Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F89952C63BC211F0AA513EECDAE4EC9C.roa
File: F89952C63BC211F0AA513EECDAE4EC9C.roa (raw, json)
Hash identifier: GrzPcKa7UJTokiM2YXl3vFSuxPQBrkiZPsZnEmIYJCs=
Subject key identifier: B5:9B:FD:8E:1E:6F:CB:2E:37:85:0E:3C:7C:22:52:B9:FD:15:ED:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018370
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F89952C63BC211F0AA513EECDAE4EC9C.roa
Signing time: Wed 28 May 2025 12:55:03 +0000
ROA not before: Wed 28 May 2025 12:54:58 +0000
ROA not after: Sun 06 Jul 2025 12:54:58 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.218.31.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99184 (0x18370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 12:54:58 2025 GMT
Not After : Jul 6 12:54:58 2025 GMT
Subject: CN=683707a7-254a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:19:e1:1e:ad:3e:ba:16:c5:2b:a5:b9:e3:
42:1e:1f:48:4f:59:ba:24:9b:49:d0:83:d2:5e:5d:
90:a7:01:95:f9:44:10:44:4a:c7:ac:06:06:d3:77:
e5:f5:22:d3:9a:9e:6d:0e:1c:13:99:20:80:f4:7e:
67:b5:42:a6:07:33:bd:d5:39:22:b3:ca:7a:d3:d0:
ac:64:b4:2f:7e:01:1c:ef:35:45:42:5b:bd:3d:58:
9a:64:7a:6b:f6:10:03:03:1a:b0:07:77:80:d0:89:
89:99:27:ed:24:1e:87:f8:8c:09:17:ec:a8:9f:13:
cd:89:e1:06:f7:70:c3:63:0d:ed:bf:7b:3e:bc:e9:
61:b0:e0:98:eb:67:29:c7:4b:51:37:48:c4:75:2f:
dd:91:6e:a8:67:82:37:6f:c2:00:13:89:78:8b:e7:
b3:fc:64:73:f7:b7:f9:a7:8b:1f:3d:f7:59:e8:30:
8c:39:30:7d:e6:93:26:ed:a5:c4:42:f2:a7:57:96:
6b:31:09:9a:7f:f1:50:a2:c7:0f:be:4f:2a:dc:fa:
0c:6f:e4:b4:9c:9c:08:36:95:54:74:eb:c7:9d:16:
a5:37:7c:8c:eb:e3:4c:66:ef:c6:60:6f:7b:ee:5f:
c6:5e:6f:f2:78:df:ab:57:9e:ab:98:17:e2:f2:47:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:FD:8E:1E:6F:CB:2E:37:85:0E:3C:7C:22:52:B9:FD:15:ED:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F89952C63BC211F0AA513EECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.27.255
154.218.31.0/24
154.221.50.0/23
154.222.200.0-154.222.206.255
Signature Algorithm: sha256WithRSAEncryption
47:fd:ca:67:6e:10:72:d4:e9:df:07:a9:07:67:e6:f9:96:3b:
c3:d3:5b:84:2a:a3:ab:d8:ba:51:3c:db:8a:0d:b8:30:de:f4:
3f:f7:0d:85:71:62:c5:be:dc:03:e9:02:ed:2b:51:88:b5:ef:
8e:35:1d:ea:53:9a:ae:7c:aa:8b:38:99:a6:e0:48:34:90:79:
e8:bc:2b:3a:6c:12:b3:c6:10:20:04:34:23:4f:a6:af:49:5b:
db:8a:65:f9:4c:6e:ea:ea:9c:9a:e2:cd:6a:0a:d8:a9:a9:4c:
d9:a0:29:46:f7:80:76:de:1c:40:d7:9f:3c:b2:2f:f5:15:2f:
e5:b1:a7:6d:99:66:a8:a1:70:89:90:49:46:67:75:1f:97:aa:
c4:ef:d0:04:45:c2:92:c8:04:a9:c3:05:10:1c:01:af:7d:21:
2a:9f:e9:44:b9:a2:5d:3e:81:fc:b5:67:01:67:23:9a:e4:9a:
69:9d:fd:88:d0:f5:1e:d9:69:59:a0:91:34:7b:7b:b1:de:62:
2a:bd:3a:27:05:9b:49:18:0c:ca:74:17:19:d2:7b:9d:3f:2b:
e5:ae:ec:d5:e8:ce:a3:db:d4:cf:22:34:5f:db:54:6a:ef:55:
cd:af:45:39:b6:4d:3c:cb:15:da:31:bd:57:29:ba:ce:80:80:
50:97:0b:ae
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAYNwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI4MTI1NDU4WhcNMjUwNzA2MTI1NDU4WjAYMRYw
FAYDVQQDEw02ODM3MDdhNy0yNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3nwZ4R6tProWxSulueNCHh9IT1m6JJtJ0IPSXl2QpwGV+UQQRErHrAYG
03fl9SLTmp5tDhwTmSCA9H5ntUKmBzO91Tkis8p609CsZLQvfgEc7zVFQlu9PVia
ZHpr9hADAxqwB3eA0ImJmSftJB6H+IwJF+yonxPNieEG93DDYw3tv3s+vOlhsOCY
62cpx0tRN0jEdS/dkW6oZ4I3b8IAE4l4i+ez/GRz97f5p4sfPfdZ6DCMOTB95pMm
7aXEQvKnV5ZrMQmaf/FQoscPvk8q3PoMb+S0nJwINpVUdOvHnRalN3yM6+NMZu/G
YG977l/GXm/yeN+rV56rmBfi8kdO/QIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFLWb
/Y4eb8suN4UOPHwiUrn9Fe1VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODk5NTJDNjNCQzIxMUYwQUE1MTNFRUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACa2hkDBAKa2hgDBACa
2h8DBAGa3TIwDAMEA5reyAMEAJrezjANBgkqhkiG9w0BAQsFAAOCAQEAR/3KZ24Q
ctTp3wepB2fm+ZY7w9NbhCqjq9i6UTzbig24MN70P/cNhXFixb7cA+kC7StRiLXv
jjUd6lOarnyqiziZpuBINJB56LwrOmwSs8YQIAQ0I0+mr0lb24pl+Uxu6uqcmuLN
agrYqalM2aApRveAdt4cQNefPLIv9RUv5bGnbZlmqKFwiZBJRmd1H5eqxO/QBEXC
ksgEqcMFEBwBr30hKp/pRLmiXT6B/LVnAWcjmuSaaZ39iND1HtlpWaCRNHt7sd5i
Kr06JwWbSRgMynQXGdJ7nT8r5a7s1ejOo9vUzyI0X9tUau9Vza9FObZNPMsV2jG9
Vym6zoCAUJcLrg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:04:21 2025 by rpki-client