Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2805675637EB11F0B3F9E9E2DAE4EC9C.roa
File: 2805675637EB11F0B3F9E9E2DAE4EC9C.roa (raw, json)
Hash identifier: TbvRzmwluT7mHVaouw8T3gO5U6dAzTq+ZBJZL+FRuK0=
Subject key identifier: 4C:BB:EE:48:1B:F8:27:6B:C6:D7:43:99:AC:8B:4B:59:E6:00:CD:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018229
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2805675637EB11F0B3F9E9E2DAE4EC9C.roa
Signing time: Fri 23 May 2025 15:32:38 +0000
ROA not before: Fri 23 May 2025 15:32:33 +0000
ROA not after: Mon 30 Jun 2025 15:32:33 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98857 (0x18229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 15:32:33 2025 GMT
Not After : Jun 30 15:32:33 2025 GMT
Subject: CN=68309516-9bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:c6:41:f7:35:d2:f4:be:d4:a7:63:f5:a0:
25:cd:24:55:52:4b:45:86:0b:75:d4:cf:bb:cb:f9:
d9:5e:2b:04:10:1e:87:8f:b3:da:79:93:4d:21:6f:
af:3c:4f:7d:9d:ab:ea:87:95:34:07:c2:ff:af:3f:
bc:ef:ea:cc:be:75:81:98:e5:1a:ce:c4:dd:5f:f9:
5e:f5:80:26:16:2c:84:85:7f:b0:0d:af:8e:d0:ba:
c5:47:55:91:57:b6:dd:75:c1:21:f5:4e:20:78:b2:
7b:7c:f3:6c:5e:cc:77:49:c7:5a:de:c3:7e:25:e2:
23:9e:c9:6a:34:d8:9e:1d:3e:3a:5a:f9:77:02:a8:
31:0d:5b:2f:4d:74:cd:cf:75:21:5d:1d:e9:6b:2f:
ba:22:6f:22:22:25:a3:4d:49:68:2c:a1:f5:81:3d:
67:2d:82:d0:bd:ae:e2:cf:9a:94:ee:fb:99:77:f7:
c5:89:cf:06:d1:66:cd:01:da:29:59:45:0b:ed:b2:
d3:2f:f5:1c:fc:a9:26:5d:12:4b:e8:bf:8e:9c:95:
1d:07:62:21:fb:59:23:28:55:51:4a:4f:86:c6:4c:
16:03:b2:ff:5a:ea:5b:c2:21:98:35:cd:3b:6d:2c:
2c:16:79:ea:a3:4f:9b:71:0e:b9:1d:65:ba:d8:31:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BB:EE:48:1B:F8:27:6B:C6:D7:43:99:AC:8B:4B:59:E6:00:CD:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2805675637EB11F0B3F9E9E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
61:5b:56:61:15:53:f9:72:ec:b0:98:54:56:fb:53:59:2c:fe:
e5:df:01:50:db:98:bc:46:a6:21:b0:47:92:b7:59:e0:db:b0:
07:62:61:66:3d:eb:ff:7c:cf:43:3b:d8:f3:bc:0d:f4:e7:ab:
3e:cb:99:8f:3d:09:1a:35:8b:af:9b:51:a5:97:87:b2:11:06:
94:a9:aa:51:ea:69:3c:aa:73:bd:55:ee:3e:33:32:2b:7d:ed:
1e:43:74:3e:51:c5:60:5a:b2:c0:01:e1:9d:28:14:d1:1c:bd:
b0:e5:6d:a6:a7:99:e0:09:a6:70:7e:49:b5:50:08:8b:fb:24:
d0:31:e0:4d:b4:66:4d:10:42:b5:73:16:77:5b:38:1f:42:b0:
24:0c:06:6e:f8:b3:2b:a4:0a:de:ed:bf:5f:32:e7:9d:7b:1d:
6e:93:51:b2:f1:60:77:84:fd:49:1a:b8:f5:fc:32:4c:64:5c:
b2:42:cf:88:92:74:8d:47:1a:29:2e:f1:27:bc:c8:75:d4:61:
c8:1b:5f:d9:8c:e6:4d:88:df:5f:0d:a3:a2:46:4f:ef:f1:fe:
df:6a:a2:84:1e:00:38:59:6d:d8:20:92:96:f7:c3:c9:06:7b:
80:bd:4b:e3:d3:f1:9c:3b:bb:f1:e7:e6:f8:85:4f:67:f9:01:
1e:c5:04:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYIpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMTUzMjMzWhcNMjUwNjMwMTUzMjMzWjAYMRYw
FAYDVQQDEw02ODMwOTUxNi05YmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0xnGQfc10vS+1Kdj9aAlzSRVUktFhgt11M+7y/nZXisEEB6Hj7PaeZNN
IW+vPE99navqh5U0B8L/rz+87+rMvnWBmOUazsTdX/le9YAmFiyEhX+wDa+O0LrF
R1WRV7bddcEh9U4geLJ7fPNsXsx3Scda3sN+JeIjnslqNNieHT46Wvl3AqgxDVsv
TXTNz3UhXR3pay+6Im8iIiWjTUloLKH1gT1nLYLQva7iz5qU7vuZd/fFic8G0WbN
AdopWUUL7bLTL/Uc/KkmXRJL6L+OnJUdB2Ih+1kjKFVRSk+GxkwWA7L/WupbwiGY
Nc07bSwsFnnqo0+bcQ65HWW62DEl5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEy7
7kgb+CdrxtdDmayLS1nmAM3xMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yODA1Njc1NjM3RUIxMUYwQjNGOUU5RTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhW1ZhFVP5cuywmFRW+1NZLP7l3wFQ25i8RqYhsEeSt1ng27AHYmFm
Pev/fM9DO9jzvA3056s+y5mPPQkaNYuvm1Gll4eyEQaUqapR6mk8qnO9Ve4+MzIr
fe0eQ3Q+UcVgWrLAAeGdKBTRHL2w5W2mp5ngCaZwfkm1UAiL+yTQMeBNtGZNEEK1
cxZ3WzgfQrAkDAZu+LMrpAre7b9fMuedex1uk1Gy8WB3hP1JGrj1/DJMZFyyQs+I
knSNRxopLvEnvMh11GHIG1/ZjOZNiN9fDaOiRk/v8f7faqKEHgA4WW3YIJKW98PJ
BnuAvUvj0/GcO7vx5+b4hU9n+QEexQRv
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:00:07 2025 by rpki-client