Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06EAB6449DA11F08CEF03A1DAE4EC9C.roa
File: C06EAB6449DA11F08CEF03A1DAE4EC9C.roa (raw, json)
Hash identifier: LVjrnAB+ep9E9wnUG1bH4KZ/fQbfeeQjYaLBdOz0Ztg=
Subject key identifier: 5A:A9:93:20:0E:EE:B2:5F:5C:97:C2:7D:3A:CC:C3:8C:04:B5:7E:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06EAB6449DA11F08CEF03A1DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 11:20:33 +0000
ROA not before: Sun 15 Jun 2025 11:20:28 +0000
ROA not after: Mon 14 Jul 2025 11:20:28 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 12:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100038 (0x186c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 11:20:28 2025 GMT
Not After : Jul 14 11:20:28 2025 GMT
Subject: CN=684eac81-5e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:32:50:8b:49:68:e0:38:33:ea:f1:d9:4f:
f7:bb:05:d1:d2:64:a1:14:f7:39:2b:75:cc:6e:7e:
20:8d:34:0f:4a:41:dc:0f:ac:47:1f:ae:23:cd:da:
6c:4c:2a:03:ab:13:11:f3:e0:55:51:31:ee:69:ff:
a6:56:34:7b:fd:2a:94:c1:4d:55:0e:83:df:27:50:
17:e5:71:14:3b:94:a7:a8:16:1f:36:cd:0b:31:1a:
79:71:af:05:c7:6f:5b:94:04:ff:e9:37:f4:48:03:
5a:4c:e8:8d:5b:f5:f2:c2:6e:18:4e:21:ce:ac:92:
49:b9:b2:89:6e:a2:15:9e:a4:28:db:ab:0f:62:6f:
10:fe:33:47:0d:4f:ee:25:c2:4f:aa:3f:be:b0:27:
f3:1c:f5:07:43:ff:a1:a0:81:f3:8f:47:47:ec:dc:
8d:b1:dd:9f:e4:ff:0d:7e:c9:ac:ca:c1:08:f8:a9:
e9:de:cd:72:db:84:b4:cf:ca:0c:5e:a7:56:65:5b:
ee:af:91:8d:8f:ef:ca:90:c9:e1:29:63:a9:17:ed:
d8:03:73:36:06:1f:66:a2:85:7e:5f:c8:c1:1f:85:
b3:80:7b:ee:44:7d:26:8c:0a:15:f0:89:8c:b2:44:
c9:db:ac:e7:e4:6f:ba:71:a4:9c:fd:65:42:60:de:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:93:20:0E:EE:B2:5F:5C:97:C2:7D:3A:CC:C3:8C:04:B5:7E:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06EAB6449DA11F08CEF03A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:34:85:6e:8c:b5:70:6a:90:a8:a6:2b:15:db:4b:00:94:a1:
e5:13:c8:cf:36:69:93:2d:61:68:83:53:11:37:e9:10:c5:d5:
26:17:43:52:f6:31:33:b8:03:34:be:bc:9c:1e:62:0b:96:7b:
e7:33:59:32:f8:8a:cc:0f:c6:3d:9a:61:20:4f:62:af:e9:54:
94:1a:69:dd:27:e6:dd:dd:e6:e9:d4:3d:e0:12:37:a2:da:38:
49:c4:26:e9:c2:79:a6:87:b1:01:33:e5:ae:25:2e:c6:43:8c:
c5:66:20:0d:74:d3:84:40:e8:d6:d4:e7:3e:ca:55:8c:4e:1b:
67:85:e6:f4:ce:f1:87:3d:bc:d6:c8:aa:db:d6:34:d9:26:c4:
93:28:02:19:4c:50:45:6b:07:13:fc:7c:bb:ae:74:ca:8f:89:
72:ae:b3:f2:39:7c:67:a5:30:4b:a0:7f:0c:d7:52:ab:b7:aa:
c6:53:9c:48:7a:04:46:2b:e4:0d:a0:4b:f3:80:5d:fc:1a:ae:
a7:52:ed:da:a9:c7:af:88:eb:28:a6:ba:1e:45:61:ea:a0:a6:
80:76:26:e7:c8:8c:a4:09:43:f1:e8:27:53:c9:85:e8:b8:87:
a8:ef:3b:8b:74:00:ab:44:0f:3d:42:07:7e:2f:ac:17:3a:08:
0b:eb:5c:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYbGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE1MTEyMDI4WhcNMjUwNzE0MTEyMDI4WjAYMRYw
FAYDVQQDEw02ODRlYWM4MS01ZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA17QyUItJaOA4M+rx2U/3uwXR0mShFPc5K3XMbn4gjTQPSkHcD6xHH64j
zdpsTCoDqxMR8+BVUTHuaf+mVjR7/SqUwU1VDoPfJ1AX5XEUO5SnqBYfNs0LMRp5
ca8Fx29blAT/6Tf0SANaTOiNW/Xywm4YTiHOrJJJubKJbqIVnqQo26sPYm8Q/jNH
DU/uJcJPqj++sCfzHPUHQ/+hoIHzj0dH7NyNsd2f5P8NfsmsysEI+Knp3s1y24S0
z8oMXqdWZVvur5GNj+/KkMnhKWOpF+3YA3M2Bh9mooV+X8jBH4WzgHvuRH0mjAoV
8ImMskTJ26zn5G+6caSc/WVCYN46JwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFqp
kyAO7rJfXJfCfTrMw4wEtX75MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDZFQUI2NDQ5REExMUYwOENFRjAzQTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQBrNIVujLVwapCopisV20sAlKHlE8jPNmmTLWFog1MRN+kQxdUmF0NS
9jEzuAM0vrycHmILlnvnM1ky+IrMD8Y9mmEgT2Kv6VSUGmndJ+bd3ebp1D3gEjei
2jhJxCbpwnmmh7EBM+WuJS7GQ4zFZiANdNOEQOjW1Oc+ylWMThtnheb0zvGHPbzW
yKrb1jTZJsSTKAIZTFBFawcT/Hy7rnTKj4lyrrPyOXxnpTBLoH8M11Krt6rGU5xI
egRGK+QNoEvzgF38Gq6nUu3aqceviOsoproeRWHqoKaAdibnyIykCUPx6CdTyYXo
uIeo7zuLdACrRA89Qgd+L6wXOggL61xV
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:02:58 2025 by rpki-client