Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A989221A49CD11F08ABB58CCDAE4EC9C.roa
File: A989221A49CD11F08ABB58CCDAE4EC9C.roa (raw, json)
Hash identifier: iz3OTtuj6EkBnjoc6ZLZtfacquQPxHXaFxPr8nkBTSM=
Subject key identifier: 29:94:F7:64:11:85:99:8F:56:70:8D:86:85:AC:E1:C4:C1:A8:E1:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A989221A49CD11F08ABB58CCDAE4EC9C.roa
Signing time: Sun 15 Jun 2025 09:46:51 +0000
ROA not before: Sun 15 Jun 2025 09:46:46 +0000
ROA not after: Sun 22 Jun 2025 09:46:46 +0000
asID: 134687
IP address blocks: 154.197.36.0/24 maxlen: 24
154.197.37.0/24 maxlen: 24
154.197.38.0/24 maxlen: 24
154.197.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100016 (0x186b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 09:46:46 2025 GMT
Not After : Jun 22 09:46:46 2025 GMT
Subject: CN=684e968b-3152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:cf:00:40:de:a2:93:7a:f9:14:41:78:f8:
7e:e8:48:d6:89:e5:4f:61:73:e5:d8:4e:a6:58:0d:
83:e1:79:48:87:ab:ed:68:de:ca:20:27:0a:fc:31:
99:bd:7d:1b:20:f2:69:31:90:55:8d:b9:c3:71:12:
28:d0:05:16:cb:75:60:57:c6:91:0e:43:23:6d:1b:
df:0f:8c:ef:d7:28:82:ce:3b:b2:ac:32:5e:9f:e6:
1e:c9:db:f6:70:45:4a:a2:57:f7:55:03:66:00:35:
97:62:d8:db:8b:ab:d4:07:7d:08:b3:6d:f1:c3:b8:
6d:ed:25:ea:a1:67:d4:e6:bd:09:32:87:7d:f6:96:
9f:1e:7d:26:8b:08:fc:1b:fd:c2:e5:5b:c1:10:86:
be:c9:65:a9:b7:01:01:28:98:60:18:6a:9a:9a:cd:
c3:7a:c5:78:da:e3:0b:a5:ab:73:23:05:29:62:2c:
84:19:6a:b4:69:da:81:42:e1:8d:ac:88:6b:a3:58:
2c:a0:16:90:e9:a5:a2:92:1b:ee:20:94:d9:f5:b5:
2a:5a:40:fe:2e:dd:ab:a6:52:b0:51:10:42:80:1c:
76:02:30:64:3d:df:1f:20:08:61:ff:15:fb:24:0e:
04:56:d1:37:cf:27:50:b3:f3:1e:b1:d2:47:de:2e:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:F7:64:11:85:99:8F:56:70:8D:86:85:AC:E1:C4:C1:A8:E1:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A989221A49CD11F08ABB58CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.36.0/22
Signature Algorithm: sha256WithRSAEncryption
43:dc:0d:d0:c2:1d:49:66:cb:d0:c6:a6:a9:d1:96:45:d4:78:
83:29:8f:21:fa:01:ec:ae:48:ce:3b:83:13:c8:de:ab:e9:5e:
c8:e2:3c:96:2c:80:69:b7:05:38:90:3d:2e:ec:db:71:13:b5:
f4:22:a4:aa:dc:58:a4:09:e4:96:4d:d4:46:30:f5:ce:4e:60:
bf:47:b8:06:cf:54:56:e3:5b:e2:e9:c4:e6:28:a3:f9:d2:bb:
58:9a:ca:b0:a9:61:c3:78:0e:7e:74:df:56:b1:7c:e4:0e:d6:
5c:eb:8c:df:97:3d:79:92:a0:4a:99:30:10:1d:7d:0e:6a:c4:
47:3a:11:77:b6:70:a2:c8:25:d0:2a:27:c1:17:e0:9f:9a:f3:
e5:de:3a:8c:f3:6d:cb:f3:54:53:e3:61:0a:46:74:9e:e3:33:
28:b5:79:60:51:13:af:c1:79:3d:f8:50:af:65:83:a2:28:3a:
44:8d:6b:56:cf:aa:7a:2d:3d:03:f5:31:6c:a4:7f:9a:0f:36:
31:4a:71:26:b1:7e:ae:f3:f8:f2:50:bd:81:af:1d:99:66:41:
ab:73:b8:bb:51:52:5b:58:15:80:93:85:d0:9e:af:10:e6:5b:
53:cc:0e:0a:05:bd:d0:cc:4b:09:b6:bb:ed:f4:a4:42:d3:bd:
17:8a:7d:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYawMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE1MDk0NjQ2WhcNMjUwNjIyMDk0NjQ2WjAYMRYw
FAYDVQQDEw02ODRlOTY4Yi0zMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArbnPAEDeopN6+RRBePh+6EjWieVPYXPl2E6mWA2D4XlIh6vtaN7KICcK
/DGZvX0bIPJpMZBVjbnDcRIo0AUWy3VgV8aRDkMjbRvfD4zv1yiCzjuyrDJen+Ye
ydv2cEVKolf3VQNmADWXYtjbi6vUB30Is23xw7ht7SXqoWfU5r0JMod99pafHn0m
iwj8G/3C5VvBEIa+yWWptwEBKJhgGGqams3DesV42uMLpatzIwUpYiyEGWq0adqB
QuGNrIhro1gsoBaQ6aWikhvuIJTZ9bUqWkD+Lt2rplKwURBCgBx2AjBkPd8fIAhh
/xX7JA4EVtE3zydQs/MesdJH3i6fxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCmU
92QRhZmPVnCNhoWs4cTBqOH/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTg5MjIxQTQ5Q0QxMUYwOEFCQjU4Q0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsUkMA0GCSqGSIb3DQEB
CwUAA4IBAQBD3A3Qwh1JZsvQxqap0ZZF1HiDKY8h+gHsrkjOO4MTyN6r6V7I4jyW
LIBptwU4kD0u7NtxE7X0IqSq3FikCeSWTdRGMPXOTmC/R7gGz1RW41vi6cTmKKP5
0rtYmsqwqWHDeA5+dN9WsXzkDtZc64zflz15kqBKmTAQHX0OasRHOhF3tnCiyCXQ
KifBF+CfmvPl3jqM823L81RT42EKRnSe4zMotXlgUROvwXk9+FCvZYOiKDpEjWtW
z6p6LT0D9TFspH+aDzYxSnEmsX6u8/jyUL2Brx2ZZkGrc7i7UVJbWBWAk4XQnq8Q
5ltTzA4KBb3QzEsJtrvt9KRC070Xin0u
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:25:49 2025 by rpki-client