Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FED946492611F0BFCE0788DAE4EC9C.roa
File: 66FED946492611F0BFCE0788DAE4EC9C.roa (raw, json)
Hash identifier: J3a25KIEc3fFgk9GZLZKlEMtJqyEqTUnDIISE2myFQA=
Subject key identifier: A4:B4:90:C4:EA:C4:4B:BC:55:D1:76:D9:ED:94:42:03:39:48:6F:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01869F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FED946492611F0BFCE0788DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 13:49:34 +0000
ROA not before: Sat 14 Jun 2025 13:49:28 +0000
ROA not after: Sat 21 Jun 2025 13:49:28 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 05:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99999 (0x1869f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 13:49:28 2025 GMT
Not After : Jun 21 13:49:28 2025 GMT
Subject: CN=684d7dee-25db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:ff:cc:8b:c6:93:99:cf:cc:78:b8:60:67:
2a:85:1f:80:1b:3d:d8:70:74:6a:9b:79:f0:ca:b0:
d2:12:46:26:18:12:01:da:58:d5:b4:bd:73:ee:a8:
9e:c4:f1:c8:84:aa:81:98:1b:40:32:b1:6d:46:33:
c9:42:27:5d:6a:6d:be:b5:e2:2e:a7:f1:70:83:c3:
62:09:17:31:3b:90:65:5e:32:2e:0a:e1:24:30:68:
4c:d2:02:d0:1a:85:79:ce:c9:5a:5a:22:f6:df:2c:
79:a8:5c:4d:f8:7b:14:e5:1a:96:2a:78:4c:30:5b:
95:bd:c5:72:49:a9:57:f1:23:f1:16:56:b2:e4:50:
6f:83:6b:9b:f9:0f:6f:93:ad:3d:cf:0a:ac:56:27:
86:09:a3:1b:8c:d9:97:5a:af:84:94:88:d8:e2:ad:
4e:62:f4:c7:15:fd:4d:5c:02:45:c2:e8:29:fc:01:
c4:f9:45:7a:01:3a:5f:d9:b3:b6:d0:0f:07:67:a7:
27:0d:16:e8:bf:2b:11:6f:a0:1b:5a:d7:9a:e7:9e:
88:90:c0:5e:28:0c:a1:42:5b:47:b0:b0:45:b4:8e:
31:cc:83:59:29:ab:7c:97:b1:50:d4:de:72:9f:6d:
db:b4:6e:b0:dc:f7:48:ab:30:95:e6:3c:06:67:d5:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:90:C4:EA:C4:4B:BC:55:D1:76:D9:ED:94:42:03:39:48:6F:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FED946492611F0BFCE0788DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:aa:55:13:37:5f:98:2f:e8:3e:2a:87:f4:2b:cf:9b:2e:02:
42:9b:e5:fc:ce:a0:05:32:7d:dd:8f:92:87:46:17:24:5f:38:
ed:b6:59:ce:1f:31:83:4c:01:22:c2:b3:64:9a:53:82:ce:cf:
8e:2e:2b:9f:0e:c8:94:ca:b5:e3:e1:a5:e1:cb:f3:2d:3b:5c:
73:8a:90:81:1d:48:d5:fa:e5:ca:8d:5e:86:f7:48:2f:b2:a4:
8c:fb:e2:88:41:aa:6f:32:66:8c:2c:04:e6:54:bd:47:79:fa:
74:db:28:3d:38:22:f5:d4:42:77:be:65:9f:28:1c:b3:fd:39:
2e:a0:c5:87:48:92:a7:01:d5:7d:66:38:7b:5f:70:3f:73:76:
31:19:f7:28:be:d7:52:4c:e8:c0:5a:57:1f:83:5c:e1:1b:2b:
a9:61:0f:1e:7b:3c:3f:43:b3:81:14:c7:f5:b3:a0:e7:21:7f:
89:20:9f:f8:3f:83:ae:21:d3:ed:e1:16:ca:91:a2:47:da:db:
28:8a:d5:35:26:7b:d8:55:68:d9:9e:d1:1a:4e:3e:81:3a:a3:
75:bb:85:05:f8:4a:fd:5a:1a:fe:9f:9a:bc:6c:11:57:02:2e:
a0:13:ac:1e:dc:e3:9f:17:f8:2e:0f:d6:15:08:f6:61:ff:fb:
e2:d0:09:fc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAYafMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE0MTM0OTI4WhcNMjUwNjIxMTM0OTI4WjAYMRYw
FAYDVQQDEw02ODRkN2RlZS0yNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArmT/zIvGk5nPzHi4YGcqhR+AGz3YcHRqm3nwyrDSEkYmGBIB2ljVtL1z
7qiexPHIhKqBmBtAMrFtRjPJQiddam2+teIup/Fwg8NiCRcxO5BlXjIuCuEkMGhM
0gLQGoV5zslaWiL23yx5qFxN+HsU5RqWKnhMMFuVvcVySalX8SPxFlay5FBvg2ub
+Q9vk609zwqsVieGCaMbjNmXWq+ElIjY4q1OYvTHFf1NXAJFwugp/AHE+UV6ATpf
2bO20A8HZ6cnDRbovysRb6AbWtea556IkMBeKAyhQltHsLBFtI4xzINZKat8l7FQ
1N5yn23btG6w3PdIqzCV5jwGZ9X48wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFKS0
kMTqxEu8VdF22e2UQgM5SG/ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NkZFRDk0NjQ5MjYxMUYwQkZDRTA3ODhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFmlIgAwQFmtGgAwQGmtZA
AwQGmtdAMA0GCSqGSIb3DQEBCwUAA4IBAQBPqlUTN1+YL+g+Kof0K8+bLgJCm+X8
zqAFMn3dj5KHRhckXzjttlnOHzGDTAEiwrNkmlOCzs+OLiufDsiUyrXj4aXhy/Mt
O1xzipCBHUjV+uXKjV6G90gvsqSM++KIQapvMmaMLATmVL1Hefp02yg9OCL11EJ3
vmWfKByz/TkuoMWHSJKnAdV9Zjh7X3A/c3YxGfcovtdSTOjAWlcfg1zhGyupYQ8e
ezw/Q7OBFMf1s6DnIX+JIJ/4P4OuIdPt4RbKkaJH2tsoitU1JnvYVWjZntEaTj6B
OqN1u4UF+Er9Whr+n5q8bBFXAi6gE6we3OOfF/guD9YVCPZh//vi0An8
-----END CERTIFICATE-----
Generated at Wed Jun 18 13:03:44 2025 by rpki-client