Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9D2AAB0469611F096C90AD6DAE4EC9C.roa
File: E9D2AAB0469611F096C90AD6DAE4EC9C.roa (raw, json)
Hash identifier: YPHtSwtmgMW2zO0BB5GTVoXbPWdcXxJl6ehXns7p35g=
Subject key identifier: D8:2E:CB:0D:95:F1:34:99:A7:AB:E7:74:EB:8A:5D:21:30:CC:33:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0185E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9D2AAB0469611F096C90AD6DAE4EC9C.roa
Signing time: Wed 11 Jun 2025 07:37:23 +0000
ROA not before: Wed 11 Jun 2025 07:37:19 +0000
ROA not after: Mon 16 Jun 2025 07:37:19 +0000
asID: 55020
IP address blocks: 154.210.16.0/20 maxlen: 24
154.213.64.0/20 maxlen: 24
154.222.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 07:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99816 (0x185e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 07:37:19 2025 GMT
Not After : Jun 16 07:37:19 2025 GMT
Subject: CN=68493233-eba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:1a:1b:1d:4e:63:35:ed:3d:01:86:d3:23:
b8:14:15:af:75:dd:7f:b6:78:ab:72:47:5f:9d:71:
1d:fa:90:eb:a9:b7:89:48:8a:74:5b:c4:17:80:0f:
7e:9f:de:12:b9:99:6c:d8:13:10:dd:6a:5e:aa:1f:
96:2e:d5:a5:b4:26:4a:fa:15:16:28:37:d0:45:04:
e9:27:20:42:5b:f4:56:68:56:8c:b1:b5:2a:7f:26:
cf:35:9f:37:4c:6d:a6:5b:a1:fb:0d:f4:ae:93:a7:
24:c3:58:5a:40:c9:11:fd:ba:4c:94:50:b8:4f:f1:
2f:13:d3:d6:6c:79:87:9e:b9:29:60:6a:02:07:1f:
b2:72:a8:d6:69:c9:25:da:07:ca:76:7c:aa:05:dc:
77:a4:78:6a:e0:79:b0:5e:d6:98:f6:68:7d:f4:ba:
91:09:0a:c1:1d:3c:2f:4d:f4:6f:c9:f6:0c:99:65:
e7:07:3b:49:4f:68:41:75:95:c1:63:9e:07:ac:ee:
da:c8:9e:2b:03:7c:12:22:b9:f5:16:72:5d:a8:1f:
e4:2d:94:e2:6a:a8:9b:7d:5d:c0:e2:2b:be:fb:11:
03:cc:f8:e4:43:eb:a6:f7:59:93:b5:e0:85:b9:0c:
1d:a8:08:17:bd:94:85:50:e0:6d:b6:c2:00:9e:bf:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:CB:0D:95:F1:34:99:A7:AB:E7:74:EB:8A:5D:21:30:CC:33:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9D2AAB0469611F096C90AD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.16.0/20
154.213.64.0/20
154.222.224.0/20
Signature Algorithm: sha256WithRSAEncryption
20:e7:04:b5:e3:4d:db:c7:dc:5b:b7:15:a3:b4:8c:34:53:19:
40:2a:31:37:86:93:b4:71:63:1a:08:95:60:9a:38:f6:91:1b:
51:14:e0:67:b2:8c:75:16:8d:46:2b:5f:c2:04:51:05:6c:bd:
7b:8c:6e:5e:78:2a:1c:c8:fd:85:36:26:f4:f7:c4:62:35:c3:
c3:2a:3e:a9:a1:ac:de:67:cf:68:f3:47:d2:06:03:c8:42:27:
7a:ae:66:95:ae:d0:a5:43:9f:38:70:89:fa:66:17:4f:d3:c0:
b5:ed:c6:48:80:22:f9:0e:17:81:99:fb:dd:55:1e:e9:70:40:
7e:e5:95:43:c1:7d:1d:31:cb:31:3e:6c:d6:e6:4b:99:71:c0:
19:32:fe:ee:27:4a:78:6b:e1:cb:9d:3c:b2:16:fd:f0:d8:b6:
67:18:c0:8d:c7:de:9b:b7:9a:a2:02:b1:41:29:20:a5:06:3e:
7b:59:ca:e7:0d:43:5f:f6:38:11:e2:25:b7:92:6b:c9:92:98:
c2:93:0a:43:3d:93:e3:f5:8f:53:40:00:19:cc:08:aa:67:bb:
3e:53:61:74:f4:ab:39:b7:47:e2:95:78:49:bf:14:a6:54:d1:
3f:16:c1:f1:f1:2b:b5:b9:bd:c0:d7:7a:50:c6:ca:8f:43:71:
2c:03:f3:ba
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAYXoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjExMDczNzE5WhcNMjUwNjE2MDczNzE5WjAYMRYw
FAYDVQQDEw02ODQ5MzIzMy1lYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApPwaGx1OYzXtPQGG0yO4FBWvdd1/tnirckdfnXEd+pDrqbeJSIp0W8QX
gA9+n94SuZls2BMQ3Wpeqh+WLtWltCZK+hUWKDfQRQTpJyBCW/RWaFaMsbUqfybP
NZ83TG2mW6H7DfSuk6ckw1haQMkR/bpMlFC4T/EvE9PWbHmHnrkpYGoCBx+ycqjW
ackl2gfKdnyqBdx3pHhq4HmwXtaY9mh99LqRCQrBHTwvTfRvyfYMmWXnBztJT2hB
dZXBY54HrO7ayJ4rA3wSIrn1FnJdqB/kLZTiaqibfV3A4iu++xEDzPjkQ+um91mT
teCFuQwdqAgXvZSFUOBttsIAnr/MMwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNgu
yw2V8TSZp6vndOuKXSEwzDPdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOUQyQUFCMDQ2OTYxMUYwOTZDOTBBRDZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEmtIQAwQEmtVAAwQEmt7g
MA0GCSqGSIb3DQEBCwUAA4IBAQAg5wS1403bx9xbtxWjtIw0UxlAKjE3hpO0cWMa
CJVgmjj2kRtRFOBnsox1Fo1GK1/CBFEFbL17jG5eeCocyP2FNib098RiNcPDKj6p
oazeZ89o80fSBgPIQid6rmaVrtClQ584cIn6ZhdP08C17cZIgCL5DheBmfvdVR7p
cEB+5ZVDwX0dMcsxPmzW5kuZccAZMv7uJ0p4a+HLnTyyFv3w2LZnGMCNx96bt5qi
ArFBKSClBj57WcrnDUNf9jgR4iW3kmvJkpjCkwpDPZPj9Y9TQAAZzAiqZ7s+U2F0
9Ks5t0filXhJvxSmVNE/FsHx8Su1ub3A13pQxsqPQ3EsA/O6
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:51:13 2025 by rpki-client