Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A83AA8414111F0ADD74CA5DAE4EC9C.roa
File: 91A83AA8414111F0ADD74CA5DAE4EC9C.roa (raw, json)
Hash identifier: MiM8K0wajC2lLN7Ixtx1WwJWhMt/yw1Njmr5MyMyNq0=
Subject key identifier: C6:41:0D:29:21:14:49:62:8D:4A:5F:0A:C9:4A:9D:1B:73:8C:A4:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A83AA8414111F0ADD74CA5DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 12:43:52 +0000
ROA not before: Wed 04 Jun 2025 12:43:47 +0000
ROA not after: Tue 15 Jul 2025 12:43:47 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99550 (0x184de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 12:43:47 2025 GMT
Not After : Jul 15 12:43:47 2025 GMT
Subject: CN=68403f88-6db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:45:c8:9d:44:be:7e:86:d3:86:07:2d:eb:
89:a9:7d:86:65:2c:f8:3f:d9:29:dc:c3:f1:20:0c:
55:7a:8e:5c:33:b6:00:39:6f:ab:19:f0:a2:cc:dc:
37:25:af:a5:a9:ac:2b:fd:d4:68:17:64:67:53:32:
30:8a:27:a7:8a:5b:63:36:1d:53:de:75:34:1b:d3:
6c:e4:e0:51:1a:db:c4:d3:a5:f8:3d:28:13:9a:42:
c6:9e:6d:14:39:ca:fe:dd:20:8f:26:39:84:9a:f2:
9e:f7:7b:c3:e3:24:ea:c7:d1:8c:04:e5:62:2a:bd:
ae:84:1a:dc:96:b7:3c:cc:a9:6c:46:84:6d:b4:86:
f7:f5:10:c1:20:d4:39:3d:0b:a5:1f:af:1e:62:ff:
f0:5f:61:fd:fc:f2:41:8a:17:86:be:73:c6:b4:fe:
69:2b:89:6b:e1:10:5b:29:f7:52:e1:e7:c6:33:72:
e8:7c:c7:8c:a6:5a:70:94:21:74:0c:e7:4f:37:4c:
21:63:d3:75:df:c9:87:94:6b:c8:59:87:96:ea:28:
83:39:dd:40:a2:49:a8:7f:b3:86:3e:55:c7:50:f5:
fd:4f:c2:d5:bc:4c:10:4d:e6:c9:57:96:46:cb:e3:
dc:c4:f7:87:72:85:8a:40:31:ea:a0:c4:fb:88:1b:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:0D:29:21:14:49:62:8D:4A:5F:0A:C9:4A:9D:1B:73:8C:A4:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A83AA8414111F0ADD74CA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:94:d9:d3:92:86:aa:da:ea:00:d3:3a:6b:52:81:cf:b1:ca:
51:60:de:20:60:c3:b7:f4:cf:30:5b:5e:80:58:60:db:9f:04:
36:f4:41:d8:41:a9:f4:bc:21:60:c7:d4:f5:e4:70:da:63:ac:
03:96:46:75:2a:6f:7d:ec:89:cf:89:f9:3a:57:3d:1d:a4:fd:
ed:d6:d5:df:b7:fb:79:1f:e6:59:49:97:8a:43:c8:46:eb:bb:
13:d4:be:10:17:9f:dd:b8:09:b4:dc:0d:3c:87:9b:ad:fa:23:
76:d2:f1:f0:13:7f:20:8d:cd:31:57:61:2b:ed:d9:87:76:59:
2f:21:01:e4:5c:7f:cb:59:a9:24:32:ea:dd:ad:78:12:8a:2c:
f3:2e:fd:b0:7f:be:a3:23:fa:86:11:ed:20:ad:fd:5a:60:33:
8c:eb:d8:fd:80:3c:3c:ae:b0:1d:ae:98:60:89:1c:87:44:3c:
75:79:3b:25:59:22:57:2e:76:17:f9:05:25:8d:b8:a2:62:88:
e4:13:69:00:7b:f5:04:0a:30:bb:04:6d:6b:51:31:dd:af:53:
63:ea:92:be:cd:d5:2a:56:6e:59:22:d2:97:03:e3:c6:77:65:
7e:4a:27:70:47:4f:b7:55:96:44:6a:ee:58:24:92:cf:3d:49:
28:1c:9b:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYTeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA0MTI0MzQ3WhcNMjUwNzE1MTI0MzQ3WjAYMRYw
FAYDVQQDEw02ODQwM2Y4OC02ZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jFFyJ1Evn6G04YHLeuJqX2GZSz4P9kp3MPxIAxVeo5cM7YAOW+rGfCi
zNw3Ja+lqawr/dRoF2RnUzIwiieniltjNh1T3nU0G9Ns5OBRGtvE06X4PSgTmkLG
nm0UOcr+3SCPJjmEmvKe93vD4yTqx9GMBOViKr2uhBrclrc8zKlsRoRttIb39RDB
INQ5PQulH68eYv/wX2H9/PJBiheGvnPGtP5pK4lr4RBbKfdS4efGM3LofMeMplpw
lCF0DOdPN0whY9N138mHlGvIWYeW6iiDOd1Aokmof7OGPlXHUPX9T8LVvEwQTebJ
V5ZGy+PcxPeHcoWKQDHqoMT7iBuWGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMZB
DSkhFElijUpfCslKnRtzjKQTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MUE4M0FBODQxNDExMUYwQURENzRDQTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI5MA0GCSqGSIb3DQEB
CwUAA4IBAQA+lNnTkoaq2uoA0zprUoHPscpRYN4gYMO39M8wW16AWGDbnwQ29EHY
Qan0vCFgx9T15HDaY6wDlkZ1Km997InPifk6Vz0dpP3t1tXft/t5H+ZZSZeKQ8hG
67sT1L4QF5/duAm03A08h5ut+iN20vHwE38gjc0xV2Er7dmHdlkvIQHkXH/LWakk
MurdrXgSiizzLv2wf76jI/qGEe0grf1aYDOM69j9gDw8rrAdrphgiRyHRDx1eTsl
WSJXLnYX+QUljbiiYojkE2kAe/UECjC7BG1rUTHdr1Nj6pK+zdUqVm5ZItKXA+PG
d2V+SidwR0+3VZZEau5YJJLPPUkoHJvn
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:11:29 2025 by rpki-client