Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/873F048C49DB11F086D694A5DAE4EC9C.roa
File: 873F048C49DB11F086D694A5DAE4EC9C.roa (raw, json)
Hash identifier: dFAQGRyXCG7bxDTTgBmRrVAgpaUbwOBgXqAHIm/fLT8=
Subject key identifier: F2:0E:E7:15:13:17:43:97:16:9B:D8:EC:9B:50:3C:D2:4B:56:87:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/873F048C49DB11F086D694A5DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:26:07 +0000
ROA not before: Sun 15 Jun 2025 11:26:01 +0000
ROA not after: Mon 14 Jul 2025 11:26:01 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100040 (0x186c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 11:26:01 2025 GMT
Not After : Jul 14 11:26:01 2025 GMT
Subject: CN=684eadcf-82d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:fe:cf:54:bf:59:6d:1a:d5:8b:ef:c4:b2:
c3:6a:40:33:1d:0c:8f:0b:1c:2d:79:63:16:f4:1c:
a8:2d:0f:3e:4f:51:b5:d9:c0:da:7a:7b:54:3d:f9:
69:96:3f:dd:f2:10:0d:27:4a:a7:ff:5f:5e:c5:dc:
73:0a:3d:4c:e0:05:63:c7:8a:e4:dc:bf:28:38:58:
7e:49:a4:20:70:20:20:92:3c:3b:51:fd:dc:39:d4:
24:36:1a:50:88:e6:3e:91:81:d0:9e:11:3b:42:69:
d2:ea:45:f3:e3:20:4f:e0:dc:02:54:5d:f5:f9:6a:
29:10:06:85:8b:ef:bf:f1:0a:ef:0d:cb:7e:7d:b1:
2a:b6:74:db:99:e7:91:36:4c:59:0c:ee:2d:f3:38:
db:8e:ea:22:38:4b:83:2f:46:49:29:ee:f0:b5:5d:
cf:d4:2e:73:af:f2:bb:1e:af:2a:85:23:6d:88:2c:
32:04:e8:de:8e:9d:f6:e0:c3:e3:15:a7:14:be:1c:
61:53:9b:88:54:65:30:66:ab:33:d0:43:b8:14:42:
9a:20:12:2e:f0:39:b7:88:11:19:8b:0e:b0:30:cf:
36:42:e6:19:5f:f9:59:e9:98:4f:42:0d:02:89:f9:
b3:91:c8:fc:70:a7:0c:6f:0e:2f:96:81:88:8f:ca:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:E7:15:13:17:43:97:16:9B:D8:EC:9B:50:3C:D2:4B:56:87:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/873F048C49DB11F086D694A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:e0:bc:e8:21:12:ae:ee:ba:34:cc:fd:5a:e1:f8:04:2f:74:
50:6c:1d:e7:16:dc:a7:74:fe:d2:a0:ac:ca:f4:5f:cb:5e:6e:
c2:90:92:1f:86:ed:57:c8:bd:24:8d:cb:47:eb:f7:f9:4b:72:
a5:f5:44:d6:30:41:48:93:e9:b9:87:51:e3:c2:49:d2:36:7a:
60:41:37:ae:41:56:e9:f8:4c:92:4e:a2:ce:d2:2a:1c:44:b2:
54:97:12:62:6e:24:e5:ff:ba:df:e9:79:55:b2:95:2f:11:c0:
4b:2f:26:cb:c2:e0:73:9b:6c:b8:7e:42:d3:8a:9c:d4:c5:a3:
fb:3a:79:54:de:94:dd:18:44:ff:e7:ca:4d:74:a1:23:20:97:
3c:29:28:5d:49:ca:6b:90:09:8c:07:d8:ba:d4:47:79:46:b2:
80:6f:be:7b:74:76:06:8d:5d:35:0e:01:85:33:25:8a:91:88:
80:da:37:8d:55:1d:6e:c4:e7:f2:13:00:cd:13:bb:bf:47:59:
75:e0:9a:d2:3e:b4:e5:38:47:54:c7:25:3a:2e:ca:28:7b:01:
fd:48:0a:6d:48:25:51:c8:f8:ee:d6:12:60:09:85:fe:85:22:
c4:3f:1d:57:e3:da:7b:92:75:0a:f3:20:c1:43:f4:75:23:10:
92:09:1d:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYbIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE1MTEyNjAxWhcNMjUwNzE0MTEyNjAxWjAYMRYw
FAYDVQQDEw02ODRlYWRjZi04MmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1k7+z1S/WW0a1YvvxLLDakAzHQyPCxwteWMW9ByoLQ8+T1G12cDaentU
Pflplj/d8hANJ0qn/19exdxzCj1M4AVjx4rk3L8oOFh+SaQgcCAgkjw7Uf3cOdQk
NhpQiOY+kYHQnhE7QmnS6kXz4yBP4NwCVF31+WopEAaFi++/8QrvDct+fbEqtnTb
meeRNkxZDO4t8zjbjuoiOEuDL0ZJKe7wtV3P1C5zr/K7Hq8qhSNtiCwyBOjejp32
4MPjFacUvhxhU5uIVGUwZqsz0EO4FEKaIBIu8Dm3iBEZiw6wMM82QuYZX/lZ6ZhP
Qg0Cifmzkcj8cKcMbw4vloGIj8q0KwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPIO
5xUTF0OXFpvY7JtQPNJLVofQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NzNGMDQ4QzQ5REIxMUYwODZENjk0QTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQBs4LzoIRKu7ro0zP1a4fgEL3RQbB3nFtyndP7SoKzK9F/LXm7CkJIf
hu1XyL0kjctH6/f5S3Kl9UTWMEFIk+m5h1HjwknSNnpgQTeuQVbp+EySTqLO0ioc
RLJUlxJibiTl/7rf6XlVspUvEcBLLybLwuBzm2y4fkLTipzUxaP7OnlU3pTdGET/
58pNdKEjIJc8KShdScprkAmMB9i61Ed5RrKAb757dHYGjV01DgGFMyWKkYiA2jeN
VR1uxOfyEwDNE7u/R1l14JrSPrTlOEdUxyU6LsooewH9SAptSCVRyPju1hJgCYX+
hSLEPx1X49p7knUK8yDBQ/R1IxCSCR0d
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:13:26 2025 by rpki-client