Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B958E12452B11F08FF7FE95DAE4EC9C.roa
File: 7B958E12452B11F08FF7FE95DAE4EC9C.roa (raw, json)
Hash identifier: 8eTkoqWpXJzsHCRR0fxNr15YLHXCJts8mP/z9GAusuk=
Subject key identifier: 51:A3:BC:B7:2A:46:14:26:02:D5:DF:74:DB:1B:B4:EF:0C:5F:AF:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018594
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B958E12452B11F08FF7FE95DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 12:15:51 +0000
ROA not before: Mon 09 Jun 2025 12:15:46 +0000
ROA not after: Tue 11 Nov 2025 12:15:46 +0000
asID: 18013
IP address blocks: 154.210.16.0/20 maxlen: 24
154.212.132.0/22 maxlen: 24
154.212.135.0/24 maxlen: 24
154.215.2.0/23 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.8.0/21 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99732 (0x18594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 12:15:46 2025 GMT
Not After : Nov 11 12:15:46 2025 GMT
Subject: CN=6846d077-5e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:b2:b1:09:cb:b6:63:a8:5e:90:e6:98:d7:
be:bc:69:92:3f:bd:94:41:4f:a6:73:7d:98:f1:d3:
ef:37:9e:81:c8:c7:1c:b1:a9:9a:40:ed:e5:41:cf:
26:d7:d8:9a:06:b0:8c:a7:80:e4:b9:1b:26:9a:2e:
0c:c1:6e:8d:c4:6a:e0:59:bd:df:8b:db:99:fd:65:
8a:cb:3d:11:26:28:9f:72:91:41:94:e7:b0:6f:2d:
54:eb:a6:f1:02:7d:fc:a6:34:33:a3:f7:0b:16:be:
58:21:31:33:fe:93:04:54:03:d2:4a:c6:ef:91:75:
4f:70:5f:55:17:a3:f5:2a:2d:08:9c:db:ca:31:28:
2b:d0:f8:42:05:7d:aa:a0:6f:41:5f:e3:38:67:37:
80:9c:85:a3:c4:fd:3c:f2:7e:08:fd:91:5b:ff:74:
12:8f:37:69:f8:4f:f3:2e:e1:ba:b5:e3:66:2b:18:
02:d7:84:64:1c:dd:55:6f:f6:6a:f8:75:a6:a9:cd:
7d:3d:78:cd:b9:c7:f0:eb:0b:4e:4a:fc:2b:0e:fc:
72:d7:f1:d7:16:8a:f8:83:be:50:49:a3:4c:85:4f:
fc:f3:30:fd:da:b7:5d:3a:13:c5:d0:23:ca:88:02:
d8:af:62:51:ad:29:ef:f9:18:49:b1:25:75:34:c0:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:BC:B7:2A:46:14:26:02:D5:DF:74:DB:1B:B4:EF:0C:5F:AF:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B958E12452B11F08FF7FE95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.212.132.0/22
154.215.2.0/23
154.221.2.0/23
154.221.8.0/21
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
64:f8:5a:2e:ab:a2:79:e3:e5:f7:91:60:f8:32:ec:7a:26:57:
bc:06:ca:5b:e5:67:c5:33:6f:c3:11:9f:8e:28:d0:60:6f:36:
e6:62:be:2e:81:c8:02:5e:a2:5f:45:e1:a3:e8:57:c5:6e:1b:
46:84:d3:71:71:0b:2a:10:39:1a:ee:2c:1e:1d:ba:70:8f:0a:
aa:20:5b:2d:29:ef:7a:5c:e4:9d:55:8d:64:bc:a8:6f:03:fd:
70:8f:b9:8a:6c:01:c0:80:88:a3:f8:19:43:79:59:43:7a:60:
59:42:f0:01:3e:8d:77:54:b8:a8:4a:40:b5:3c:50:b5:c7:b9:
65:53:e6:ac:2d:25:aa:2d:ff:20:0c:2a:dc:d5:ed:63:b0:0f:
29:04:77:9b:fb:ae:2e:aa:76:84:db:9e:e5:35:6d:ec:de:a0:
e6:0a:11:13:b5:48:68:19:31:b1:06:d0:e7:57:c8:b4:2b:86:
af:78:13:70:a3:bd:a8:b5:c8:cc:e9:b4:c4:4e:1a:8b:34:41:
60:bd:36:b5:d7:0f:1a:e5:01:0d:b9:d8:ac:35:86:46:5e:4b:
f8:74:95:79:15:40:f3:41:5d:f9:ec:5c:5b:c6:97:3f:85:32:
e2:9f:2b:98:b3:93:c5:d4:9f:f5:c2:7e:db:dc:8e:51:38:5b:
d1:70:e4:d5
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAYWUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA5MTIxNTQ2WhcNMjUxMTExMTIxNTQ2WjAYMRYw
FAYDVQQDEw02ODQ2ZDA3Ny01ZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwq2ysQnLtmOoXpDmmNe+vGmSP72UQU+mc32Y8dPvN56ByMccsamaQO3l
Qc8m19iaBrCMp4DkuRsmmi4MwW6NxGrgWb3fi9uZ/WWKyz0RJiifcpFBlOewby1U
66bxAn38pjQzo/cLFr5YITEz/pMEVAPSSsbvkXVPcF9VF6P1Ki0InNvKMSgr0PhC
BX2qoG9BX+M4ZzeAnIWjxP088n4I/ZFb/3QSjzdp+E/zLuG6teNmKxgC14RkHN1V
b/Zq+HWmqc19PXjNucfw6wtOSvwrDvxy1/HXFor4g75QSaNMhU/88zD92rddOhPF
0CPKiALYr2JRrSnv+RhJsSV1NMCSGQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFFGj
vLcqRhQmAtXfdNsbtO8MX684MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Qjk1OEUxMjQ1MkIxMUYwOEZGN0ZFOTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEmtIQAwQCmtSEAwQBmtcC
AwQBmt0CAwQDmt0IAwQEmt7gMA0GCSqGSIb3DQEBCwUAA4IBAQBk+Fouq6J54+X3
kWD4Mux6Jle8Bspb5WfFM2/DEZ+OKNBgbzbmYr4ugcgCXqJfReGj6FfFbhtGhNNx
cQsqEDka7iweHbpwjwqqIFstKe96XOSdVY1kvKhvA/1wj7mKbAHAgIij+BlDeVlD
emBZQvABPo13VLioSkC1PFC1x7llU+asLSWqLf8gDCrc1e1jsA8pBHeb+64uqnaE
257lNW3s3qDmChETtUhoGTGxBtDnV8i0K4aveBNwo72otcjM6bTEThqLNEFgvTa1
1w8a5QENudisNYZGXkv4dJV5FUDzQV357Fxbxpc/hTLinyuYs5PF1J/1wn7b3I5R
OFvRcOTV
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:11 2025 by rpki-client