Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E63D38E269411F093A39091DAE4EC9C.roa
File: 2E63D38E269411F093A39091DAE4EC9C.roa (raw, json)
Hash identifier: rktJjYZSxJVz5PRCG54MyHH/odghvouZuxanvvgidL4=
Subject key identifier: 8F:63:96:67:E5:41:74:47:0C:BA:3C:39:A3:4F:E7:5C:6A:08:F7:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E63D38E269411F093A39091DAE4EC9C.roa
Signing time: Thu 01 May 2025 13:57:15 +0000
ROA not before: Thu 01 May 2025 13:57:02 +0000
ROA not after: Fri 28 Apr 2028 13:57:02 +0000
asID: 17561
IP address blocks: 154.86.250.0/24 maxlen: 24
154.86.251.0/24 maxlen: 24
154.86.252.0/24 maxlen: 24
154.86.253.0/24 maxlen: 24
154.86.254.0/24 maxlen: 24
154.86.255.0/24 maxlen: 24
154.93.131.0/24 maxlen: 24
154.93.132.0/24 maxlen: 24
154.93.133.0/24 maxlen: 24
154.93.134.0/24 maxlen: 24
154.93.135.0/24 maxlen: 24
154.93.136.0/24 maxlen: 24
154.93.137.0/24 maxlen: 24
154.93.138.0/24 maxlen: 24
154.93.139.0/24 maxlen: 24
154.93.140.0/24 maxlen: 24
154.93.141.0/24 maxlen: 24
154.93.142.0/24 maxlen: 24
154.93.143.0/24 maxlen: 24
154.93.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97812 (0x17e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 13:57:02 2025 GMT
Not After : Apr 28 13:57:02 2028 GMT
Subject: CN=68137dbb-c459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:00:2f:37:51:85:bb:44:5e:96:5d:ad:d3:
e1:e6:dd:03:62:84:b3:d0:27:97:86:54:bd:17:c0:
21:ee:0a:c0:3e:62:e7:9d:35:45:70:10:be:69:b3:
2e:b9:79:bb:31:72:b1:b3:59:fe:21:f0:d6:fc:cd:
6f:82:92:b5:36:d2:00:32:de:7e:3f:7f:76:40:b2:
3b:c6:04:62:fc:31:95:01:31:78:2b:f3:db:c5:48:
a7:a6:bb:e3:b0:78:93:cd:62:6b:26:fe:c9:8d:f9:
fe:f7:b3:69:b7:ea:9d:19:1f:29:5f:1c:d6:45:cb:
bc:33:59:f8:78:7c:b4:60:87:6b:83:26:ad:f8:2e:
51:2b:6b:74:50:76:e9:6f:ae:30:51:57:23:cc:d5:
43:87:c7:88:24:a5:ba:7d:9e:be:9c:13:a5:2e:11:
75:c5:bc:6b:08:09:ce:06:d8:c7:7f:54:4d:cd:42:
ea:09:37:b7:ab:5e:b6:df:d7:42:1c:88:73:fe:65:
0d:2f:8d:fd:3a:4a:d1:87:76:2d:d6:05:5c:2e:03:
c4:f1:3c:51:99:f4:0d:ad:72:05:9a:a5:59:6a:81:
7e:1f:24:f9:33:2e:ad:aa:e8:89:69:e4:41:35:42:
68:50:70:5a:6d:73:4c:55:63:3a:4b:c9:a3:48:6b:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:96:67:E5:41:74:47:0C:BA:3C:39:A3:4F:E7:5C:6A:08:F7:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E63D38E269411F093A39091DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.250.0-154.86.255.255
154.93.131.0-154.93.144.255
Signature Algorithm: sha256WithRSAEncryption
8a:b3:8e:2a:66:7b:ec:7a:a8:40:ad:c5:ac:00:84:ad:cf:61:
89:c7:7d:08:92:24:b2:97:42:41:9a:a0:a3:bb:71:99:b6:ec:
69:72:0c:2c:7b:da:7d:4c:d7:c1:8a:4f:5b:18:ea:6a:41:ff:
68:5e:6c:cc:cf:f7:02:29:84:f5:02:f9:c5:15:48:db:4f:b9:
26:27:e9:3c:91:ed:06:16:83:19:bb:74:f5:49:e1:17:d7:91:
c4:37:84:01:ec:70:40:55:08:ee:7e:bf:49:78:3d:33:6e:27:
6d:03:5d:42:ed:f5:46:d7:52:ba:ab:6a:a3:06:5b:6f:71:74:
72:63:67:c6:d6:87:83:ad:9c:15:72:1c:53:1b:a7:9c:d9:4f:
4b:e4:11:fc:df:ab:62:3b:1b:5f:ed:e4:75:39:ae:83:1e:60:
3c:84:a5:59:cb:0e:12:a9:45:1b:93:53:95:7e:31:6d:92:93:
34:06:ef:e6:b5:da:04:7d:95:a0:f6:1e:23:80:90:ef:db:77:
75:1e:cf:8d:1a:8c:bb:ee:a0:49:f2:c1:b8:95:1f:db:0c:e5:
a2:d8:7f:72:43:3b:09:09:c8:39:35:35:84:95:f3:07:09:47:
59:d7:50:1f:0e:a5:8d:20:56:a7:81:64:21:87:f3:55:da:33:
d1:b5:05:a5
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAX4UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTM1NzAyWhcNMjgwNDI4MTM1NzAyWjAYMRYw
FAYDVQQDEw02ODEzN2RiYi1jNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0kAALzdRhbtEXpZdrdPh5t0DYoSz0CeXhlS9F8Ah7grAPmLnnTVFcBC+
abMuuXm7MXKxs1n+IfDW/M1vgpK1NtIAMt5+P392QLI7xgRi/DGVATF4K/PbxUin
prvjsHiTzWJrJv7Jjfn+97Npt+qdGR8pXxzWRcu8M1n4eHy0YIdrgyat+C5RK2t0
UHbpb64wUVcjzNVDh8eIJKW6fZ6+nBOlLhF1xbxrCAnOBtjHf1RNzULqCTe3q162
39dCHIhz/mUNL439OkrRh3Yt1gVcLgPE8TxRmfQNrXIFmqVZaoF+HyT5My6tquiJ
aeRBNUJoUHBabXNMVWM6S8mjSGtSvwIDAQABo4ICujCCArYwHQYDVR0OBBYEFI9j
lmflQXRHDLo8OaNP51xqCPfAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTYzRDM4RTI2OTQxMUYwOTNBMzkwOTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDBAGaVvoDAwCaVjAMAwQA
ml2DAwQAml2QMA0GCSqGSIb3DQEBCwUAA4IBAQCKs44qZnvseqhArcWsAIStz2GJ
x30IkiSyl0JBmqCju3GZtuxpcgwse9p9TNfBik9bGOpqQf9oXmzMz/cCKYT1AvnF
FUjbT7kmJ+k8ke0GFoMZu3T1SeEX15HEN4QB7HBAVQjufr9JeD0zbidtA11C7fVG
11K6q2qjBltvcXRyY2fG1oeDrZwVchxTG6ec2U9L5BH836tiOxtf7eR1Oa6DHmA8
hKVZyw4SqUUbk1OVfjFtkpM0Bu/mtdoEfZWg9h4jgJDv23d1Hs+NGoy77qBJ8sG4
lR/bDOWi2H9yQzsJCcg5NTWElfMHCUdZ11AfDqWNIFangWQhh/NV2jPRtQWl
-----END CERTIFICATE-----
Generated at Sat May 10 13:42:03 2025 by rpki-client