Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA62518490C11F086C238E4DAE4EC9C.roa
File: ACA62518490C11F086C238E4DAE4EC9C.roa (raw, json)
Hash identifier: qXh/GKyYrjblqZshl0pWJ9MLNGfzCCtDO8L3hlzFm/c=
Subject key identifier: 0C:5A:08:A0:98:49:C2:7A:33:6D:3C:A3:DA:7E:35:A1:77:7D:DC:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018697
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA62518490C11F086C238E4DAE4EC9C.roa
Signing time: Sat 14 Jun 2025 10:45:24 +0000
ROA not before: Sat 14 Jun 2025 10:45:19 +0000
ROA not after: Fri 25 Jul 2025 10:45:19 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99991 (0x18697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 14 10:45:19 2025 GMT
Not After : Jul 25 10:45:19 2025 GMT
Subject: CN=684d52c4-9345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:8d:92:b3:57:c7:f4:fa:57:89:38:68:fb:
86:e7:99:07:76:a9:eb:d4:cc:d7:32:3c:40:5f:a9:
d4:46:ac:98:90:d0:b7:82:aa:f6:bf:03:ef:9f:af:
ff:84:9d:c7:14:49:ce:8d:35:fd:ba:df:c0:aa:26:
db:df:2a:84:a7:8e:2d:7a:91:1b:56:88:09:e4:04:
92:14:e3:3e:d6:10:53:16:ea:81:d3:7a:0c:a6:54:
4f:f0:87:2d:86:55:da:10:81:12:30:e1:e8:6d:36:
c6:88:ad:83:41:9b:6a:97:80:32:61:ad:43:33:5c:
a0:83:01:0d:9e:ad:53:c1:ba:86:61:7e:67:e1:bb:
a5:9f:ac:8f:50:69:a5:90:ae:52:7c:3c:a8:2b:6e:
21:16:3f:63:e9:0b:97:a6:bb:6b:d7:2b:4a:17:30:
90:c3:1a:51:04:4c:2f:58:aa:76:60:f0:4a:00:1d:
ad:77:bf:fe:84:bc:9b:f8:33:10:1f:5b:b2:ba:8b:
36:70:5a:09:c8:82:2c:5d:bf:d1:29:3c:e5:c3:7a:
93:b5:d4:c0:a8:51:59:8f:18:f4:83:a1:8a:65:ca:
f1:b2:e5:8d:35:07:f6:d3:81:3d:b4:d0:92:f1:59:
5e:6c:09:fa:b1:47:4d:92:6a:b1:f5:f4:df:ec:7e:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:08:A0:98:49:C2:7A:33:6D:3C:A3:DA:7E:35:A1:77:7D:DC:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACA62518490C11F086C238E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:26:93:e0:67:60:1f:50:25:82:fc:0f:76:48:3a:b1:eb:ea:
c2:2c:5b:92:21:e0:17:1f:4c:5e:10:54:d2:f7:45:1c:18:4b:
c3:75:2d:c3:0f:bd:13:79:57:a1:5f:4e:3b:68:06:19:46:52:
c7:7d:0c:8b:76:83:f1:e0:e1:1e:7c:d7:15:d3:8a:05:57:80:
fc:fc:ca:fd:2b:19:09:ee:ed:c4:94:b6:c3:46:41:f4:e7:f7:
c0:04:1a:75:18:5a:b8:91:0c:31:dc:44:33:b7:e9:be:89:48:
5b:80:76:14:36:4b:ec:16:f0:8e:47:a4:7f:8c:be:bd:45:45:
3a:d8:a2:a0:de:35:2e:ed:b5:aa:13:6f:94:2d:bb:44:f9:7a:
d6:bb:db:7b:d8:ee:41:99:87:da:88:f2:03:14:36:9c:ee:8c:
9b:ca:5f:19:15:cf:c4:a5:59:58:c4:f4:25:69:19:3b:27:db:
1d:77:11:d6:b4:61:31:dc:99:16:61:3a:34:e7:2c:89:a7:72:
57:8e:95:2a:a9:27:1c:32:84:c6:24:73:82:53:6b:2a:1d:0b:
4f:ec:fd:bf:08:ea:c6:72:2b:e3:45:7f:30:87:3a:04:16:fd:
2c:60:eb:a4:98:36:ac:29:21:48:ea:10:bd:97:66:28:95:79:
56:0e:87:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYaXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE0MTA0NTE5WhcNMjUwNzI1MTA0NTE5WjAYMRYw
FAYDVQQDEw02ODRkNTJjNC05MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3VCNkrNXx/T6V4k4aPuG55kHdqnr1MzXMjxAX6nURqyYkNC3gqr2vwPv
n6//hJ3HFEnOjTX9ut/Aqibb3yqEp44tepEbVogJ5ASSFOM+1hBTFuqB03oMplRP
8IcthlXaEIESMOHobTbGiK2DQZtql4AyYa1DM1yggwENnq1TwbqGYX5n4buln6yP
UGmlkK5SfDyoK24hFj9j6QuXprtr1ytKFzCQwxpRBEwvWKp2YPBKAB2td7/+hLyb
+DMQH1uyuos2cFoJyIIsXb/RKTzlw3qTtdTAqFFZjxj0g6GKZcrxsuWNNQf204E9
tNCS8VlebAn6sUdNkmqx9fTf7H7InQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAxa
CKCYScJ6M208o9p+NaF3fdypMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQ0E2MjUxODQ5MEMxMUYwODZDMjM4RTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUQMA0GCSqGSIb3DQEB
CwUAA4IBAQDBJpPgZ2AfUCWC/A92SDqx6+rCLFuSIeAXH0xeEFTS90UcGEvDdS3D
D70TeVehX047aAYZRlLHfQyLdoPx4OEefNcV04oFV4D8/Mr9KxkJ7u3ElLbDRkH0
5/fABBp1GFq4kQwx3EQzt+m+iUhbgHYUNkvsFvCOR6R/jL69RUU62KKg3jUu7bWq
E2+ULbtE+XrWu9t72O5BmYfaiPIDFDac7oybyl8ZFc/EpVlYxPQlaRk7J9sddxHW
tGEx3JkWYTo05yyJp3JXjpUqqSccMoTGJHOCU2sqHQtP7P2/COrGcivjRX8whzoE
Fv0sYOukmDasKSFI6hC9l2YolXlWDock
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:39 2025 by rpki-client