Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4591893267E611F0A67ACA98DAE4EC9C.roa
File: 4591893267E611F0A67ACA98DAE4EC9C.roa (raw, json)
Hash identifier: eWlIZCh/JX+NY+UPZOd4Kpv3Yutto5BYz5PkPNHQKDY=
Subject key identifier: B6:26:3F:F2:34:44:62:6F:39:1D:C3:72:2D:48:5A:D3:6E:F7:E6:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4591893267E611F0A67ACA98DAE4EC9C.roa
Signing time: Wed 23 Jul 2025 16:58:36 +0000
ROA not before: Wed 23 Jul 2025 16:58:31 +0000
ROA not after: Sat 04 Oct 2025 16:58:31 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.93.67.0/24 maxlen: 24
154.93.68.0/24 maxlen: 24
154.93.69.0/24 maxlen: 24
154.93.70.0/24 maxlen: 24
154.93.71.0/24 maxlen: 24
154.93.72.0/24 maxlen: 24
154.93.73.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.75.0/24 maxlen: 24
154.93.76.0/24 maxlen: 24
154.93.77.0/24 maxlen: 24
154.93.78.0/24 maxlen: 24
154.93.79.0/24 maxlen: 24
154.93.80.0/24 maxlen: 24
154.93.81.0/24 maxlen: 24
154.93.82.0/24 maxlen: 24
154.93.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102226 (0x18f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 16:58:31 2025 GMT
Not After : Oct 4 16:58:31 2025 GMT
Subject: CN=688114bc-ad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:5b:24:92:e6:bc:6d:61:21:22:40:f5:5c:
78:8b:8c:b7:2b:d1:ea:e3:a5:9b:6b:94:a7:0c:ce:
9a:f9:f7:91:69:8a:8d:50:65:19:40:d8:a6:12:08:
1c:6b:23:07:b7:4e:94:c8:64:68:8a:b3:1c:53:2f:
3e:4d:b5:28:22:97:31:eb:5c:29:db:be:0b:e8:29:
14:8d:02:ff:63:13:32:71:e7:15:cd:0a:4c:16:1c:
8b:ec:c7:98:a7:11:56:1b:df:23:b2:7f:b4:1b:6b:
87:5a:3f:31:51:4b:98:6f:69:48:e0:a8:7f:35:fa:
2d:8b:e7:6e:08:0e:fa:a1:6b:55:03:17:03:e3:dc:
31:fd:d9:f6:c4:c1:46:bd:0c:e7:d6:53:61:82:10:
f5:3e:d5:fd:a6:a3:62:e1:1e:1a:5a:7b:30:68:b4:
a1:0e:d3:94:56:49:8c:3e:a9:16:3c:3e:a8:6f:cd:
0c:af:fa:48:93:7f:0c:fe:84:da:93:cc:cd:1d:93:
99:a9:57:76:74:de:ee:56:a3:66:64:9d:2e:70:81:
63:0f:e8:6a:d9:0c:3e:1d:bf:82:c9:5d:22:53:65:
45:4e:5a:74:62:25:f1:72:6f:93:ee:a1:1e:e1:1b:
08:bc:cf:18:91:c0:9b:5f:c1:60:5a:81:48:b9:58:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:3F:F2:34:44:62:6F:39:1D:C3:72:2D:48:5A:D3:6E:F7:E6:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4591893267E611F0A67ACA98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.83.255
Signature Algorithm: sha256WithRSAEncryption
1f:1a:0f:8b:63:76:8b:75:c4:e8:cb:0f:0b:e7:a3:be:b1:8f:
f7:f6:ab:b5:c6:ad:51:d9:0c:11:93:05:8e:0b:bb:1a:e5:3d:
29:5f:71:60:85:be:ca:3f:c3:06:ea:d4:a6:20:b1:c2:a3:a6:
1c:14:48:86:76:8e:53:1d:a2:4b:42:aa:87:5c:2b:32:09:ef:
b4:6e:0a:f3:f6:67:f5:ea:2e:32:b5:59:76:2c:99:03:53:ee:
5c:b6:8d:b2:e8:a0:0b:d9:73:8b:61:65:9f:79:52:17:09:fd:
93:cb:f9:67:6b:ad:97:93:14:35:21:14:81:38:76:01:a9:e4:
cb:11:55:81:7c:a7:d5:1c:e6:81:8a:da:8b:8f:cd:05:8e:50:
de:2c:ee:f0:a1:69:68:6e:5d:e8:4a:a1:3f:fa:34:59:b7:2e:
3d:37:6f:be:47:ec:b6:27:e1:98:ef:c1:ec:9b:1a:7f:1c:8f:
75:c3:60:b7:6b:e6:93:e2:07:10:89:94:66:6e:08:2d:fe:f4:
eb:54:e8:b7:3f:2c:52:52:e9:81:b1:27:0c:12:91:4b:dc:95:
b6:69:c9:60:33:bb:2a:4c:aa:cb:0a:3a:04:1a:4d:58:6c:de:
49:2d:ae:ab:ba:08:7d:89:eb:64:12:6e:be:48:04:d8:33:38:
a6:c8:d1:d7
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAY9SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIzMTY1ODMxWhcNMjUxMDA0MTY1ODMxWjAYMRYw
FAYDVQQDEw02ODgxMTRiYy1hZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0XBbJJLmvG1hISJA9Vx4i4y3K9Hq46Wba5SnDM6a+feRaYqNUGUZQNim
EggcayMHt06UyGRoirMcUy8+TbUoIpcx61wp274L6CkUjQL/YxMycecVzQpMFhyL
7MeYpxFWG98jsn+0G2uHWj8xUUuYb2lI4Kh/Nfoti+duCA76oWtVAxcD49wx/dn2
xMFGvQzn1lNhghD1PtX9pqNi4R4aWnswaLShDtOUVkmMPqkWPD6ob80Mr/pIk38M
/oTak8zNHZOZqVd2dN7uVqNmZJ0ucIFjD+hq2Qw+Hb+CyV0iU2VFTlp0YiXxcm+T
7qEe4RsIvM8YkcCbX8FgWoFIuViGUQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLYm
P/I0RGJvOR3Dci1IWtNu9+bQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NTkxODkzMjY3RTYxMUYwQTY3QUNBOThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaXUADBAKaXVAwDQYJ
KoZIhvcNAQELBQADggEBAB8aD4tjdot1xOjLDwvno76xj/f2q7XGrVHZDBGTBY4L
uxrlPSlfcWCFvso/wwbq1KYgscKjphwUSIZ2jlMdoktCqodcKzIJ77RuCvP2Z/Xq
LjK1WXYsmQNT7ly2jbLooAvZc4thZZ95UhcJ/ZPL+WdrrZeTFDUhFIE4dgGp5MsR
VYF8p9Uc5oGK2ouPzQWOUN4s7vChaWhuXehKoT/6NFm3Lj03b75H7LYn4Zjvweyb
Gn8cj3XDYLdr5pPiBxCJlGZuCC3+9OtU6Lc/LFJS6YGxJwwSkUvclbZpyWAzuypM
qssKOgQaTVhs3kktrqu6CH2J62QSbr5IBNgzOKbI0dc=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:17 2025 by rpki-client