Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E387FC483911F09379A387DAE4EC9C.roa
File: 88E387FC483911F09379A387DAE4EC9C.roa (raw, json)
Hash identifier: bg+lbG+8NZReNtQNPHbbHz02ULC6Gg4B2EkDSh/+6UU=
Subject key identifier: F8:4B:B6:AD:C9:40:FF:40:33:4F:00:D8:7F:93:56:B0:33:75:3B:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018660
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E387FC483911F09379A387DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 09:34:00 +0000
ROA not before: Fri 13 Jun 2025 09:33:54 +0000
ROA not after: Sat 19 Jul 2025 09:33:54 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.200.0/24 maxlen: 24
154.92.201.0/24 maxlen: 24
154.92.202.0/24 maxlen: 24
154.92.203.0/24 maxlen: 24
154.92.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99936 (0x18660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 09:33:54 2025 GMT
Not After : Jul 19 09:33:54 2025 GMT
Subject: CN=684bf088-434c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:d0:9b:6c:d0:1f:53:29:d3:2e:0b:3e:c7:
ae:4b:14:4d:87:f9:81:57:df:ff:cd:b3:8a:ef:21:
40:e2:be:b1:55:d7:df:10:96:5d:23:e0:06:2e:0c:
6d:86:95:d9:4c:c4:27:2d:9b:87:31:4c:38:33:e1:
52:0f:32:3a:54:75:54:c6:65:6c:fa:01:cc:cd:f1:
f3:d4:ec:8c:02:ee:e9:40:ed:53:2e:8c:db:1a:e1:
87:bc:84:5a:a1:e0:89:53:35:9a:92:05:3f:63:80:
57:52:ee:9b:00:83:92:07:ac:ad:b3:13:f6:0f:1b:
c0:e7:bb:61:1e:e2:fa:62:c8:7f:66:b0:ee:cc:ca:
2b:f4:3a:04:9f:52:7f:7b:51:27:43:f5:00:a6:78:
07:02:46:08:61:c9:5e:4e:ff:de:96:6f:18:ae:42:
3c:dd:0b:5d:01:98:35:b6:66:dc:39:a4:ed:04:ae:
f9:2c:62:27:71:fb:64:89:ae:56:59:f5:5d:73:22:
1e:9f:ec:1f:07:0d:99:98:f6:3a:bb:7c:05:00:f3:
5c:14:7d:2c:70:70:3c:7f:62:58:f5:6d:73:8e:ae:
7c:0f:4c:ba:21:9b:79:07:4f:73:00:a0:a6:3e:b1:
1e:d6:5d:0e:a6:84:19:4f:a0:d3:fb:b3:07:77:73:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4B:B6:AD:C9:40:FF:40:33:4F:00:D8:7F:93:56:B0:33:75:3B:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88E387FC483911F09379A387DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
154.92.200.0-154.92.204.255
Signature Algorithm: sha256WithRSAEncryption
a6:62:5e:28:2f:2d:3d:ee:8d:eb:dc:77:11:a8:39:4a:94:1a:
ab:c4:6b:61:93:2f:71:28:42:d0:69:69:b8:56:d4:41:a4:f3:
46:95:59:dd:3a:01:a7:48:e5:fe:2a:d0:02:cb:25:ed:fd:8f:
57:5e:76:29:da:75:cc:5d:bf:84:55:11:2e:37:66:d3:ed:e6:
80:4a:4f:65:48:c9:02:1f:cf:9e:af:b2:35:6a:e5:ab:ed:6c:
d7:c1:25:5f:8f:14:27:ee:53:bd:6b:70:7d:2e:4f:c5:64:ac:
3b:d9:69:56:b6:db:01:87:6c:4d:7a:30:02:42:64:4f:ea:ca:
8f:03:b2:49:9c:d9:c8:ab:57:ee:7f:0f:61:74:c3:e4:4b:bc:
3f:66:c2:15:83:e1:18:f3:0a:ce:73:30:1e:0c:0f:63:8f:82:
65:34:79:93:8a:b0:b3:6c:e1:96:0a:d8:c0:f6:44:64:ac:f6:
1e:d3:ce:48:88:05:b2:0f:c3:ae:4a:7b:a0:2a:64:67:9a:f3:
d9:0e:14:64:08:17:7f:96:e1:26:ed:c3:4b:a6:65:e1:18:46:
1d:cc:66:b1:95:bd:2f:ae:1d:76:4d:59:22:5c:9d:a9:b4:2a:
c8:55:71:32:33:24:a9:ba:8c:6e:7f:c2:d5:14:0c:c2:ac:c3:
03:8a:cb:c2
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAYZgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjEzMDkzMzU0WhcNMjUwNzE5MDkzMzU0WjAYMRYw
FAYDVQQDEw02ODRiZjA4OC00MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAulLQm2zQH1Mp0y4LPseuSxRNh/mBV9//zbOK7yFA4r6xVdffEJZdI+AG
LgxthpXZTMQnLZuHMUw4M+FSDzI6VHVUxmVs+gHMzfHz1OyMAu7pQO1TLozbGuGH
vIRaoeCJUzWakgU/Y4BXUu6bAIOSB6ytsxP2DxvA57thHuL6Ysh/ZrDuzMor9DoE
n1J/e1EnQ/UApngHAkYIYcleTv/elm8YrkI83QtdAZg1tmbcOaTtBK75LGIncftk
ia5WWfVdcyIen+wfBw2ZmPY6u3wFAPNcFH0scHA8f2JY9W1zjq58D0y6IZt5B09z
AKCmPrEe1l0OpoQZT6DT+7MHd3MSVwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFPhL
tq3JQP9AM08A2H+TVrAzdTuFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OEUzODdGQzQ4MzkxMUYwOTM3OUEzODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAaaXMADBACaXMYwDAME
A5pcyAMEAJpczDANBgkqhkiG9w0BAQsFAAOCAQEApmJeKC8tPe6N69x3Eag5SpQa
q8RrYZMvcShC0GlpuFbUQaTzRpVZ3ToBp0jl/irQAssl7f2PV152Kdp1zF2/hFUR
Ljdm0+3mgEpPZUjJAh/Pnq+yNWrlq+1s18ElX48UJ+5TvWtwfS5PxWSsO9lpVrbb
AYdsTXowAkJkT+rKjwOySZzZyKtX7n8PYXTD5Eu8P2bCFYPhGPMKznMwHgwPY4+C
ZTR5k4qws2zhlgrYwPZEZKz2HtPOSIgFsg/Drkp7oCpkZ5rz2Q4UZAgXf5bhJu3D
S6Zl4RhGHcxmsZW9L64ddk1ZIlydqbQqyFVxMjMkqbqMbn/C1RQMwqzDA4rLwg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:07:44 2025 by rpki-client