Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8F793E36FB11F09C8282D3DAE4EC9C.roa
File: DA8F793E36FB11F09C8282D3DAE4EC9C.roa (raw, json)
Hash identifier: p1Jcn5LXb2wHk6ozkFB2dS2v9tQlCE4uWEFzzK4CgTI=
Subject key identifier: 5F:56:44:BF:0E:34:C1:F5:B6:AA:0C:93:31:17:81:30:6D:F6:22:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8F793E36FB11F09C8282D3DAE4EC9C.roa
Signing time: Thu 22 May 2025 10:59:38 +0000
ROA not before: Thu 22 May 2025 10:59:33 +0000
ROA not after: Wed 09 Jul 2025 10:59:33 +0000
asID: 138915
IP address blocks: 154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.68.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98783 (0x181df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 10:59:33 2025 GMT
Not After : Jul 9 10:59:33 2025 GMT
Subject: CN=682f039a-61f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:02:79:56:68:88:75:42:3e:00:72:bd:3c:
2f:2c:06:14:d5:cd:b1:9c:b8:f5:3b:f3:f7:12:68:
ce:d5:5d:4d:b6:eb:aa:04:09:ab:a8:92:d1:17:65:
70:bc:01:77:01:4a:7e:e4:66:13:6e:95:8e:ae:9f:
60:b8:d1:8f:58:55:31:d7:76:54:ea:82:ad:49:67:
97:30:fb:18:55:24:c0:98:92:1f:57:e7:e9:e3:31:
49:f2:e1:85:f5:ec:77:9c:fc:23:38:be:44:45:00:
bd:18:0e:dc:a9:05:c7:ba:65:89:7d:5a:29:a2:7c:
7a:ea:c0:6c:19:ae:80:2e:c2:58:8d:8b:18:c8:0d:
3c:e8:7f:a7:d6:15:a8:e0:57:e5:21:45:87:05:28:
8f:11:b8:79:93:c2:1d:f0:c2:eb:86:eb:04:79:16:
d7:7f:fa:de:ac:9f:ab:ae:0f:9c:50:9b:2b:f9:23:
aa:6c:a0:b6:30:b1:52:58:db:23:2d:00:2e:cf:71:
9f:de:4b:cb:e1:f8:ab:3d:dc:60:d5:6a:06:f5:99:
5c:29:d3:cd:6a:81:c0:1f:db:9b:41:36:7e:df:96:
c3:61:87:10:31:a8:24:19:d2:58:75:74:b2:f1:37:
d4:ea:02:4d:46:c1:e8:24:9a:cb:63:db:e3:84:ec:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:44:BF:0E:34:C1:F5:B6:AA:0C:93:31:17:81:30:6D:F6:22:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8F793E36FB11F09C8282D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.64.0-154.95.68.255
154.95.70.0-154.95.75.255
154.95.96.0/19
Signature Algorithm: sha256WithRSAEncryption
68:8a:cb:20:87:6e:05:81:cb:c9:46:7f:9b:12:c3:dd:d7:2d:
1c:9a:2f:9c:38:a2:51:cb:56:49:e7:90:81:1c:75:6c:a7:64:
de:3b:38:58:7c:82:dc:9a:f6:ac:c6:e2:87:fc:72:52:24:14:
3e:b3:83:7b:92:78:16:eb:16:3d:7b:81:9b:3e:fc:6b:6b:29:
99:08:e3:54:e1:25:90:c7:fe:69:d7:46:03:c6:fd:2d:7c:41:
5e:53:b8:11:8b:e7:5a:13:24:32:ae:b8:7d:c9:f8:81:b7:e2:
9e:ad:25:8a:77:a6:4e:07:29:44:7c:e0:8d:45:0f:12:a7:0d:
8a:01:9c:a5:5f:b4:e2:9d:1f:d2:ae:05:d7:bf:e6:b8:58:7c:
b5:a3:8a:66:52:c5:a4:24:06:33:e3:9d:06:74:e9:b1:8b:4f:
c2:28:a5:30:e1:8c:f0:dc:9c:38:44:75:dd:f0:3c:8c:6b:08:
ef:84:a9:e7:78:e8:f9:4c:d4:ad:6e:9a:8e:9d:c8:9e:5a:8f:
0b:f5:ba:6a:cd:35:29:0a:d1:f2:cc:c5:88:8e:71:89:cd:92:
89:41:8d:00:eb:6c:70:c0:b7:b8:a6:4d:52:d4:c3:20:f5:b2:
6e:92:62:0a:55:79:19:d2:58:5b:e1:ff:99:dc:c6:54:cc:64:
f1:ae:a2:f2
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAYHfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIyMTA1OTMzWhcNMjUwNzA5MTA1OTMzWjAYMRYw
FAYDVQQDEw02ODJmMDM5YS02MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvuYCeVZoiHVCPgByvTwvLAYU1c2xnLj1O/P3EmjO1V1NtuuqBAmrqJLR
F2VwvAF3AUp+5GYTbpWOrp9guNGPWFUx13ZU6oKtSWeXMPsYVSTAmJIfV+fp4zFJ
8uGF9ex3nPwjOL5ERQC9GA7cqQXHumWJfVoponx66sBsGa6ALsJYjYsYyA086H+n
1hWo4FflIUWHBSiPEbh5k8Id8MLrhusEeRbXf/rerJ+rrg+cUJsr+SOqbKC2MLFS
WNsjLQAuz3Gf3kvL4firPdxg1WoG9ZlcKdPNaoHAH9ubQTZ+35bDYYcQMagkGdJY
dXSy8TfU6gJNRsHoJJrLY9vjhOyGwwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFF9W
RL8ONMH1tqoMkzEXgTBt9iLXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQThGNzkzRTM2RkIxMUYwOUM4MjgyRDNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAaaX0ADBACaX0QwDAME
AZpfRgMEAppfSAMEBZpfYDANBgkqhkiG9w0BAQsFAAOCAQEAaIrLIIduBYHLyUZ/
mxLD3dctHJovnDiiUctWSeeQgRx1bKdk3js4WHyC3Jr2rMbih/xyUiQUPrODe5J4
FusWPXuBmz78a2spmQjjVOElkMf+addGA8b9LXxBXlO4EYvnWhMkMq64fcn4gbfi
nq0linemTgcpRHzgjUUPEqcNigGcpV+04p0f0q4F17/muFh8taOKZlLFpCQGM+Od
BnTpsYtPwiilMOGM8NycOER13fA8jGsI74Sp53jo+UzUrW6ajp3InlqPC/W6as01
KQrR8szFiI5xic2SiUGNAOtscMC3uKZNUtTDIPWybpJiClV5GdJYW+H/mdzGVMxk
8a6i8g==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:22 2025 by rpki-client