Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C597D32041F811F0A86B76CEDAE4EC9C.roa
File: C597D32041F811F0A86B76CEDAE4EC9C.roa (raw, json)
Hash identifier: u6lm4RGG8Z5Ovj+Tjo6wfzcJXOG8apIJTX6VsYPOvYk=
Subject key identifier: 82:2F:76:EC:93:1E:9E:20:D1:55:13:B3:89:D3:2A:E5:C8:57:F3:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01850C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C597D32041F811F0A86B76CEDAE4EC9C.roa
Signing time: Thu 05 Jun 2025 10:35:17 +0000
ROA not before: Thu 05 Jun 2025 10:35:12 +0000
ROA not after: Mon 11 Aug 2025 10:35:12 +0000
asID: 203020
IP address blocks: 154.217.36.0/24 maxlen: 24
154.217.37.0/24 maxlen: 24
154.217.38.0/24 maxlen: 24
154.217.79.0/24 maxlen: 24
154.217.83.0/24 maxlen: 24
154.217.85.0/24 maxlen: 24
154.217.179.0/24 maxlen: 24
154.217.224.0/22 maxlen: 24
154.217.228.0/22 maxlen: 24
154.217.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99596 (0x1850c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 10:35:12 2025 GMT
Not After : Aug 11 10:35:12 2025 GMT
Subject: CN=684172e5-6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:20:b7:b5:71:ac:bc:8a:32:0b:96:9b:82:
d0:d4:20:7c:c1:ca:d9:a8:0e:dd:1a:bf:cf:8f:bc:
70:54:c5:72:f0:41:7c:74:52:33:22:48:3a:38:f9:
da:04:1f:89:e0:97:56:26:77:c8:fd:54:ed:51:30:
ec:99:4e:6c:a9:08:1a:be:c7:fa:a0:44:b9:9a:93:
1e:84:5a:4a:cc:f4:b1:2f:7c:e4:af:6d:df:52:ba:
ce:a0:2d:d1:c4:32:f0:68:ab:b5:47:e9:0b:44:30:
a7:14:c7:bf:29:fe:7d:25:50:43:90:e2:f2:69:2b:
1c:2b:22:66:d8:f0:e2:6a:5e:c5:b0:86:d6:59:a0:
ab:93:19:86:2a:57:b0:3f:56:07:3c:e6:4e:2d:17:
ea:14:f9:5c:84:2c:e7:c8:a0:d4:5d:33:05:57:80:
83:04:1a:79:24:65:7d:4f:16:c1:6a:f4:06:36:7a:
c1:d3:10:b4:02:60:e1:52:f8:06:57:b6:58:ee:6b:
4c:e2:59:2d:82:26:f4:b2:db:bc:b8:8f:8d:aa:ae:
a3:e5:b7:16:41:15:56:55:e7:c3:b2:fd:1b:cb:14:
b5:4a:cf:ae:ec:ed:78:46:ae:3c:d7:12:a7:db:db:
2d:b7:11:21:7e:3b:4a:5c:a7:1a:e9:08:47:a6:ef:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:76:EC:93:1E:9E:20:D1:55:13:B3:89:D3:2A:E5:C8:57:F3:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C597D32041F811F0A86B76CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.36.0-154.217.38.255
154.217.79.0/24
154.217.83.0/24
154.217.85.0/24
154.217.179.0/24
154.217.224.0-154.217.233.255
Signature Algorithm: sha256WithRSAEncryption
9a:da:dc:5b:ed:57:3a:ed:39:4e:d7:87:d3:6a:50:64:bf:5c:
bb:76:32:5b:3b:25:01:a1:e7:a8:c0:e4:7d:e7:05:46:eb:60:
8d:34:d8:7f:a4:0b:a7:91:a1:b6:de:70:ad:5c:1f:91:03:1c:
7f:1c:96:7b:6f:1a:19:3c:09:f2:73:64:ba:92:f5:4e:74:4d:
76:7b:59:92:c6:95:92:ea:9f:70:07:dc:96:eb:16:eb:55:c9:
12:ac:68:5a:54:99:37:8c:71:d8:c9:da:cf:ef:68:69:99:d8:
93:19:a4:36:a4:07:4c:ac:75:a9:8d:10:0c:f4:14:e1:85:d7:
47:91:71:ca:2a:0c:75:e0:e8:97:3a:06:a4:1b:f1:54:40:59:
a0:05:a7:08:4b:58:c8:e2:79:e3:4f:49:52:e9:64:0d:90:b9:
c4:32:95:c2:16:e7:80:9e:50:06:33:d4:79:18:11:24:b1:7e:
b7:13:46:ae:09:a6:88:c5:af:15:d0:bb:09:81:2c:77:ae:08:
0f:96:6a:14:5f:38:e0:54:63:42:8d:43:82:77:0b:f1:33:03:
52:90:2a:7a:a4:ce:a5:24:66:48:78:f4:dc:8e:81:dc:0f:a1:
c1:3b:aa:f6:0c:f4:79:b2:e2:86:86:15:d4:75:09:e8:b4:a0:
e8:20:67:60
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAYUMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA1MTAzNTEyWhcNMjUwODExMTAzNTEyWjAYMRYw
FAYDVQQDEw02ODQxNzJlNS02Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtywgt7VxrLyKMguWm4LQ1CB8wcrZqA7dGr/Pj7xwVMVy8EF8dFIzIkg6
OPnaBB+J4JdWJnfI/VTtUTDsmU5sqQgavsf6oES5mpMehFpKzPSxL3zkr23fUrrO
oC3RxDLwaKu1R+kLRDCnFMe/Kf59JVBDkOLyaSscKyJm2PDial7FsIbWWaCrkxmG
KlewP1YHPOZOLRfqFPlchCznyKDUXTMFV4CDBBp5JGV9TxbBavQGNnrB0xC0AmDh
UvgGV7ZY7mtM4lktgib0stu8uI+Nqq6j5bcWQRVWVefDsv0byxS1Ss+u7O14Rq48
1xKn29sttxEhfjtKXKca6QhHpu+FOQIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFIIv
duyTHp4g0VUTs4nTKuXIV/OGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTk3RDMyMDQxRjgxMUYwQTg2Qjc2Q0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAKa2SQDBACa2SYDBACa
2U8DBACa2VMDBACa2VUDBACa2bMwDAMEBZrZ4AMEAZrZ6DANBgkqhkiG9w0BAQsF
AAOCAQEAmtrcW+1XOu05TteH02pQZL9cu3YyWzslAaHnqMDkfecFRutgjTTYf6QL
p5Ghtt5wrVwfkQMcfxyWe28aGTwJ8nNkupL1TnRNdntZksaVkuqfcAfclusW61XJ
EqxoWlSZN4xx2Mnaz+9oaZnYkxmkNqQHTKx1qY0QDPQU4YXXR5FxyioMdeDolzoG
pBvxVEBZoAWnCEtYyOJ5409JUulkDZC5xDKVwhbngJ5QBjPUeRgRJLF+txNGrgmm
iMWvFdC7CYEsd64ID5ZqFF844FRjQo1DgncL8TMDUpAqeqTOpSRmSHj03I6B3A+h
wTuq9gz0ebLihoYV1HUJ6LSg6CBnYA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:07 2025 by rpki-client