Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A41F98F6370111F0AF24E479DAE4EC9C.roa
File: A41F98F6370111F0AF24E479DAE4EC9C.roa (raw, json)
Hash identifier: TYtDOK/RSFebj7Os9URbGXDkilSKDEXBPzGaXv16o8w=
Subject key identifier: B2:C7:93:66:92:3B:CE:9F:0E:C8:87:78:0C:60:67:E4:4A:D3:67:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A41F98F6370111F0AF24E479DAE4EC9C.roa
Signing time: Thu 22 May 2025 11:41:04 +0000
ROA not before: Thu 22 May 2025 11:40:59 +0000
ROA not after: Sun 29 Jun 2025 11:40:59 +0000
asID: 213495
IP address blocks: 154.222.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 14:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98785 (0x181e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 11:40:59 2025 GMT
Not After : Jun 29 11:40:59 2025 GMT
Subject: CN=682f0d50-6966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:0d:84:70:c8:c7:b7:b5:0a:e1:5f:a9:fe:
d6:6b:f6:6c:43:22:21:f8:5d:49:85:dd:50:a2:02:
c4:14:5a:5b:4c:aa:27:a1:0e:22:21:d7:97:2e:9e:
f2:e6:38:17:dc:e6:d5:ae:e0:3a:a9:b1:b5:41:54:
e2:2e:6a:11:31:c4:ee:59:69:47:1e:30:f5:54:06:
f7:c8:dd:92:5b:2c:9d:db:40:92:9f:86:ab:a7:b0:
3f:c1:47:60:44:d1:05:15:b7:9f:63:0e:6b:9d:f7:
a8:02:6e:e3:74:8b:f7:50:ff:68:f4:71:94:db:a5:
ab:a9:5c:60:76:2a:25:11:be:5f:86:e9:1e:4b:e6:
f6:b5:02:e4:0c:ca:88:32:b5:e0:a4:f4:6f:52:60:
54:5d:11:1d:f5:a4:ae:85:17:06:ef:57:aa:49:ab:
00:a2:b3:e6:83:e4:2c:90:cb:80:31:de:a0:87:fd:
d8:a4:a9:11:2a:36:a2:02:62:e9:e5:74:ea:9b:d8:
9d:71:75:9b:c2:11:18:67:97:d8:4c:4e:33:db:bd:
5e:3f:c0:94:56:94:63:ed:59:48:91:fe:48:ef:0f:
05:5d:74:a8:10:94:2a:a6:35:9b:84:03:19:17:be:
d4:4d:97:c2:5c:bc:6a:04:f8:3a:fc:ba:8f:cb:39:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C7:93:66:92:3B:CE:9F:0E:C8:87:78:0C:60:67:E4:4A:D3:67:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A41F98F6370111F0AF24E479DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ad:67:24:82:a7:b0:7f:29:fa:ef:39:4e:16:26:bb:be:9e:
2b:20:49:ee:b1:06:9f:c7:7d:04:c9:1e:0e:e9:13:58:4e:ea:
ef:7a:ed:6d:11:9a:d6:31:f8:fa:a4:56:c0:61:83:d2:4b:79:
a8:25:95:0c:bf:bc:89:7c:d8:7f:c8:59:d8:b5:f5:a5:b9:34:
29:aa:bd:c7:bb:3d:31:86:52:7f:9f:70:52:68:e9:c9:24:76:
b1:46:31:07:3f:14:be:29:7d:17:ca:58:e7:1b:0e:52:50:bf:
fb:7d:d6:dd:25:8e:29:35:60:0b:2d:ec:7f:68:e2:fe:b8:56:
07:6d:e6:e4:4a:4e:30:e9:70:07:d9:f7:3a:3f:68:71:2e:a5:
3a:ec:1d:b1:d3:1c:55:41:c4:19:93:9c:d8:a2:48:59:ff:07:
a4:87:2d:a1:91:ff:02:c4:e0:01:23:aa:84:49:25:50:8b:12:
60:8c:2b:b8:3b:dd:7a:39:b7:0d:ab:5f:be:07:a6:a8:fb:17:
df:67:3c:fc:b4:38:c5:1f:a0:67:1d:02:99:30:87:f5:1f:ff:
1a:51:db:e4:74:c5:5e:76:1e:1f:a7:fb:c4:13:df:aa:ac:54:
2f:f0:58:06:ca:0d:21:9a:87:72:28:ab:6c:81:80:9f:5d:a9:
ba:73:64:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYHhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIyMTE0MDU5WhcNMjUwNjI5MTE0MDU5WjAYMRYw
FAYDVQQDEw02ODJmMGQ1MC02OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7OwNhHDIx7e1CuFfqf7Wa/ZsQyIh+F1Jhd1QogLEFFpbTKonoQ4iIdeX
Lp7y5jgX3ObVruA6qbG1QVTiLmoRMcTuWWlHHjD1VAb3yN2SWyyd20CSn4arp7A/
wUdgRNEFFbefYw5rnfeoAm7jdIv3UP9o9HGU26WrqVxgdiolEb5fhukeS+b2tQLk
DMqIMrXgpPRvUmBUXREd9aSuhRcG71eqSasAorPmg+QskMuAMd6gh/3YpKkRKjai
AmLp5XTqm9idcXWbwhEYZ5fYTE4z271eP8CUVpRj7VlIkf5I7w8FXXSoEJQqpjWb
hAMZF77UTZfCXLxqBPg6/LqPyzlg6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLLH
k2aSO86fDsiHeAxgZ+RK02dnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNDFGOThGNjM3MDExMUYwQUYyNEU0NzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt6+MA0GCSqGSIb3DQEB
CwUAA4IBAQCKrWckgqewfyn67zlOFia7vp4rIEnusQafx30EyR4O6RNYTurveu1t
EZrWMfj6pFbAYYPSS3moJZUMv7yJfNh/yFnYtfWluTQpqr3Huz0xhlJ/n3BSaOnJ
JHaxRjEHPxS+KX0XyljnGw5SUL/7fdbdJY4pNWALLex/aOL+uFYHbebkSk4w6XAH
2fc6P2hxLqU67B2x0xxVQcQZk5zYokhZ/wekhy2hkf8CxOABI6qESSVQixJgjCu4
O916ObcNq1++B6ao+xffZzz8tDjFH6BnHQKZMIf1H/8aUdvkdMVedh4fp/vEE9+q
rFQv8FgGyg0hmodyKKtsgYCfXam6c2SX
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:19 2025 by rpki-client