Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6013984332711F08621A6B5DAE4EC9C.roa
File: D6013984332711F08621A6B5DAE4EC9C.roa (raw, json)
Hash identifier: zX3i1HaT0km/di3/C9YMLqsbluXdiw7A3+TKvHX7TO4=
Subject key identifier: 2B:B8:0F:C3:A3:DC:11:83:88:5D:76:3B:99:AA:6B:79:2A:8E:58:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01813A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6013984332711F08621A6B5DAE4EC9C.roa
Signing time: Sat 17 May 2025 14:04:24 +0000
ROA not before: Sat 17 May 2025 14:04:19 +0000
ROA not after: Tue 16 Jun 2026 14:04:19 +0000
asID: 984
IP address blocks: 154.193.0.0/24 maxlen: 24
154.193.1.0/24 maxlen: 24
154.193.2.0/24 maxlen: 24
154.193.18.0/24 maxlen: 24
154.193.19.0/24 maxlen: 24
154.193.20.0/24 maxlen: 24
154.193.21.0/24 maxlen: 24
154.193.22.0/24 maxlen: 24
154.193.23.0/24 maxlen: 24
154.193.24.0/24 maxlen: 24
154.193.25.0/24 maxlen: 24
154.193.26.0/24 maxlen: 24
154.193.27.0/24 maxlen: 24
154.193.28.0/24 maxlen: 24
154.193.29.0/24 maxlen: 24
154.193.30.0/24 maxlen: 24
154.193.31.0/24 maxlen: 24
154.193.32.0/24 maxlen: 24
154.193.33.0/24 maxlen: 24
154.193.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98618 (0x1813a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 14:04:19 2025 GMT
Not After : Jun 16 14:04:19 2026 GMT
Subject: CN=68289768-2cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:48:c7:de:75:72:01:a8:e6:69:0f:55:45:
ae:48:e6:0e:99:f5:08:91:61:ab:90:20:62:c4:68:
20:2d:ca:26:13:19:45:b6:89:18:29:cc:63:4a:00:
a2:4b:79:98:15:cd:8c:13:25:ca:db:7b:e1:04:3f:
ae:b8:6e:a4:95:86:a1:4a:b2:75:1a:b4:90:6c:e0:
34:ab:be:fd:a3:98:d9:76:08:e6:09:1d:c7:52:37:
ef:55:74:9a:f0:c4:01:9e:56:b3:38:36:f7:b2:1d:
f2:90:5a:fd:d2:07:c7:36:74:3f:c1:ad:ae:70:9e:
a3:19:f5:d4:60:26:a0:ac:10:e9:de:d5:55:b2:0a:
a9:fa:5b:32:f7:42:ea:ff:59:bf:1e:38:05:6a:95:
c5:04:b3:16:a4:37:fc:ef:c4:37:5c:82:14:61:23:
5b:c2:76:5d:85:0a:b2:ff:9e:59:c2:65:fe:af:2c:
3e:21:e5:71:c8:5e:64:a4:f7:21:ac:c6:ee:f2:6c:
e2:6f:46:23:df:1b:da:a2:c0:23:38:be:44:aa:13:
70:6f:cc:61:62:47:69:8c:57:4b:bb:96:4c:0f:93:
1e:10:aa:c9:12:a4:26:b4:63:f2:18:f7:91:f2:0e:
9c:45:cd:e9:a1:73:04:7c:83:ff:23:ec:86:24:1a:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:0F:C3:A3:DC:11:83:88:5D:76:3B:99:AA:6B:79:2A:8E:58:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6013984332711F08621A6B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.0.0-154.193.2.255
154.193.18.0-154.193.34.255
Signature Algorithm: sha256WithRSAEncryption
59:7a:6a:68:7a:ed:d5:4b:2f:76:c6:8f:f3:00:88:2a:05:7f:
b2:d5:46:c6:0e:54:8b:d3:4a:2a:d5:db:79:e3:8b:a0:ef:fc:
02:54:cd:ec:ec:93:5e:0c:6a:07:00:b8:73:34:f4:57:e6:78:
da:32:34:20:1b:3d:5a:0e:80:98:df:a5:81:4c:47:3c:07:39:
4c:28:16:ed:16:01:11:64:a4:0e:28:0d:15:bc:65:e8:9c:60:
ac:01:72:b7:34:b3:1b:80:19:c9:f8:94:e3:a5:36:1f:a7:e2:
23:d8:ea:c0:ef:65:38:8f:ce:07:70:2e:dc:c0:91:d2:7c:c4:
c1:fe:0b:67:24:ea:4e:0e:46:b0:97:04:7d:6c:35:c3:03:74:
67:53:b0:0d:f7:cf:11:f0:c7:58:fa:03:6a:f2:f2:43:03:c4:
a5:04:6b:d0:ad:b9:23:05:50:0e:5b:a4:fe:97:26:3f:bf:b5:
d8:03:72:96:c1:23:c4:d1:70:cb:53:69:27:2b:a2:8c:9a:8f:
c4:21:8a:ef:16:c6:7b:ff:ad:4b:6c:c9:ce:f9:89:09:96:99:
8c:7e:6f:a5:d1:ad:66:0e:14:68:f4:46:f7:0b:60:df:1d:07:
eb:21:f0:1f:6a:08:4a:31:54:c9:9a:d3:6e:40:91:4f:b0:18:
13:e2:b2:86
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAYE6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE3MTQwNDE5WhcNMjYwNjE2MTQwNDE5WjAYMRYw
FAYDVQQDEw02ODI4OTc2OC0yY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApGRIx951cgGo5mkPVUWuSOYOmfUIkWGrkCBixGggLcomExlFtokYKcxj
SgCiS3mYFc2MEyXK23vhBD+uuG6klYahSrJ1GrSQbOA0q779o5jZdgjmCR3HUjfv
VXSa8MQBnlazODb3sh3ykFr90gfHNnQ/wa2ucJ6jGfXUYCagrBDp3tVVsgqp+lsy
90Lq/1m/HjgFapXFBLMWpDf878Q3XIIUYSNbwnZdhQqy/55ZwmX+ryw+IeVxyF5k
pPchrMbu8mzib0Yj3xvaosAjOL5EqhNwb8xhYkdpjFdLu5ZMD5MeEKrJEqQmtGPy
GPeR8g6cRc3poXMEfIP/I+yGJBr9mwIDAQABo4ICujCCArYwHQYDVR0OBBYEFCu4
D8Oj3BGDiF12O5mqa3kqjlipMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjAxMzk4NDMzMjcxMUYwODYyMUE2QjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDAwCawQMEAJrBAjAMAwQB
msESAwQAmsEiMA0GCSqGSIb3DQEBCwUAA4IBAQBZempoeu3VSy92xo/zAIgqBX+y
1UbGDlSL00oq1dt544ug7/wCVM3s7JNeDGoHALhzNPRX5njaMjQgGz1aDoCY36WB
TEc8BzlMKBbtFgERZKQOKA0VvGXonGCsAXK3NLMbgBnJ+JTjpTYfp+Ij2OrA72U4
j84HcC7cwJHSfMTB/gtnJOpODkawlwR9bDXDA3RnU7AN988R8MdY+gNq8vJDA8Sl
BGvQrbkjBVAOW6T+lyY/v7XYA3KWwSPE0XDLU2knK6KMmo/EIYrvFsZ7/61LbMnO
+YkJlpmMfm+l0a1mDhRo9Eb3C2DfHQfrIfAfaghKMVTJmtNuQJFPsBgT4rKG
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:23 2025 by rpki-client