Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B448875646A111F09049F39ADAE4EC9C.roa
File: B448875646A111F09049F39ADAE4EC9C.roa (raw, json)
Hash identifier: vw+pbrOcFh5HOCZp/z4jiTOyyGn53NUyyX3JqlQ833I=
Subject key identifier: 26:4D:2C:A6:D3:09:8F:77:CD:FD:89:D7:11:17:9D:DB:C3:EF:B2:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B448875646A111F09049F39ADAE4EC9C.roa
Signing time: Wed 11 Jun 2025 08:54:38 +0000
ROA not before: Wed 11 Jun 2025 08:54:33 +0000
ROA not after: Wed 22 Jul 2026 08:54:33 +0000
asID: 45996
IP address blocks: 154.205.2.0/24 maxlen: 24
154.205.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Jun 2025 11:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99838 (0x185fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:54:33 2025 GMT
Not After : Jul 22 08:54:33 2026 GMT
Subject: CN=6849444e-bbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:f0:6d:28:e4:a2:c3:32:ee:f5:88:3c:c0:
b3:37:99:c3:37:4e:8a:61:0a:4e:ef:7a:b4:bd:52:
2e:65:54:04:5c:bb:eb:cf:1e:20:c4:8d:31:b0:f0:
7e:77:2d:3c:de:05:02:d9:03:8d:52:34:64:97:9f:
49:f3:fb:60:32:bf:1d:eb:c4:7e:51:07:66:a8:de:
b5:52:c0:86:75:fe:5d:a2:a6:89:0e:20:6a:e4:0d:
54:3c:88:35:0b:e3:93:1e:ea:ce:50:ab:0e:b4:6f:
70:dd:11:d7:7f:fd:ef:15:22:74:f4:c4:9e:91:69:
3f:69:32:bf:96:89:f7:94:a7:b3:ad:2e:54:1e:c7:
34:09:23:d6:e3:b6:38:f0:57:0e:61:28:60:6b:07:
22:50:7e:10:29:a3:f9:db:f1:b3:70:80:ba:42:40:
c2:f0:81:36:99:92:66:3b:72:31:ff:f1:c3:9a:0b:
20:62:79:6e:06:ec:51:7b:8e:67:71:5f:8b:ef:2f:
c5:7e:cf:84:1c:56:9d:49:2d:78:0d:8d:37:51:1f:
16:ff:99:f2:9c:bb:c8:64:4b:bd:f9:53:b5:51:46:
5b:ea:93:1c:01:a1:7b:0d:8c:48:84:4f:52:47:55:
8a:31:68:9b:3b:61:52:cf:78:4b:22:6f:bb:05:75:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4D:2C:A6:D3:09:8F:77:CD:FD:89:D7:11:17:9D:DB:C3:EF:B2:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B448875646A111F09049F39ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.2.0/23
Signature Algorithm: sha256WithRSAEncryption
20:51:12:88:eb:2a:8b:6f:55:d6:e4:93:4f:83:f4:58:db:cf:
d0:55:3b:2e:02:fb:60:a1:bd:7c:fa:45:83:7b:bf:9a:e1:fc:
fb:b0:4f:13:6c:37:fb:8c:77:b6:d8:65:cd:25:1f:a6:f3:78:
6b:8a:05:fd:01:cd:6f:e3:c0:e7:84:c2:3a:bd:d9:b7:b2:3c:
c6:ce:4e:ba:c1:4d:74:dd:81:0a:55:50:8d:50:bd:02:b0:2c:
fe:63:a4:3f:d4:54:e9:6d:94:21:47:27:3a:0e:1e:6b:15:b1:
f3:d3:02:f5:f9:65:04:2b:a4:f2:81:7d:b3:7c:b2:2a:e5:2f:
9b:bc:e7:ab:bd:a8:58:27:4a:01:ec:26:9c:a6:7c:04:c4:7a:
61:a6:15:2b:84:17:52:a9:30:87:e6:12:1f:c2:39:d8:62:61:
a1:dd:ce:91:2a:3f:e9:4e:87:a8:a4:b6:12:39:10:a4:0f:d1:
0f:46:76:bd:07:6f:e7:5a:1b:8d:3c:ff:52:d9:b4:22:ab:ab:
76:8c:0d:b8:21:b7:8c:c0:e9:a9:6b:91:fb:21:4d:a3:2f:bc:
36:04:8d:6f:a2:82:e2:55:de:2e:22:04:12:c4:eb:cb:35:8a:
e5:a7:67:13:e0:d5:df:16:f5:51:32:73:a1:ef:cb:b2:c2:c0:
bc:f6:92:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYX+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjExMDg1NDMzWhcNMjYwNzIyMDg1NDMzWjAYMRYw
FAYDVQQDEw02ODQ5NDQ0ZS1iYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwzrwbSjkosMy7vWIPMCzN5nDN06KYQpO73q0vVIuZVQEXLvrzx4gxI0x
sPB+dy083gUC2QONUjRkl59J8/tgMr8d68R+UQdmqN61UsCGdf5doqaJDiBq5A1U
PIg1C+OTHurOUKsOtG9w3RHXf/3vFSJ09MSekWk/aTK/lon3lKezrS5UHsc0CSPW
47Y48FcOYShgawciUH4QKaP52/GzcIC6QkDC8IE2mZJmO3Ix//HDmgsgYnluBuxR
e45ncV+L7y/Ffs+EHFadSS14DY03UR8W/5nynLvIZEu9+VO1UUZb6pMcAaF7DYxI
hE9SR1WKMWibO2FSz3hLIm+7BXWJAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCZN
LKbTCY93zf2J1xEXndvD77KyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDQ4ODc1NjQ2QTExMUYwOTA0OUYzOUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0CMA0GCSqGSIb3DQEB
CwUAA4IBAQAgURKI6yqLb1XW5JNPg/RY28/QVTsuAvtgob18+kWDe7+a4fz7sE8T
bDf7jHe22GXNJR+m83hrigX9Ac1v48DnhMI6vdm3sjzGzk66wU103YEKVVCNUL0C
sCz+Y6Q/1FTpbZQhRyc6Dh5rFbHz0wL1+WUEK6TygX2zfLIq5S+bvOervahYJ0oB
7CacpnwExHphphUrhBdSqTCH5hIfwjnYYmGh3c6RKj/pToeopLYSORCkD9EPRna9
B2/nWhuNPP9S2bQiq6t2jA24IbeMwOmpa5H7IU2jL7w2BI1vooLiVd4uIgQSxOvL
NYrlp2cT4NXfFvVRMnOh78uywsC89pKA
-----END CERTIFICATE-----
Generated at Wed Jun 18 14:47:50 2025 by rpki-client