Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A88EF8558011F09D077BF0DAE4EC9C.roa
File: 35A88EF8558011F09D077BF0DAE4EC9C.roa (raw, json)
Hash identifier: OvBucz59/SL3Kp2WKXUAm3nDltXj+B7zFDRG69PaN58=
Subject key identifier: 2A:32:5D:5F:9A:AD:AC:D8:33:F7:30:93:A3:BA:1D:AA:58:8E:18:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018971
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A88EF8558011F09D077BF0DAE4EC9C.roa
Signing time: Mon 30 Jun 2025 07:02:40 +0000
ROA not before: Mon 30 Jun 2025 07:02:34 +0000
ROA not after: Fri 04 Jul 2025 07:02:34 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
154.205.176.0/22 maxlen: 24
154.205.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100721 (0x18971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 07:02:34 2025 GMT
Not After : Jul 4 07:02:34 2025 GMT
Subject: CN=6862368f-9e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:67:1b:68:6d:1f:ac:84:66:1e:f4:28:22:
36:c9:e6:b0:5c:36:ca:f9:06:90:47:6c:18:78:83:
25:da:fb:ff:84:41:54:c2:e8:aa:64:22:d6:b0:f0:
b9:c3:0c:2b:e6:40:96:9b:df:65:68:34:5a:dc:93:
ff:01:c3:1b:63:36:22:97:36:d9:41:7e:1f:8f:0d:
3a:cb:64:dd:0d:24:a5:45:b5:cf:d0:2c:70:f8:aa:
a2:a0:a0:0d:ea:9f:0c:a3:59:73:54:d9:0a:83:4d:
e4:36:26:ba:83:0f:b2:46:15:d9:3d:a6:c2:aa:95:
f1:7a:9c:0b:30:92:cc:d7:db:97:09:16:30:3e:bf:
d6:8f:92:43:57:37:e5:5d:ec:84:49:4c:5d:2b:87:
6d:e1:ba:00:b8:70:ec:8e:e3:76:d3:4a:9b:ce:00:
f5:c9:7e:02:cf:1a:9c:72:61:71:95:12:99:0b:bc:
c1:2c:63:16:af:50:e4:52:90:3a:b3:5a:1b:6e:76:
7f:1a:22:43:f1:e1:3b:f6:d2:5c:c1:b7:e8:ad:82:
68:29:82:b6:28:a0:90:17:dc:04:f5:8a:14:49:4e:
62:75:8c:94:98:5e:cb:3c:f5:bc:1b:1a:e4:87:12:
38:76:c3:0d:96:82:e3:d0:3f:8b:e3:e2:bb:ed:55:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:5D:5F:9A:AD:AC:D8:33:F7:30:93:A3:BA:1D:AA:58:8E:18:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A88EF8558011F09D077BF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
154.205.176.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:42:38:c4:c2:95:e5:bc:56:d8:e8:6a:72:11:bc:d8:cf:6d:
ee:5d:b1:50:89:46:2d:76:a5:f2:b1:27:a0:89:e0:42:83:3f:
9b:c0:64:3b:c8:c1:8f:69:80:04:cf:c2:8b:5a:30:bd:14:37:
6c:5d:67:a4:c3:3c:5d:89:e4:43:1c:08:59:b9:4c:34:77:2b:
46:27:99:2a:cb:1c:5b:40:8e:3f:82:d8:24:f9:9e:bc:77:a5:
67:48:91:f8:e1:dd:86:3e:90:a1:61:53:2a:a3:fc:ad:75:bd:
03:93:0e:68:37:0e:0d:d1:95:ae:66:59:c5:ca:f8:0c:0f:e7:
5c:76:a8:e4:e4:5e:b8:65:f0:27:c8:60:24:c2:c8:14:77:40:
10:b0:e9:91:f0:00:c3:ef:bd:1d:4f:e9:67:b3:18:00:37:6a:
e5:0f:8b:48:4a:7f:6c:ee:4a:e0:9c:45:45:ca:f2:07:24:55:
1e:66:30:81:3b:a7:95:9d:65:21:f2:b0:06:93:e3:b1:03:d7:
a6:1b:d0:c0:b8:c5:7c:55:83:70:0a:e5:cb:29:e4:7a:e1:ae:
36:42:96:51:e0:5d:59:a3:56:0a:f7:b5:2d:c8:f4:d1:65:aa:
6c:4a:80:97:36:0e:ad:cb:11:20:54:9f:7b:07:b9:bb:ca:f4:
72:d7:5e:e5
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYlxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjMwMDcwMjM0WhcNMjUwNzA0MDcwMjM0WjAYMRYw
FAYDVQQDEw02ODYyMzY4Zi05ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsDNnG2htH6yEZh70KCI2yeawXDbK+QaQR2wYeIMl2vv/hEFUwuiqZCLW
sPC5wwwr5kCWm99laDRa3JP/AcMbYzYilzbZQX4fjw06y2TdDSSlRbXP0Cxw+Kqi
oKAN6p8Mo1lzVNkKg03kNia6gw+yRhXZPabCqpXxepwLMJLM19uXCRYwPr/Wj5JD
VzflXeyESUxdK4dt4boAuHDsjuN200qbzgD1yX4CzxqccmFxlRKZC7zBLGMWr1Dk
UpA6s1obbnZ/GiJD8eE79tJcwbforYJoKYK2KKCQF9wE9YoUSU5idYyUmF7LPPW8
GxrkhxI4dsMNloLj0D+L4+K77VWsswIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCoy
XV+arazYM/cwk6O6HapYjhjGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNUE4OEVGODU1ODAxMUYwOUQwNzdCRjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsIUAwQDms2wMA0GCSqG
SIb3DQEBCwUAA4IBAQDBQjjEwpXlvFbY6GpyEbzYz23uXbFQiUYtdqXysSegieBC
gz+bwGQ7yMGPaYAEz8KLWjC9FDdsXWekwzxdieRDHAhZuUw0dytGJ5kqyxxbQI4/
gtgk+Z68d6VnSJH44d2GPpChYVMqo/ytdb0Dkw5oNw4N0ZWuZlnFyvgMD+dcdqjk
5F64ZfAnyGAkwsgUd0AQsOmR8ADD770dT+lnsxgAN2rlD4tISn9s7krgnEVFyvIH
JFUeZjCBO6eVnWUh8rAGk+OxA9emG9DAuMV8VYNwCuXLKeR64a42QpZR4F1Zo1YK
97UtyPTRZapsSoCXNg6tyxEgVJ97B7m7yvRy117l
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:10 2025 by rpki-client