Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F005CC3ADF11F0B59384ABDAE4EC9C.roa
File: F9F005CC3ADF11F0B59384ABDAE4EC9C.roa (raw, json)
Hash identifier: lOGRkxzZy+j9eb5+x5fD0e0kVRkFOcTdGZYlDldR558=
Subject key identifier: 1F:81:4A:99:8C:56:EB:65:BB:91:76:59:C4:3D:B5:1E:4F:A8:79:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01830B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F005CC3ADF11F0B59384ABDAE4EC9C.roa
Signing time: Tue 27 May 2025 09:50:10 +0000
ROA not before: Tue 27 May 2025 09:50:05 +0000
ROA not after: Sun 22 Jun 2025 09:50:05 +0000
asID: 9304
IP address blocks: 154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99083 (0x1830b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:50:05 2025 GMT
Not After : Jun 22 09:50:05 2025 GMT
Subject: CN=68358ad2-4c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:c3:e2:22:73:3a:e4:d4:e7:21:8d:3e:02:
83:32:2b:33:c1:78:90:4c:46:d0:99:c4:43:33:18:
33:5f:82:8c:7f:32:0f:b3:6e:df:dd:8b:c7:b7:95:
50:2f:db:5a:86:bd:5f:5f:55:bb:6b:10:7f:90:19:
21:1d:53:b9:3f:80:91:1c:da:3a:2b:91:13:d6:af:
ea:31:4f:a4:98:a3:e1:88:7a:a9:02:94:b1:78:02:
8e:73:ce:fa:31:79:69:42:0e:d7:e5:5b:17:f5:af:
48:9c:56:e7:74:d3:78:0e:6f:95:a2:d3:8e:f1:43:
c7:ba:d1:66:e2:cc:85:76:a1:c0:15:70:ac:77:77:
54:2e:5a:74:21:49:f7:6e:3a:e6:93:e9:78:70:f0:
56:36:73:86:df:25:e9:3d:c5:1c:db:a6:4c:ca:bb:
7b:6c:b9:4d:b6:eb:62:b5:3d:79:d3:08:14:89:b1:
c9:58:50:c4:db:d3:30:b5:de:0c:32:59:77:ac:82:
f6:8b:40:54:81:02:11:5b:a1:98:46:8b:ea:34:9a:
0c:9a:5d:d4:75:e5:5b:ac:a6:5c:15:7b:98:33:fb:
2b:58:15:41:ec:9e:a0:af:f8:82:3d:c0:c5:52:bb:
30:76:2f:60:42:b0:88:e0:86:a9:8c:58:50:67:f4:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:4A:99:8C:56:EB:65:BB:91:76:59:C4:3D:B5:1E:4F:A8:79:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F005CC3ADF11F0B59384ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:f8:36:91:66:19:1e:1e:a8:44:d6:f1:bb:b2:aa:24:d0:d7:
26:85:aa:6e:17:1d:44:fc:59:17:ec:f0:1b:51:21:ec:7b:f2:
97:fb:57:a9:d6:ba:49:51:75:5f:3c:7f:71:5a:8c:ad:08:60:
79:32:9f:91:f8:20:f5:d0:30:64:ac:f0:3c:72:62:a4:fe:11:
4a:a3:f3:aa:ce:9d:a4:c2:e2:d0:3a:8e:0a:54:ea:9e:bc:f8:
24:82:44:ba:d5:dc:27:51:0a:a9:da:c9:34:d6:4f:f1:ee:63:
97:fd:a6:1f:a0:72:8d:38:5d:e8:27:b3:a5:5d:a6:3b:dc:b7:
f2:e1:a1:7b:c7:4e:6e:b8:21:eb:cb:43:01:66:32:a2:47:c2:
57:76:2d:4c:f8:57:a8:c0:28:14:0f:c2:ae:d9:fb:13:11:9e:
7d:50:e5:5c:c0:3a:6d:7a:af:4c:45:a5:e5:76:2d:30:84:22:
61:c3:11:a4:bc:7c:7f:2c:19:81:5f:41:0e:4e:6f:c1:f6:e9:
c2:73:ab:8b:93:12:bc:a9:60:0e:47:73:dc:e6:13:84:d3:72:
bc:e8:16:68:db:7b:e6:a7:1d:0f:95:ab:d5:68:15:bf:35:d0:
a0:59:48:14:b7:ff:3f:f3:fa:8b:1e:8f:60:3f:1d:cd:72:2f:
47:14:bd:73
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAYMLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI3MDk1MDA1WhcNMjUwNjIyMDk1MDA1WjAYMRYw
FAYDVQQDEw02ODM1OGFkMi00YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7hbD4iJzOuTU5yGNPgKDMiszwXiQTEbQmcRDMxgzX4KMfzIPs27f3YvH
t5VQL9tahr1fX1W7axB/kBkhHVO5P4CRHNo6K5ET1q/qMU+kmKPhiHqpApSxeAKO
c876MXlpQg7X5VsX9a9InFbndNN4Dm+VotOO8UPHutFm4syFdqHAFXCsd3dULlp0
IUn3bjrmk+l4cPBWNnOG3yXpPcUc26ZMyrt7bLlNtutitT150wgUibHJWFDE29Mw
td4MMll3rIL2i0BUgQIRW6GYRovqNJoMml3UdeVbrKZcFXuYM/srWBVB7J6gr/iC
PcDFUrswdi9gQrCI4IapjFhQZ/RqQQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFB+B
SpmMVutlu5F2WcQ9tR5PqHn5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOUYwMDVDQzNBREYxMUYwQjU5Mzg0QUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACay/EDBACay/IDBAKa
0EwDBAKa0FQwDQYJKoZIhvcNAQELBQADggEBAKz4NpFmGR4eqETW8buyqiTQ1yaF
qm4XHUT8WRfs8BtRIex78pf7V6nWuklRdV88f3FajK0IYHkyn5H4IPXQMGSs8Dxy
YqT+EUqj86rOnaTC4tA6jgpU6p68+CSCRLrV3CdRCqnayTTWT/HuY5f9ph+gco04
Xegns6Vdpjvct/LhoXvHTm64IevLQwFmMqJHwld2LUz4V6jAKBQPwq7Z+xMRnn1Q
5VzAOm16r0xFpeV2LTCEImHDEaS8fH8sGYFfQQ5Ob8H26cJzq4uTErypYA5Hc9zm
E4TTcrzoFmjbe+anHQ+Vq9VoFb810KBZSBS3/z/z+osej2A/Hc1yL0cUvXM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:14 2025 by rpki-client