Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/398C4566501F11F0B274DDF5DAE4EC9C.roa
File: 398C4566501F11F0B274DDF5DAE4EC9C.roa (raw, json)
Hash identifier: oxnNNU6/+jaoaT4bpuHrV/vR0HWpENjgxQDj7YMx6lA=
Subject key identifier: 55:7F:58:2F:02:BD:52:4B:63:77:10:84:2B:28:FC:6B:70:B4:12:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/398C4566501F11F0B274DDF5DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 10:45:49 +0000
ROA not before: Mon 23 Jun 2025 10:45:45 +0000
ROA not after: Tue 30 Dec 2025 10:45:45 +0000
asID: 270157
IP address blocks: 154.208.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 10:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100349 (0x187fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 10:45:45 2025 GMT
Not After : Dec 30 10:45:45 2025 GMT
Subject: CN=6859305d-f71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:29:75:85:ea:08:c4:df:4b:69:d9:20:54:
27:d5:f0:4a:6f:8f:a2:80:b9:71:38:60:dc:04:c8:
2b:bf:2b:59:48:bb:0a:2d:cf:a7:39:69:a9:34:08:
db:30:59:05:e3:fd:83:03:00:e5:98:58:0e:f6:aa:
aa:57:30:fa:d7:70:44:3b:58:d4:94:7e:c1:9b:84:
88:3f:cb:85:9c:9b:e2:41:a1:a5:5a:d7:1c:1c:13:
12:c1:26:f5:ef:bb:52:b6:4f:a0:88:77:6d:2f:43:
72:89:65:1a:5e:67:89:2b:44:ac:77:dd:45:c8:20:
77:dd:fe:c9:23:a9:90:3e:c9:4e:32:39:1c:b9:34:
de:25:61:62:c0:37:8d:4f:1b:da:de:f1:4c:d8:c0:
20:d5:d5:64:00:88:61:34:0f:3e:22:d9:e6:9c:b1:
56:6f:a3:d5:16:05:74:ba:9a:f5:e2:24:ff:7d:c3:
f0:33:6e:a7:ad:8f:1a:51:40:5d:1e:65:ba:32:d8:
b1:ae:8e:36:35:a8:c7:4b:82:d1:34:d7:1c:3a:57:
14:64:b3:7f:3c:24:5a:05:fc:f5:c5:8c:75:df:89:
8a:76:66:f4:4e:ce:43:ea:98:27:4d:25:7d:da:2b:
31:f1:e6:8c:52:6f:27:4d:ce:0a:5c:24:e1:01:c6:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:58:2F:02:BD:52:4B:63:77:10:84:2B:28:FC:6B:70:B4:12:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/398C4566501F11F0B274DDF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.130.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:5e:0f:64:23:ad:56:a6:ca:34:d5:5e:37:d0:ae:23:22:27:
f6:da:29:16:0c:49:33:fa:1e:de:6b:40:e0:97:55:c4:9f:41:
15:f6:c1:dd:96:1e:55:4a:e9:86:02:31:54:7b:75:3f:f9:e1:
e3:41:b3:b4:c0:39:74:7c:8b:08:cc:c5:70:6f:8d:c8:c1:6a:
57:17:64:d2:b9:7b:b1:60:87:1a:e6:06:05:eb:76:07:c0:c4:
40:dd:47:62:96:24:c6:2d:ee:ad:02:c9:d2:8b:9c:bf:78:01:
4b:bb:e7:fd:33:6f:c5:5d:6c:7b:4a:80:b7:11:8b:a7:b8:bc:
e2:aa:d5:5f:c8:ca:38:35:7b:fc:67:91:0a:0b:09:0b:d3:08:
18:50:82:23:bc:fa:54:d2:bb:a2:4c:7c:07:c4:7d:40:87:42:
34:e0:87:8d:24:39:da:a8:ac:3f:26:f1:90:5d:10:38:5e:42:
d4:0f:98:47:8e:18:1c:cb:b4:9f:ee:5e:48:57:5c:40:66:bd:
69:a1:68:1b:61:93:11:03:88:ab:23:09:a4:a1:09:c5:0d:c6:
68:a5:0f:48:5a:e3:a6:51:b2:aa:dc:04:a2:54:1f:6d:cd:a0:
f3:74:eb:17:b2:14:49:cf:ea:0d:da:da:f3:97:61:2b:e0:1d:
b4:53:1d:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYf9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIzMTA0NTQ1WhcNMjUxMjMwMTA0NTQ1WjAYMRYw
FAYDVQQDEw02ODU5MzA1ZC1mNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtecpdYXqCMTfS2nZIFQn1fBKb4+igLlxOGDcBMgrvytZSLsKLc+nOWmp
NAjbMFkF4/2DAwDlmFgO9qqqVzD613BEO1jUlH7Bm4SIP8uFnJviQaGlWtccHBMS
wSb177tStk+giHdtL0NyiWUaXmeJK0Ssd91FyCB33f7JI6mQPslOMjkcuTTeJWFi
wDeNTxva3vFM2MAg1dVkAIhhNA8+ItnmnLFWb6PVFgV0upr14iT/fcPwM26nrY8a
UUBdHmW6Mtixro42NajHS4LRNNccOlcUZLN/PCRaBfz1xYx134mKdmb0Ts5D6pgn
TSV92isx8eaMUm8nTc4KXCThAcZ9OQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFV/
WC8CvVJLY3cQhCso/GtwtBLUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zOThDNDU2NjUwMUYxMUYwQjI3NERERjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtCCMA0GCSqGSIb3DQEB
CwUAA4IBAQDNXg9kI61Wpso01V430K4jIif22ikWDEkz+h7ea0Dgl1XEn0EV9sHd
lh5VSumGAjFUe3U/+eHjQbO0wDl0fIsIzMVwb43IwWpXF2TSuXuxYIca5gYF63YH
wMRA3UdiliTGLe6tAsnSi5y/eAFLu+f9M2/FXWx7SoC3EYunuLziqtVfyMo4NXv8
Z5EKCwkL0wgYUIIjvPpU0ruiTHwHxH1Ah0I04IeNJDnaqKw/JvGQXRA4XkLUD5hH
jhgcy7Sf7l5IV1xAZr1poWgbYZMRA4irIwmkoQnFDcZopQ9IWuOmUbKq3ASiVB9t
zaDzdOsXshRJz+oN2trzl2Er4B20Ux38
-----END CERTIFICATE-----
Generated at Fri Jul 4 13:34:24 2025 by rpki-client