Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC717164451111F08B1450F2DAE4EC9C.roa
File: FC717164451111F08B1450F2DAE4EC9C.roa (raw, json)
Hash identifier: HwFMHTKMRHyiEOgxx2eexiZKWn56X/AnoSfVYRd2MIA=
Subject key identifier: 95:E8:06:C2:02:7D:58:46:4C:99:03:85:F5:BC:29:9B:37:93:2D:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01858E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC717164451111F08B1450F2DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 09:13:20 +0000
ROA not before: Mon 09 Jun 2025 09:13:15 +0000
ROA not after: Thu 14 Aug 2025 09:13:15 +0000
asID: 272854
IP address blocks: 154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99726 (0x1858e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 09:13:15 2025 GMT
Not After : Aug 14 09:13:15 2025 GMT
Subject: CN=6846a5b0-131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:e0:91:03:d5:9c:b8:86:0f:be:f2:fa:27:
d8:89:8f:64:37:68:30:ea:82:6c:a2:ad:b7:52:20:
14:1d:db:ca:66:16:a2:19:86:a2:b1:8b:44:56:4d:
d9:77:b5:c3:23:e9:dc:f8:b5:52:4a:1f:8e:8f:e8:
b1:71:01:c0:0f:9c:46:86:68:da:d6:4b:f6:51:2b:
86:f4:87:c6:41:17:5e:21:9d:bb:35:fe:97:3f:72:
ee:b5:31:99:cf:93:98:bb:6c:e1:df:3f:64:13:9d:
6a:0d:c6:cb:08:f2:97:c2:ca:27:56:f3:b8:11:a5:
27:a0:da:40:9c:da:53:8a:de:19:08:ad:bd:cc:b1:
c2:01:9a:4d:69:fd:4f:37:bf:f3:41:54:fa:88:a5:
a3:7e:72:30:f0:d8:3c:bd:b5:8e:63:33:43:c8:a8:
e9:1d:10:f8:11:bb:a9:84:ab:a0:84:ce:05:ac:45:
10:9c:ae:8d:07:52:97:07:df:ca:87:f8:46:6d:25:
c8:4c:73:74:b7:df:3b:ba:7d:1e:d9:da:f2:28:c5:
39:ae:5e:f7:a6:a7:77:32:6e:c4:8a:1b:61:89:fc:
09:11:0d:bb:76:b4:f2:43:f5:43:f5:7e:7e:e4:c3:
e0:a7:04:f1:85:8b:4d:7e:05:b0:74:2f:22:cc:43:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E8:06:C2:02:7D:58:46:4C:99:03:85:F5:BC:29:9B:37:93:2D:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC717164451111F08B1450F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c5:a7:85:78:83:2e:bf:54:ff:af:5b:67:23:e5:a2:1c:30:
8b:56:56:68:ed:45:08:01:e9:37:d1:ea:cc:4d:a7:69:04:2a:
7b:2e:fc:0a:35:03:40:20:a4:89:41:c7:bc:e0:8a:5c:c2:3d:
58:ae:cd:a0:e9:31:fc:76:b8:a1:f6:9e:92:d4:31:fd:60:a5:
ad:c8:76:55:c9:fb:01:30:ad:71:29:c4:58:46:21:12:9a:5b:
1d:02:1c:24:75:1c:1f:b2:a6:5c:7b:ad:d8:11:39:cb:b7:56:
90:7f:3c:ce:5e:29:d4:cf:ab:b4:27:bd:ba:4b:1c:6e:51:cb:
1f:39:d5:eb:1b:83:9a:5a:a5:95:55:35:a1:52:2a:80:d4:e9:
3f:7d:ef:70:76:13:c6:99:1c:91:d1:07:70:b5:79:f4:54:65:
00:47:66:51:19:87:e2:30:5d:63:37:14:5f:cc:0c:79:4e:7b:
8e:3e:7d:06:de:57:55:13:8f:e0:f3:51:44:29:cd:7e:67:d8:
e6:65:58:6f:6b:3f:d8:50:fa:af:af:c6:b7:25:ff:84:a2:6e:
70:04:53:6d:e6:08:89:b8:9a:91:8e:93:f5:14:bb:dc:f5:4b:
8f:fd:06:b4:f3:c2:27:70:f5:23:2f:58:34:20:96:25:a4:0c:
94:aa:1e:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYWOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA5MDkxMzE1WhcNMjUwODE0MDkxMzE1WjAYMRYw
FAYDVQQDEw02ODQ2YTViMC0xMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA48ngkQPVnLiGD77y+ifYiY9kN2gw6oJsoq23UiAUHdvKZhaiGYaisYtE
Vk3Zd7XDI+nc+LVSSh+Oj+ixcQHAD5xGhmja1kv2USuG9IfGQRdeIZ27Nf6XP3Lu
tTGZz5OYu2zh3z9kE51qDcbLCPKXwsonVvO4EaUnoNpAnNpTit4ZCK29zLHCAZpN
af1PN7/zQVT6iKWjfnIw8Ng8vbWOYzNDyKjpHRD4EbuphKughM4FrEUQnK6NB1KX
B9/Kh/hGbSXITHN0t987un0e2dryKMU5rl73pqd3Mm7EihthifwJEQ27drTyQ/VD
9X5+5MPgpwTxhYtNfgWwdC8izEP0MwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJXo
BsICfVhGTJkDhfW8KZs3ky2/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQzcxNzE2NDQ1MTExMUYwOEIxNDUwRjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUBMA0GCSqGSIb3DQEB
CwUAA4IBAQA8xaeFeIMuv1T/r1tnI+WiHDCLVlZo7UUIAek30erMTadpBCp7LvwK
NQNAIKSJQce84Ipcwj1Yrs2g6TH8drih9p6S1DH9YKWtyHZVyfsBMK1xKcRYRiES
mlsdAhwkdRwfsqZce63YETnLt1aQfzzOXinUz6u0J726SxxuUcsfOdXrG4OaWqWV
VTWhUiqA1Ok/fe9wdhPGmRyR0QdwtXn0VGUAR2ZRGYfiMF1jNxRfzAx5TnuOPn0G
3ldVE4/g81FEKc1+Z9jmZVhvaz/YUPqvr8a3Jf+Eom5wBFNt5giJuJqRjpP1FLvc
9UuP/Qa088IncPUjL1g0IJYlpAyUqh6v
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:06:37 2025 by rpki-client