Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911B79EC45D311F08C3B39DDDAE4EC9C.roa
File: 911B79EC45D311F08C3B39DDDAE4EC9C.roa (raw, json)
Hash identifier: BqmuearvaFkupRQYGzc30nwfTLQTAWFtAPnpd7oAqlc=
Subject key identifier: 11:8D:12:E1:F8:44:C8:A7:C8:E6:7B:CF:83:AF:50:DD:7E:5D:C9:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911B79EC45D311F08C3B39DDDAE4EC9C.roa
Signing time: Tue 10 Jun 2025 08:19:03 +0000
ROA not before: Tue 10 Jun 2025 08:18:57 +0000
ROA not after: Wed 10 Jun 2026 08:18:57 +0000
asID: 214432
IP address blocks: 154.193.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99753 (0x185a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 08:18:57 2025 GMT
Not After : Jun 10 08:18:57 2026 GMT
Subject: CN=6847ea77-d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:34:a4:f8:ee:9f:53:47:e1:d0:c8:25:f4:
f8:a9:f7:65:db:bf:26:f4:cc:e2:61:cf:5b:e4:94:
56:97:86:06:94:5d:31:a0:17:38:3d:3d:10:2b:e0:
eb:03:61:ed:71:ba:f2:fc:ef:73:08:94:cc:3f:c6:
b1:cf:90:93:68:c4:73:e3:15:37:4e:f3:36:de:a7:
0f:0d:48:d7:8e:de:17:df:30:3b:70:a4:70:4b:75:
a6:d6:0b:11:38:5b:93:4b:45:87:29:0b:19:d1:e7:
78:18:df:9b:11:bd:fc:b4:5e:38:38:c3:aa:99:33:
e0:f7:ed:a7:6f:72:43:d5:85:dd:56:1f:a8:02:b7:
e0:ff:a3:10:d8:ac:e6:80:35:87:e0:a7:81:9c:df:
32:d3:f8:ae:e3:74:af:3b:a8:a0:04:32:61:d3:42:
4e:8f:d6:76:af:62:9c:e3:f5:65:56:e8:1b:81:04:
d4:57:ed:17:5c:32:0d:83:3b:c5:6f:b3:33:e1:4d:
77:68:fc:82:07:b2:de:52:eb:d0:f3:c6:04:74:56:
1f:86:07:d5:e7:28:cd:fa:b6:9e:5b:fc:fd:f8:fd:
29:c4:3e:ab:21:c5:bc:05:ac:e2:f2:54:6e:19:e2:
5e:ff:06:b4:ec:63:3b:43:fb:98:ac:70:d6:cd:fe:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8D:12:E1:F8:44:C8:A7:C8:E6:7B:CF:83:AF:50:DD:7E:5D:C9:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911B79EC45D311F08C3B39DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4c:fe:c3:66:95:cc:39:06:1d:e7:e9:4f:b7:26:52:6a:d8:
bf:72:6c:00:59:48:62:36:d8:e9:fd:6b:d4:e5:f7:b3:e3:c1:
21:30:34:de:74:25:bf:6d:7d:39:4d:07:51:87:97:30:4f:d8:
3a:a4:e6:38:f9:6f:d1:19:e5:1f:2b:34:73:9b:08:aa:8e:5b:
90:aa:9d:03:5a:3d:83:a5:4f:2f:bb:4d:e4:3c:25:c8:c8:55:
28:5a:c5:66:ca:98:5e:9c:d0:8d:fb:56:b1:6c:b8:c8:ab:2a:
89:63:16:88:49:1d:e9:a5:13:42:e7:a2:cf:a8:f1:c0:92:49:
ce:a7:3c:00:74:50:74:cf:a8:0f:e0:ae:ec:00:f2:e9:33:b3:
a7:2b:92:41:54:d9:fe:f9:82:37:5e:8d:e7:45:be:63:ed:6a:
c1:6e:1a:8a:5f:4c:67:83:9d:3b:b9:a6:fe:f8:9c:40:24:3a:
3e:94:75:5b:7c:9e:6a:1f:4a:b6:22:88:69:05:31:53:fd:9a:
ae:a7:10:cd:cc:6c:d7:04:f0:9c:f4:15:05:d6:f7:67:7f:a1:
34:72:8e:ae:fb:03:b0:37:9d:f2:47:ab:e4:8a:84:bc:fd:af:
be:f1:c4:8a:72:02:1b:f1:7d:73:4d:e2:83:f3:0a:6b:b4:2b:
f8:20:7c:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYWpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjEwMDgxODU3WhcNMjYwNjEwMDgxODU3WjAYMRYw
FAYDVQQDEw02ODQ3ZWE3Ny1kNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtw0pPjun1NH4dDIJfT4qfdl278m9MziYc9b5JRWl4YGlF0xoBc4PT0Q
K+DrA2Htcbry/O9zCJTMP8axz5CTaMRz4xU3TvM23qcPDUjXjt4X3zA7cKRwS3Wm
1gsROFuTS0WHKQsZ0ed4GN+bEb38tF44OMOqmTPg9+2nb3JD1YXdVh+oArfg/6MQ
2KzmgDWH4KeBnN8y0/iu43SvO6igBDJh00JOj9Z2r2Kc4/VlVugbgQTUV+0XXDIN
gzvFb7Mz4U13aPyCB7LeUuvQ88YEdFYfhgfV5yjN+raeW/z9+P0pxD6rIcW8Bazi
8lRuGeJe/wa07GM7Q/uYrHDWzf6ePwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBGN
EuH4RMinyOZ7z4OvUN1+XcnnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTFCNzlFQzQ1RDMxMUYwOEMzQjM5REREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsH3MA0GCSqGSIb3DQEB
CwUAA4IBAQBfTP7DZpXMOQYd5+lPtyZSati/cmwAWUhiNtjp/WvU5fez48EhMDTe
dCW/bX05TQdRh5cwT9g6pOY4+W/RGeUfKzRzmwiqjluQqp0DWj2DpU8vu03kPCXI
yFUoWsVmyphenNCN+1axbLjIqyqJYxaISR3ppRNC56LPqPHAkknOpzwAdFB0z6gP
4K7sAPLpM7OnK5JBVNn++YI3Xo3nRb5j7WrBbhqKX0xng507uab++JxAJDo+lHVb
fJ5qH0q2IohpBTFT/ZqupxDNzGzXBPCc9BUF1vdnf6E0co6u+wOwN53yR6vkioS8
/a++8cSKcgIb8X1zTeKD8wprtCv4IHyN
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:51:04 2025 by rpki-client