Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FFDBA3048FF11F0B3678C8FDAE4EC9C.roa
File: 5FFDBA3048FF11F0B3678C8FDAE4EC9C.roa (raw, json)
Hash identifier: 4wkv+/MFR/EQOnyJlEwIg/fqVDgWoco9dZEWAprAOhc=
Subject key identifier: 50:D3:65:F8:38:F5:86:A6:8C:C5:11:E5:C5:87:2D:0C:D2:07:E1:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018673
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FFDBA3048FF11F0B3678C8FDAE4EC9C.roa
Signing time: Sat 14 Jun 2025 09:10:12 +0000
ROA not before: Sat 14 Jun 2025 09:10:07 +0000
ROA not after: Fri 04 Jul 2025 09:10:07 +0000
asID: 398823
IP address blocks: 154.92.176.0/20 maxlen: 24
154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99955 (0x18673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 09:10:07 2025 GMT
Not After : Jul 4 09:10:07 2025 GMT
Subject: CN=684d3c74-7794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:26:db:36:fe:89:10:c5:c9:ea:d4:fe:f4:
1f:5d:dc:a5:92:fc:0d:06:e6:34:01:f8:2e:6f:01:
82:8a:0c:eb:d0:4f:d9:e9:fb:d7:86:56:cd:ed:d9:
ae:e0:27:39:0c:c1:e1:2d:88:fb:6a:e6:4a:d4:2d:
26:d2:3f:96:94:76:fb:36:84:ab:07:3f:f7:b3:5d:
49:a5:01:b2:ee:33:c7:e0:fe:0e:8d:63:09:fc:c4:
c8:0a:3e:e3:40:72:99:47:bf:bb:90:08:a5:04:6c:
89:54:f0:2b:bd:8b:5f:c4:c1:ce:ca:19:95:1f:98:
ec:50:7d:ba:e1:44:28:09:48:61:85:5f:d0:bb:e2:
a4:eb:40:85:39:eb:d9:9d:f6:58:ce:65:e6:4c:6e:
78:a5:43:bc:47:08:43:35:c5:eb:51:13:98:02:dd:
16:7a:75:15:26:9f:6b:97:4c:cf:38:9f:87:bd:2a:
dd:56:7d:ba:84:d3:6a:ce:78:6f:aa:51:7a:a5:f0:
56:86:8c:c0:6d:18:64:d2:5a:9b:0e:c8:38:b2:87:
19:4d:ce:75:9a:09:72:9f:a8:d1:66:88:2a:4d:59:
e4:63:98:97:ae:e6:b8:3f:74:16:c2:44:db:2e:48:
eb:85:3b:89:54:fb:a5:e6:9f:d3:d5:6c:e8:fb:9c:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:65:F8:38:F5:86:A6:8C:C5:11:E5:C5:87:2D:0C:D2:07:E1:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FFDBA3048FF11F0B3678C8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
154.199.208.0-154.199.255.255
Signature Algorithm: sha256WithRSAEncryption
c9:7d:4a:60:11:8a:1b:5a:75:fb:f7:4a:44:0f:15:17:81:0e:
51:c3:80:62:a5:ea:7c:06:27:57:91:a2:f7:84:fa:de:6c:ce:
78:b3:87:f1:d5:e8:6e:94:5e:2c:de:fa:c7:50:1d:8b:82:8f:
ba:e8:86:38:50:19:cb:3a:00:97:19:63:00:44:8e:25:c0:3f:
da:92:ab:5c:95:f9:c6:b5:62:29:2e:b3:69:2f:55:2c:6e:2d:
40:e8:4e:69:c5:dc:37:82:fc:d2:dd:b1:be:bb:e7:15:02:c2:
07:c1:b2:69:c6:87:05:66:62:5f:41:ea:13:91:56:17:3a:13:
cc:b4:d7:b3:e6:11:95:18:7e:90:62:af:4f:20:c6:23:e8:b9:
75:3b:00:46:89:ca:f2:fe:a9:2b:60:f8:13:8d:33:de:15:fc:
fa:b9:81:9f:62:eb:82:fc:14:b3:d9:9a:ef:37:e8:15:a0:07:
10:69:bb:d3:bf:fa:20:2c:bc:72:85:1b:09:31:e0:4d:e5:4d:
20:9d:43:41:bb:0c:66:cd:46:60:75:40:d3:bf:43:01:0a:3e:
da:e2:48:7d:41:f3:76:10:56:2f:58:4d:a9:c8:e8:30:b0:3e:
50:85:b7:67:ef:8d:cd:59:c9:e9:c7:a4:60:8a:26:ad:89:41:
34:0d:26:0c
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIDAYZzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE0MDkxMDA3WhcNMjUwNzA0MDkxMDA3WjAYMRYw
FAYDVQQDEw02ODRkM2M3NC03Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA37Am2zb+iRDFyerU/vQfXdylkvwNBuY0AfgubwGCigzr0E/Z6fvXhlbN
7dmu4Cc5DMHhLYj7auZK1C0m0j+WlHb7NoSrBz/3s11JpQGy7jPH4P4OjWMJ/MTI
Cj7jQHKZR7+7kAilBGyJVPArvYtfxMHOyhmVH5jsUH264UQoCUhhhV/Qu+Kk60CF
OevZnfZYzmXmTG54pUO8RwhDNcXrUROYAt0WenUVJp9rl0zPOJ+HvSrdVn26hNNq
znhvqlF6pfBWhozAbRhk0lqbDsg4socZTc51mglyn6jRZogqTVnkY5iXrua4P3QW
wkTbLkjrhTuJVPul5p/T1Wzo+5zN7QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFDT
Zfg49YamjMUR5cWHLQzSB+EFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RkZEQkEzMDQ4RkYxMUYwQjM2NzhDOEZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEmlywMAsDBASax9ADAwOa
wDANBgkqhkiG9w0BAQsFAAOCAQEAyX1KYBGKG1p1+/dKRA8VF4EOUcOAYqXqfAYn
V5Gi94T63mzOeLOH8dXobpReLN76x1Adi4KPuuiGOFAZyzoAlxljAESOJcA/2pKr
XJX5xrViKS6zaS9VLG4tQOhOacXcN4L80t2xvrvnFQLCB8GyacaHBWZiX0HqE5FW
FzoTzLTXs+YRlRh+kGKvTyDGI+i5dTsARonK8v6pK2D4E40z3hX8+rmBn2LrgvwU
s9ma7zfoFaAHEGm707/6ICy8coUbCTHgTeVNIJ1DQbsMZs1GYHVA079DAQo+2uJI
fUHzdhBWL1hNqcjoMLA+UIW3Z++NzVnJ6cekYIomrYlBNA0mDA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:18:23 2025 by rpki-client