloo9m+Q1h2/aGj/Wv5V6GaEwVzvXYD55vjbYBoIkGSYpnz1+d4sNWD2bQ
sGffZqx75xxcINRIQa1YJHOWvYTDUd3Bk2f86ngTTbEtPkzrEBJ94ATlYH6YzOHX
xmoJSJK65oLeu+v1neOFr+/XSLUZZ9haRMFHUAhRN20lYA2uHQIjhKpEoOsqPMMp
aUJRn6TArF95HsX7cfSEpFps9PKzZ1va/U71gJY8WvutYXzJPZqh6jtNrjT//lH+
nz4hFHkKOdcbaIgZod4qKYih3B8NZxphR5bnyDLeJ4alZMbdmIFUOiHCI0vObiHY
rrRTsbd2oPjYgTxtQz4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:00 2025 by rpki-client