Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE8E464380211F0B617ACF6DAE4EC9C.roa
File: 1AE8E464380211F0B617ACF6DAE4EC9C.roa (raw, json)
Hash identifier: T7dfA4maHK+hfysmjYA4sIDhHXeTnnK4RwOBsnyl0+8=
Subject key identifier: D8:D9:90:BA:1A:87:64:A0:BF:F1:49:51:64:C2:93:88:4E:E7:45:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01824F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE8E464380211F0B617ACF6DAE4EC9C.roa
Signing time: Fri 23 May 2025 18:16:54 +0000
ROA not before: Fri 23 May 2025 18:16:50 +0000
ROA not after: Thu 03 Jul 2025 18:16:50 +0000
asID: 174
IP address blocks: 154.202.105.0/24 maxlen: 24
154.202.134.0/24 maxlen: 24
154.202.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98895 (0x1824f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:16:50 2025 GMT
Not After : Jul 3 18:16:50 2025 GMT
Subject: CN=6830bb96-a8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:df:e2:20:d8:24:ca:d6:60:02:ca:23:09:
ca:8b:a5:17:81:4a:6d:fc:d8:dc:e8:fe:06:5c:47:
fc:05:13:9a:b0:bc:60:98:dd:e9:a4:a7:f1:9b:78:
20:6a:2f:c4:35:dd:48:eb:66:38:aa:62:43:4b:ba:
38:90:aa:73:c3:f3:1c:a0:4d:37:7f:a6:90:c2:e7:
bf:97:a8:4b:10:2b:7d:b7:3b:b0:7e:cf:c8:cf:02:
35:21:51:25:3d:d8:b2:b2:bc:27:bd:94:83:1a:cf:
cb:0b:04:af:4d:33:b1:e2:2c:26:d0:b1:f3:be:6e:
6c:30:d1:a7:fd:d9:2a:f1:dc:03:6b:47:72:12:9e:
b8:e2:68:56:90:68:48:1b:24:e9:34:60:a0:3a:d4:
4b:fd:cf:86:22:fa:93:ce:7d:2d:20:97:e9:2d:e4:
b0:4d:18:a9:d4:e2:5a:4b:7a:96:9a:80:35:57:fd:
eb:fc:8f:ea:75:29:88:01:2a:42:70:63:89:bf:a6:
c1:57:39:df:cb:d8:ee:ee:f5:06:48:9b:33:30:09:
47:36:4a:fa:26:05:3c:49:11:fe:39:e6:ee:ff:8e:
7e:d7:1c:b4:d9:fb:b5:bf:2f:10:5a:70:44:8b:65:
f8:3d:49:5c:17:32:39:6c:f9:f0:05:98:21:99:97:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:90:BA:1A:87:64:A0:BF:F1:49:51:64:C2:93:88:4E:E7:45:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE8E464380211F0B617ACF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.105.0/24
154.202.134.0/23
Signature Algorithm: sha256WithRSAEncryption
88:05:39:a8:db:de:3d:b0:32:be:32:dc:ed:61:71:ea:bf:31:
81:b7:2d:81:62:57:b9:08:dc:fe:e6:e4:97:a3:27:ee:c9:53:
fe:67:42:44:c7:d4:5c:b9:11:4c:c2:10:d7:2d:26:0f:7a:09:
9c:c2:6b:91:1a:aa:e2:27:e4:81:46:b0:67:9f:98:cf:63:96:
0d:b1:5b:99:92:3d:7e:3a:6e:a5:99:48:97:98:2a:52:53:5f:
9d:aa:cd:ec:ee:e6:db:92:53:d4:d3:66:cc:1c:15:9c:dc:b5:
6e:c2:aa:f1:04:38:b8:40:7b:13:46:62:18:d0:20:ea:36:5e:
af:cf:6c:93:4a:f1:c6:4d:aa:2f:a7:68:38:6c:bf:98:7d:26:
d0:f2:92:a3:b8:6c:c3:f1:ab:c7:18:f1:29:a4:06:20:24:bd:
9f:90:fa:0e:3f:04:09:ef:7d:50:2b:99:9a:23:a3:51:81:5a:
81:44:ee:fe:8f:63:b4:ce:c9:52:97:fb:fc:0c:b0:8d:1b:35:
06:9b:99:90:96:95:9a:ab:64:3e:28:f1:88:8c:d9:6f:5a:32:
5c:de:a2:d6:36:c6:ee:32:e4:6d:f2:e8:6d:c5:61:00:74:38:
49:94:83:38:fe:e9:6a:b9:4e:8e:ae:35:46:a8:9e:53:21:4e:
18:2a:c7:ab
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYJPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMTgxNjUwWhcNMjUwNzAzMTgxNjUwWjAYMRYw
FAYDVQQDEw02ODMwYmI5Ni1hOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlyHf4iDYJMrWYALKIwnKi6UXgUpt/Njc6P4GXEf8BROasLxgmN3ppKfx
m3ggai/ENd1I62Y4qmJDS7o4kKpzw/McoE03f6aQwue/l6hLECt9tzuwfs/IzwI1
IVElPdiysrwnvZSDGs/LCwSvTTOx4iwm0LHzvm5sMNGn/dkq8dwDa0dyEp644mhW
kGhIGyTpNGCgOtRL/c+GIvqTzn0tIJfpLeSwTRip1OJaS3qWmoA1V/3r/I/qdSmI
ASpCcGOJv6bBVznfy9ju7vUGSJszMAlHNkr6JgU8SRH+Oebu/45+1xy02fu1vy8Q
WnBEi2X4PUlcFzI5bPnwBZghmZedmQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNjZ
kLoah2Sgv/FJUWTCk4hO50UVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQUU4RTQ2NDM4MDIxMUYwQjYxN0FDRjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsppAwQBmsqGMA0GCSqG
SIb3DQEBCwUAA4IBAQCIBTmo2949sDK+MtztYXHqvzGBty2BYle5CNz+5uSXoyfu
yVP+Z0JEx9RcuRFMwhDXLSYPegmcwmuRGqriJ+SBRrBnn5jPY5YNsVuZkj1+Om6l
mUiXmCpSU1+dqs3s7ubbklPU02bMHBWc3LVuwqrxBDi4QHsTRmIY0CDqNl6vz2yT
SvHGTaovp2g4bL+YfSbQ8pKjuGzD8avHGPEppAYgJL2fkPoOPwQJ731QK5maI6NR
gVqBRO7+j2O0zslSl/v8DLCNGzUGm5mQlpWaq2Q+KPGIjNlvWjJc3qLWNsbuMuRt
8uhtxWEAdDhJlIM4/ulquU6OrjVGqJ5TIU4YKser
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:42:10 2025 by rpki-client