Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849A873C490A11F081C7B0D6DAE4EC9C.roa
File: 849A873C490A11F081C7B0D6DAE4EC9C.roa (raw, json)
Hash identifier: Siwi6cqqidg530+mIoMTfTny9/epS4pmIg+Pdd4gomQ=
Subject key identifier: 5D:B7:55:7C:AA:74:57:16:B3:1C:1D:93:91:2D:65:46:DD:31:9D:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01868E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849A873C490A11F081C7B0D6DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:29:58 +0000
ROA not before: Sat 14 Jun 2025 10:29:52 +0000
ROA not after: Sun 22 Jun 2025 10:29:52 +0000
asID: 134687
IP address blocks: 154.93.4.0/24 maxlen: 24
154.93.5.0/24 maxlen: 24
154.93.6.0/24 maxlen: 24
154.93.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99982 (0x1868e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 10:29:52 2025 GMT
Not After : Jun 22 10:29:52 2025 GMT
Subject: CN=684d4f25-cad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:df:ad:d9:09:ce:a5:1e:1c:fb:46:14:e4:
cf:32:00:f0:3d:ec:29:6f:5b:2a:9e:af:1f:89:6a:
92:82:8c:67:4e:46:69:d6:75:23:7b:6a:2f:ca:ef:
cd:ef:79:5e:3d:c8:65:22:3b:5b:06:82:8e:f9:22:
f5:60:b2:30:7e:c2:8c:00:64:f6:91:71:e4:b5:c9:
28:6c:5e:dd:a1:46:ed:a0:e2:04:0d:50:71:79:21:
3b:d0:b6:db:7f:c4:04:7b:18:e1:08:7c:6b:f3:83:
f8:17:50:57:9b:44:30:a6:2e:78:8f:3a:c9:6d:df:
f2:8a:ea:f6:fc:51:93:44:a4:f7:0b:c7:2a:7c:97:
7c:e4:b3:39:f6:33:ad:be:50:d1:23:97:b7:ab:02:
77:02:7f:95:bb:60:e5:d6:b0:65:15:5c:29:df:b4:
46:70:e4:94:4a:74:9c:45:e0:a4:1c:fe:2f:4e:79:
d4:ef:b6:24:84:52:4a:f9:95:08:ec:4c:5c:d8:a1:
e7:3d:5d:66:9e:8f:bf:6d:a1:8c:87:e5:3e:c2:16:
fb:8f:fc:7e:fa:58:f1:ed:ad:c4:2c:50:af:cd:2e:
22:54:47:fb:98:7f:e0:29:d8:ca:fa:34:83:93:11:
45:ac:c9:b6:6e:ad:76:49:c9:00:79:4a:54:8a:03:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:55:7C:AA:74:57:16:B3:1C:1D:93:91:2D:65:46:DD:31:9D:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/849A873C490A11F081C7B0D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:60:0b:9f:ae:6d:5a:b8:c1:9a:f0:a6:b7:f9:e7:62:c2:ca:
29:aa:c5:1f:81:f7:3b:fa:2e:76:5a:10:cb:b6:3f:1e:5c:a9:
97:f0:5f:06:46:e5:81:b8:a5:ec:67:b1:31:1f:e6:d7:41:a7:
4e:02:9e:bb:da:b9:96:9f:63:90:90:d1:34:91:ab:9d:26:09:
8f:7e:43:3e:63:a7:93:f6:f2:6a:dc:00:d0:81:4a:0f:93:00:
1b:ca:90:56:e5:22:f3:cd:2a:fa:4f:10:be:28:34:a6:68:f6:
29:bb:83:9b:51:b3:1c:f7:61:46:56:ae:a2:d8:7d:f0:87:95:
67:96:90:fe:c7:60:82:63:94:0f:26:9a:c6:dc:9e:13:76:a9:
6a:66:a8:b0:05:c3:60:df:51:54:76:bf:16:a9:b1:44:3a:03:
a1:f1:c1:fc:13:0d:15:e8:c1:03:6c:f7:30:9b:11:fe:ea:7d:
2f:8f:15:1e:da:b5:0c:5a:de:23:5f:e2:66:4f:a6:42:71:37:
6b:eb:b5:d9:0d:b9:c3:ea:8d:8c:d9:ae:59:03:2e:28:4a:b8:
68:71:f2:65:59:4a:a9:07:b1:7e:8d:a4:96:75:e9:62:de:72:
4e:01:56:86:e7:ee:a5:d4:3d:eb:18:07:6e:21:c4:5b:4f:82:
c7:cd:dd:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYaOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE0MTAyOTUyWhcNMjUwNjIyMTAyOTUyWjAYMRYw
FAYDVQQDEw02ODRkNGYyNS1jYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4GHfrdkJzqUeHPtGFOTPMgDwPewpb1sqnq8fiWqSgoxnTkZp1nUje2ov
yu/N73lePchlIjtbBoKO+SL1YLIwfsKMAGT2kXHktckobF7doUbtoOIEDVBxeSE7
0Lbbf8QEexjhCHxr84P4F1BXm0Qwpi54jzrJbd/yiur2/FGTRKT3C8cqfJd85LM5
9jOtvlDRI5e3qwJ3An+Vu2Dl1rBlFVwp37RGcOSUSnScReCkHP4vTnnU77YkhFJK
+ZUI7Exc2KHnPV1mno+/baGMh+U+whb7j/x++ljx7a3ELFCvzS4iVEf7mH/gKdjK
+jSDkxFFrMm2bq12SckAeUpUigOK7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF23
VXyqdFcWsxwdk5EtZUbdMZ3ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDlBODczQzQ5MEExMUYwODFDN0IwRDZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCml0EMA0GCSqGSIb3DQEB
CwUAA4IBAQCzYAufrm1auMGa8Ka3+ediwsopqsUfgfc7+i52WhDLtj8eXKmX8F8G
RuWBuKXsZ7ExH+bXQadOAp672rmWn2OQkNE0kaudJgmPfkM+Y6eT9vJq3ADQgUoP
kwAbypBW5SLzzSr6TxC+KDSmaPYpu4ObUbMc92FGVq6i2H3wh5VnlpD+x2CCY5QP
JprG3J4TdqlqZqiwBcNg31FUdr8WqbFEOgOh8cH8Ew0V6MEDbPcwmxH+6n0vjxUe
2rUMWt4jX+JmT6ZCcTdr67XZDbnD6o2M2a5ZAy4oSrhocfJlWUqpB7F+jaSWdeli
3nJOAVaG5+6l1D3rGAduIcRbT4LHzd2X
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:55:33 2025 by rpki-client