Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01583DC37E211F0A68987AEDAE4EC9C.roa
File: B01583DC37E211F0A68987AEDAE4EC9C.roa (raw, json)
Hash identifier: EbyKf7RCxtcO5vGnbgAyas53tmcvDxbPs/sW0fXTW3g=
Subject key identifier: 2F:CC:C3:98:45:2F:6B:42:6A:7A:60:46:88:5D:BF:0D:8F:B5:27:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01583DC37E211F0A68987AEDAE4EC9C.roa
Signing time: Fri 23 May 2025 14:32:01 +0000
ROA not before: Fri 23 May 2025 14:31:56 +0000
ROA not after: Sun 29 Jun 2025 14:31:56 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
154.200.33.0/24 maxlen: 24
154.200.35.0/24 maxlen: 24
154.200.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98839 (0x18217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 14:31:56 2025 GMT
Not After : Jun 29 14:31:56 2025 GMT
Subject: CN=683086e1-5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:a5:32:95:16:52:97:16:b5:31:85:bb:34:
e7:90:a1:2a:40:48:e8:48:bb:d5:ae:ec:50:a8:ab:
66:0a:ca:f6:a6:25:c9:0e:25:60:7e:19:7b:b4:e3:
37:f5:2b:98:b0:15:a6:de:10:ed:af:54:d0:4b:77:
d0:3d:3c:d6:f6:6c:2a:5e:64:54:4c:a8:13:27:d8:
7d:5c:83:f2:87:56:c3:9e:db:e0:74:25:f0:f6:e4:
c1:a2:22:5a:a0:eb:5b:c4:eb:b2:9a:9f:f0:2a:e2:
5c:c7:18:01:fc:b1:c2:18:88:4e:f0:e0:42:24:2d:
dc:37:50:9d:25:bb:fa:7b:40:25:ac:09:46:d6:c2:
fc:37:16:13:2d:94:d0:12:ab:a1:d7:8a:05:3f:74:
f8:a2:e4:19:08:13:ed:28:b8:29:d2:d5:a5:a2:63:
c2:33:32:5e:7b:5e:b2:62:40:b4:9f:f1:2e:26:25:
f3:c0:4c:f3:f0:04:5a:73:f3:e9:01:f7:bb:ba:92:
10:0e:04:fd:15:26:c9:1c:5a:e3:ed:56:4f:bc:f7:
33:07:f9:b5:20:7e:b2:9d:98:b4:03:19:3e:8e:71:
6c:bc:6d:18:93:d4:49:61:e0:36:5d:d1:af:bb:fe:
69:56:89:8c:05:50:57:e5:49:be:20:3c:36:44:7f:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:C3:98:45:2F:6B:42:6A:7A:60:46:88:5D:BF:0D:8F:B5:27:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01583DC37E211F0A68987AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/23
154.200.35.0-154.200.36.255
Signature Algorithm: sha256WithRSAEncryption
11:b1:52:b3:6f:ec:d1:11:06:cc:3f:91:b4:f0:8d:4d:bd:ec:
bc:bf:a7:f6:29:b6:a8:0b:ec:b2:ea:14:80:81:d3:e8:13:a5:
cc:4c:dd:19:42:68:bd:73:81:69:2b:b9:e7:a2:41:2b:de:2a:
53:39:d0:f2:32:b7:08:ac:9e:9b:63:7c:ee:bc:f7:13:99:2e:
cd:da:65:de:17:96:fb:23:e7:7d:d0:9c:c9:45:68:ae:22:9d:
74:2b:24:cc:8c:ed:d3:f6:12:ac:2e:b4:2b:b5:f8:4e:fd:d1:
04:49:a2:55:e7:18:7b:31:c4:16:0e:ff:8f:cd:ac:bc:aa:15:
63:da:26:67:f7:4b:fa:1e:1b:70:89:af:e4:32:4b:3d:db:59:
39:bc:84:39:4d:3f:69:ed:2a:52:e2:30:85:5e:14:22:94:40:
6e:8f:a9:54:b4:0c:05:62:f3:f0:a8:7d:f3:b5:cd:c7:06:12:
a2:69:f3:35:f0:0c:42:4c:37:25:40:af:76:fa:45:26:e9:cf:
3a:63:b6:cf:54:17:22:6c:e3:31:85:b0:ce:bd:ac:53:06:a0:
e9:25:d6:51:24:24:80:57:0c:5d:56:49:fe:5c:78:60:2e:c9:
46:db:b5:34:54:ce:74:03:fd:af:cc:69:55:10:67:0c:9f:f6:
d4:fd:09:da
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAYIXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMTQzMTU2WhcNMjUwNjI5MTQzMTU2WjAYMRYw
FAYDVQQDEw02ODMwODZlMS01NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzSOlMpUWUpcWtTGFuzTnkKEqQEjoSLvVruxQqKtmCsr2piXJDiVgfhl7
tOM39SuYsBWm3hDtr1TQS3fQPTzW9mwqXmRUTKgTJ9h9XIPyh1bDntvgdCXw9uTB
oiJaoOtbxOuymp/wKuJcxxgB/LHCGIhO8OBCJC3cN1CdJbv6e0AlrAlG1sL8NxYT
LZTQEquh14oFP3T4ouQZCBPtKLgp0tWlomPCMzJee16yYkC0n/EuJiXzwEzz8ARa
c/PpAfe7upIQDgT9FSbJHFrj7VZPvPczB/m1IH6ynZi0Axk+jnFsvG0Yk9RJYeA2
XdGvu/5pVomMBVBX5Um+IDw2RH9FWQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFC/M
w5hFL2tCanpgRohdvw2PtSesMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMDE1ODNEQzM3RTIxMUYwQTY4OTg3QUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBmsggMAwDBACayCMDBACa
yCQwDQYJKoZIhvcNAQELBQADggEBABGxUrNv7NERBsw/kbTwjU297Ly/p/YptqgL
7LLqFICB0+gTpcxM3RlCaL1zgWkrueeiQSveKlM50PIytwisnptjfO689xOZLs3a
Zd4Xlvsj533QnMlFaK4inXQrJMyM7dP2EqwutCu1+E790QRJolXnGHsxxBYO/4/N
rLyqFWPaJmf3S/oeG3CJr+QySz3bWTm8hDlNP2ntKlLiMIVeFCKUQG6PqVS0DAVi
8/CoffO1zccGEqJp8zXwDEJMNyVAr3b6RSbpzzpjts9UFyJs4zGFsM69rFMGoOkl
1lEkJIBXDF1WSf5ceGAuyUbbtTRUznQD/a/MaVUQZwyf9tT9Cdo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:01:23 2025 by rpki-client