Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4373BB63E2E11F0B6D1DCA8DAE4EC9C.roa
File: B4373BB63E2E11F0B6D1DCA8DAE4EC9C.roa (raw, json)
Hash identifier: G62yHzY/L+grM6WquHBG2fKVWnoLvf1GcwbWoMX7JHQ=
Subject key identifier: 89:F5:B4:6C:0A:76:BA:09:67:79:22:BC:E7:27:19:0A:46:34:2F:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01841C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4373BB63E2E11F0B6D1DCA8DAE4EC9C.roa
Signing time: Sat 31 May 2025 14:51:16 +0000
ROA not before: Sat 31 May 2025 14:51:11 +0000
ROA not after: Mon 07 Jul 2025 14:51:11 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99356 (0x1841c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 14:51:11 2025 GMT
Not After : Jul 7 14:51:11 2025 GMT
Subject: CN=683b1764-c2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:e6:8f:23:c5:e9:2a:6b:9b:b1:13:83:5b:
cf:26:7b:d4:04:38:5c:56:a1:aa:48:4c:61:f7:c8:
82:b0:e8:31:5e:e6:d0:d0:0a:24:c0:72:19:90:9c:
36:9e:ac:a7:4c:38:4d:67:4c:c7:2f:0b:c0:9f:25:
dd:7c:1f:26:2a:81:9d:82:6f:8d:02:d1:06:eb:bb:
d6:30:ae:34:57:0e:0c:4c:3b:f8:89:b9:ee:26:41:
44:e1:4c:57:7a:25:00:fc:87:a0:89:67:ed:7a:43:
81:94:21:e1:f7:cd:79:51:04:f9:b5:e3:58:1c:9f:
06:ce:4c:b1:a2:a8:0d:0a:82:35:c9:cb:fd:be:d1:
64:87:f7:da:cc:47:de:9c:97:49:1f:44:11:ac:51:
7a:28:ab:3b:5f:89:69:06:54:58:e8:9a:98:7b:d1:
32:58:82:01:a3:a6:1e:38:2d:8e:f9:d0:82:42:a8:
01:6f:e5:23:3a:72:57:44:b1:39:d9:81:5f:25:81:
83:62:3b:62:73:81:13:07:0c:17:8b:3d:ff:bd:7d:
f0:8d:b7:fc:44:97:bd:b8:b8:6b:89:0f:02:fb:9e:
91:50:c1:6c:2e:36:45:1f:3e:5b:76:b4:07:2a:31:
d2:fc:8a:24:61:f2:d3:78:ea:85:30:31:17:53:0e:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:B4:6C:0A:76:BA:09:67:79:22:BC:E7:27:19:0A:46:34:2F:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4373BB63E2E11F0B6D1DCA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:af:5a:f8:2e:5b:5e:5c:9c:31:9c:b1:a3:1c:ea:6b:b7:37:
91:4c:96:ce:ab:e0:35:3c:cd:3c:7b:05:11:f2:ca:63:d5:25:
77:ad:75:04:e4:2e:ea:a1:88:5d:74:a3:a1:4f:f4:7d:a1:4b:
dd:c6:d6:bb:a9:9d:d1:08:ef:64:32:65:7b:4d:0e:8a:da:46:
c5:d0:00:c0:b4:6e:28:73:09:45:ed:7c:97:9c:d3:02:0e:3c:
c3:f9:b7:52:2e:38:cf:92:c5:59:98:11:17:44:c1:35:91:cc:
84:59:7a:bd:53:78:ce:20:22:3b:84:be:0f:c8:a9:5d:68:ff:
68:31:ea:23:a7:76:4d:54:bd:a0:8d:dc:1a:9c:ee:d2:86:d7:
73:1f:9d:d9:b1:d4:ea:0d:16:0f:ae:fe:cf:98:10:64:e1:4a:
b5:35:fd:3f:ea:f2:20:90:fe:1a:13:c6:21:b7:13:af:ed:96:
56:eb:89:80:7c:8b:df:60:74:6f:63:ae:a9:97:5f:d7:2a:bf:
ed:12:6c:23:e0:b9:9f:35:8d:4c:0d:f0:9d:ba:84:b3:88:9f:
7f:3b:3e:11:f4:ec:89:89:b1:a2:c5:54:54:dd:8c:ec:59:2d:
e7:19:05:dc:cf:16:5c:35:4f:89:ce:17:a4:14:2e:5c:22:32:
34:24:47:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYQcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMxMTQ1MTExWhcNMjUwNzA3MTQ1MTExWjAYMRYw
FAYDVQQDEw02ODNiMTc2NC1jMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAryjmjyPF6Sprm7ETg1vPJnvUBDhcVqGqSExh98iCsOgxXubQ0AokwHIZ
kJw2nqynTDhNZ0zHLwvAnyXdfB8mKoGdgm+NAtEG67vWMK40Vw4MTDv4ibnuJkFE
4UxXeiUA/IegiWftekOBlCHh9815UQT5teNYHJ8GzkyxoqgNCoI1ycv9vtFkh/fa
zEfenJdJH0QRrFF6KKs7X4lpBlRY6JqYe9EyWIIBo6YeOC2O+dCCQqgBb+UjOnJX
RLE52YFfJYGDYjtic4ETBwwXiz3/vX3wjbf8RJe9uLhriQ8C+56RUMFsLjZFHz5b
drQHKjHS/IokYfLTeOqFMDEXUw49uwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIn1
tGwKdroJZ3kivOcnGQpGNC/3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDM3M0JCNjNFMkUxMUYwQjZEMURDQThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtr1r4LlteXJwxnLGjHOprtzeRTJbOq+A1PM08ewUR8spj1SV3rXUE
5C7qoYhddKOhT/R9oUvdxta7qZ3RCO9kMmV7TQ6K2kbF0ADAtG4ocwlF7XyXnNMC
DjzD+bdSLjjPksVZmBEXRME1kcyEWXq9U3jOICI7hL4PyKldaP9oMeojp3ZNVL2g
jdwanO7ShtdzH53ZsdTqDRYPrv7PmBBk4Uq1Nf0/6vIgkP4aE8YhtxOv7ZZW64mA
fIvfYHRvY66pl1/XKr/tEmwj4LmfNY1MDfCduoSziJ9/Oz4R9OyJibGixVRU3Yzs
WS3nGQXczxZcNU+JzhekFC5cIjI0JEdz
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:10:24 2025 by rpki-client