Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B42AB90408511F0AD532FD8DAE4EC9C.roa
File: 0B42AB90408511F0AD532FD8DAE4EC9C.roa (raw, json)
Hash identifier: X0+tx0LjsRYfR/iE7wN36BCeiOoD/QTmbx9QmipyYlU=
Subject key identifier: 96:CA:59:68:22:9D:52:4E:25:96:11:EA:96:BE:7C:DF:1B:EB:CA:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018493
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B42AB90408511F0AD532FD8DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 14:14:21 +0000
ROA not before: Tue 03 Jun 2025 14:14:17 +0000
ROA not after: Sun 03 Aug 2025 14:14:17 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
154.94.102.0/24 maxlen: 24
154.94.103.0/24 maxlen: 24
154.94.104.0/24 maxlen: 24
154.94.105.0/24 maxlen: 24
154.94.106.0/24 maxlen: 24
154.94.107.0/24 maxlen: 24
154.94.108.0/24 maxlen: 24
154.94.109.0/24 maxlen: 24
154.94.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99475 (0x18493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 14:14:17 2025 GMT
Not After : Aug 3 14:14:17 2025 GMT
Subject: CN=683f033d-0e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:f7:00:09:91:89:14:b0:e4:d7:8f:ad:a3:
82:a8:de:37:7c:95:ac:17:6b:0e:37:91:85:7c:40:
f4:3f:fc:2b:2e:c7:a6:6a:2a:5b:98:a6:d9:60:c5:
c2:68:65:ff:ec:ab:2a:17:be:10:71:4e:68:5c:6d:
18:78:6e:cc:85:8e:3c:23:e7:5a:32:fe:4c:a8:31:
3f:b6:08:e7:2c:31:36:44:a7:65:bc:fd:2a:c8:9e:
24:64:77:71:bb:34:39:e1:57:c8:86:1b:d8:61:35:
b2:da:12:b1:2f:90:10:4c:1a:9d:ee:6a:e6:42:28:
9d:5a:6d:00:15:75:5b:15:ce:fe:8b:1e:b7:c3:99:
53:08:b7:7a:9f:3f:84:91:fe:4b:66:fe:b6:72:07:
8c:02:cb:79:dc:72:b7:fd:53:f2:7d:f2:5d:f2:eb:
f5:6e:3b:60:8e:4e:99:89:9c:55:81:46:db:d6:e7:
9d:c8:a7:5a:ec:e4:e8:ed:15:3a:55:83:10:47:d1:
64:40:9a:ad:8e:0c:33:a4:53:f4:63:77:36:84:ca:
5b:fe:df:fc:c2:6f:28:74:67:63:2b:97:e4:44:10:
ee:bd:89:7e:bd:ae:2c:cd:fb:f0:b2:c1:92:7b:81:
76:08:1c:00:17:d7:ae:76:a9:f6:90:50:96:9b:a8:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:59:68:22:9D:52:4E:25:96:11:EA:96:BE:7C:DF:1B:EB:CA:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B42AB90408511F0AD532FD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0-154.94.110.255
Signature Algorithm: sha256WithRSAEncryption
17:7d:53:be:9c:28:20:61:dc:3b:53:fc:49:e0:5b:86:ec:16:
67:77:9a:f0:69:57:2f:7e:f8:85:f5:29:58:7b:33:16:b5:a8:
90:77:55:59:d8:24:16:e6:95:85:02:f9:c0:f0:97:b0:25:d3:
49:d6:c8:dc:3f:73:a0:b5:41:7a:f8:f6:fc:40:f6:d7:f2:de:
cf:65:f4:b8:e2:26:d9:a7:96:7f:7f:26:35:e0:c4:cc:5f:3d:
13:bd:da:d1:53:38:62:92:6c:41:02:36:29:95:4c:79:d6:bd:
61:05:8f:8f:0a:9a:d1:8d:d6:31:44:a9:08:b3:5b:7f:44:42:
b6:11:d2:2f:a8:53:8e:e7:7b:d8:21:dc:e0:a1:c6:a3:8b:f2:
17:56:ba:c5:e4:64:b3:44:62:9c:10:f7:db:31:28:6a:ca:62:
20:b0:5e:ff:e0:c7:c5:5c:e5:04:19:ff:4b:0e:1b:f7:ea:b4:
78:53:ae:9f:87:7f:fa:a2:28:c3:5f:5e:bc:40:f7:9f:a2:39:
16:01:3c:f9:a5:3b:4f:51:66:0d:15:44:33:a3:2d:92:e3:3c:
4c:35:01:c7:33:23:0f:d7:1b:90:c4:43:4e:ee:a7:fc:7a:06:
bd:94:e7:cb:79:e1:71:a3:b1:35:04:b7:23:3f:f8:fe:33:16:
00:c8:1c:62
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYSTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjAzMTQxNDE3WhcNMjUwODAzMTQxNDE3WjAYMRYw
FAYDVQQDEw02ODNmMDMzZC0wZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuiH3AAmRiRSw5NePraOCqN43fJWsF2sON5GFfED0P/wrLsemaipbmKbZ
YMXCaGX/7KsqF74QcU5oXG0YeG7MhY48I+daMv5MqDE/tgjnLDE2RKdlvP0qyJ4k
ZHdxuzQ54VfIhhvYYTWy2hKxL5AQTBqd7mrmQiidWm0AFXVbFc7+ix63w5lTCLd6
nz+Ekf5LZv62cgeMAst53HK3/VPyffJd8uv1bjtgjk6ZiZxVgUbb1uedyKda7OTo
7RU6VYMQR9FkQJqtjgwzpFP0Y3c2hMpb/t/8wm8odGdjK5fkRBDuvYl+va4szfvw
ssGSe4F2CBwAF9eudqn2kFCWm6jmXQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJbK
WWginVJOJZYR6pa+fN8b68phMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjQyQUI5MDQwODUxMUYwQUQ1MzJGRDhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaXmUDBACaXm4wDQYJ
KoZIhvcNAQELBQADggEBABd9U76cKCBh3DtT/EngW4bsFmd3mvBpVy9++IX1KVh7
Mxa1qJB3VVnYJBbmlYUC+cDwl7Al00nWyNw/c6C1QXr49vxA9tfy3s9l9LjiJtmn
ln9/JjXgxMxfPRO92tFTOGKSbEECNimVTHnWvWEFj48KmtGN1jFEqQizW39EQrYR
0i+oU47ne9gh3OChxqOL8hdWusXkZLNEYpwQ99sxKGrKYiCwXv/gx8Vc5QQZ/0sO
G/fqtHhTrp+Hf/qiKMNfXrxA95+iORYBPPmlO09RZg0VRDOjLZLjPEw1AcczIw/X
G5DEQ07up/x6Br2U58t54XGjsTUEtyM/+P4zFgDIHGI=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:25 2025 by rpki-client