Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADE9A388380311F095F14581DAE4EC9C.roa
File: ADE9A388380311F095F14581DAE4EC9C.roa (raw, json)
Hash identifier: 8mL3c9YOynjlFyliuRwNbS6rCCUt8zJc7E+3vlSkNiY=
Subject key identifier: FB:7A:3A:24:07:D5:1C:F2:B0:48:1A:A2:00:3D:DC:C3:61:D3:77:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018253
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADE9A388380311F095F14581DAE4EC9C.roa
Signing time: Fri 23 May 2025 18:28:11 +0000
ROA not before: Fri 23 May 2025 18:28:06 +0000
ROA not after: Mon 30 Jun 2025 18:28:06 +0000
asID: 401075
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98899 (0x18253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:28:06 2025 GMT
Not After : Jun 30 18:28:06 2025 GMT
Subject: CN=6830be3a-56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:4d:42:66:53:74:a4:d1:70:a6:46:23:c9:
71:57:80:a0:4e:d1:2f:58:f8:01:7c:70:3c:30:b9:
0e:4a:1a:73:9a:24:12:a8:71:0b:fd:76:e9:75:00:
4b:0e:03:57:8b:90:52:c0:e1:55:b3:89:48:46:31:
48:68:54:a7:d3:73:b9:0b:c8:24:6f:84:6e:58:5c:
a0:65:44:9b:c8:ce:2c:99:74:7c:5c:8b:a2:25:80:
e5:44:b0:8a:f7:69:33:50:af:50:96:e6:4f:26:d7:
d5:e6:31:13:be:96:03:16:74:d9:c9:4b:9d:20:26:
8c:0c:bb:c1:92:36:85:48:97:ae:2b:3b:96:f3:cd:
9f:5c:f8:78:ba:48:1f:43:76:55:07:af:55:1e:a9:
f6:b4:fe:af:8a:68:e7:85:42:a2:8b:8d:9c:c7:53:
05:a1:fb:9f:5a:30:10:6e:02:65:d1:98:e9:f0:75:
22:ba:08:a3:eb:33:fe:cf:f2:0d:0a:cd:b0:18:7b:
aa:7e:ad:12:57:53:15:4a:4f:32:2e:a2:e2:f4:3e:
97:17:32:eb:59:3f:67:98:f1:3d:5a:79:09:fb:e6:
a3:45:a8:d7:0e:81:be:78:6c:72:af:fd:14:10:ea:
06:f7:1e:84:d3:5e:5a:f9:6c:07:f6:7f:c0:e5:68:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:3A:24:07:D5:1C:F2:B0:48:1A:A2:00:3D:DC:C3:61:D3:77:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADE9A388380311F095F14581DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
93:92:60:d3:8f:9b:84:ec:39:c4:6f:ca:f2:56:95:07:b9:2b:
0b:07:a1:f9:f3:7e:b6:de:57:48:57:53:fe:18:fd:81:d3:ce:
2d:dd:b0:e2:82:ae:cb:e7:00:e2:f3:51:30:c7:43:db:9d:c9:
72:49:41:f4:a5:e1:73:d3:e3:3c:0b:7d:67:de:b6:30:25:78:
eb:01:eb:e6:68:02:4c:e9:43:12:8e:5c:c5:26:1e:ab:6e:08:
ad:13:7a:98:ce:c2:bb:80:c1:f2:38:e1:d9:02:f1:8b:ad:25:
3b:b1:fb:18:92:f4:3e:2b:8b:81:74:47:f1:4e:e1:e9:5c:97:
09:20:9e:b5:cf:c9:67:06:af:5f:98:2a:6a:4d:bc:1a:f9:6e:
3f:0f:f7:59:67:90:80:aa:29:62:ad:e1:99:3c:5f:90:8c:2d:
6a:39:f0:e5:7f:a0:02:39:e1:f7:66:3b:b8:ac:6a:6b:bd:ab:
b5:d6:d8:b1:64:d8:ce:0d:70:95:8d:1c:5e:34:7c:fd:c0:0e:
e1:e5:53:78:77:08:16:02:2e:97:cb:2c:91:4f:1f:f6:bc:13:
5d:8d:7e:d9:5d:a5:25:e0:ae:69:ef:e9:95:03:92:7e:2f:18:
31:1d:eb:3a:97:c4:c1:d1:d2:86:b4:06:0c:f5:62:17:e8:14:
45:ec:95:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYJTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMTgyODA2WhcNMjUwNjMwMTgyODA2WjAYMRYw
FAYDVQQDEw02ODMwYmUzYS01NmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyd5NQmZTdKTRcKZGI8lxV4CgTtEvWPgBfHA8MLkOShpzmiQSqHEL/Xbp
dQBLDgNXi5BSwOFVs4lIRjFIaFSn03O5C8gkb4RuWFygZUSbyM4smXR8XIuiJYDl
RLCK92kzUK9QluZPJtfV5jETvpYDFnTZyUudICaMDLvBkjaFSJeuKzuW882fXPh4
ukgfQ3ZVB69VHqn2tP6vimjnhUKii42cx1MFofufWjAQbgJl0Zjp8HUiugij6zP+
z/INCs2wGHuqfq0SV1MVSk8yLqLi9D6XFzLrWT9nmPE9WnkJ++ajRajXDoG+eGxy
r/0UEOoG9x6E015a+WwH9n/A5WgmNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPt6
OiQH1RzysEgaogA93MNh03fPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BREU5QTM4ODM4MDMxMUYwOTVGMTQ1ODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsleMA0GCSqGSIb3DQEB
CwUAA4IBAQCTkmDTj5uE7DnEb8ryVpUHuSsLB6H583623ldIV1P+GP2B084t3bDi
gq7L5wDi81Ewx0PbnclySUH0peFz0+M8C31n3rYwJXjrAevmaAJM6UMSjlzFJh6r
bgitE3qYzsK7gMHyOOHZAvGLrSU7sfsYkvQ+K4uBdEfxTuHpXJcJIJ61z8lnBq9f
mCpqTbwa+W4/D/dZZ5CAqilireGZPF+QjC1qOfDlf6ACOeH3Zju4rGprvau11tix
ZNjODXCVjRxeNHz9wA7h5VN4dwgWAi6XyyyRTx/2vBNdjX7ZXaUl4K5p7+mVA5J+
LxgxHes6l8TB0dKGtAYM9WIX6BRF7JXS
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:52:49 2025 by rpki-client