Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C589F60533011F084CA07EADAE4EC9C.roa
File: 3C589F60533011F084CA07EADAE4EC9C.roa (raw, json)
Hash identifier: qFnFNIT2tonEOJ/pg0rKG6nWqN3n6AcQFXBJAMEhj3Q=
Subject key identifier: 20:35:0D:54:35:3C:6C:90:89:F9:18:27:01:CD:2C:B8:8C:9C:63:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01893C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C589F60533011F084CA07EADAE4EC9C.roa
Signing time: Fri 27 Jun 2025 08:25:09 +0000
ROA not before: Fri 27 Jun 2025 08:25:04 +0000
ROA not after: Mon 04 Aug 2025 08:25:04 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100668 (0x1893c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:25:04 2025 GMT
Not After : Aug 4 08:25:04 2025 GMT
Subject: CN=685e5565-e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:29:1e:1a:f4:48:1b:cc:8f:2e:d1:b5:24:
8e:c5:cf:97:2c:fe:fb:a7:92:fe:f0:27:21:50:ce:
aa:be:e6:d1:b6:41:95:aa:2c:ff:df:dd:37:f4:6a:
65:6b:ae:ae:84:cf:14:03:69:ba:a7:86:e4:b6:c8:
ed:bd:58:92:34:26:d3:6b:b5:05:85:15:9c:7b:ae:
a2:19:41:9b:ac:6f:47:74:e6:25:df:09:cf:2c:40:
dc:75:e0:52:69:2b:1c:01:74:8e:d5:96:0a:f0:96:
46:0d:30:5b:29:fb:6a:f3:29:fa:2e:15:b2:47:dd:
cc:31:12:91:ea:b6:fa:57:66:fc:a5:8a:d4:6a:18:
62:24:ab:a8:75:8f:a0:a0:64:0a:0f:b7:77:77:bf:
9e:24:a9:f2:b9:7e:c6:75:30:1c:0a:d5:ba:2a:93:
ab:b7:d9:cb:6c:cb:8a:3a:99:65:94:88:64:c6:3b:
bf:ab:5c:83:a3:db:88:58:a4:62:5f:aa:26:00:27:
97:df:6c:55:2c:e9:c1:ed:27:35:3c:79:33:b7:71:
c6:dd:23:59:b3:81:cd:71:98:52:df:1e:90:00:27:
3d:a3:92:73:77:89:d1:28:1c:a1:e4:79:55:82:4b:
ee:14:ed:d4:9e:d7:11:74:1d:5a:96:c4:96:15:79:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:0D:54:35:3C:6C:90:89:F9:18:27:01:CD:2C:B8:8C:9C:63:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C589F60533011F084CA07EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6d:85:2f:0a:4b:a5:bf:79:8e:0a:a0:58:71:92:77:48:ce:
9d:e5:f3:6b:19:43:92:93:8f:d3:0a:2f:db:56:ea:44:67:dc:
af:ec:e6:34:88:bd:9d:73:05:7a:e0:8c:96:da:1a:89:09:76:
5c:df:2b:d5:c4:94:9d:99:f6:4c:f9:cb:5c:0a:31:a4:0f:5a:
5e:bd:2e:b8:cf:cf:af:39:bd:98:a8:f8:42:9e:0b:92:70:55:
a5:6c:01:1a:03:43:cb:29:bb:f1:2c:15:59:b8:32:ce:a0:92:
d4:87:d0:b6:ae:6c:20:15:27:1c:fc:bc:2e:58:dc:09:12:d2:
81:4b:61:a0:ac:b4:78:08:e4:54:af:ca:1e:55:5b:86:eb:ab:
c1:9c:97:b1:72:d8:d6:42:b7:5d:a4:28:a5:d6:8d:7a:e2:6b:
e4:9a:43:99:e1:42:cc:be:5f:8b:74:70:ca:db:2a:22:71:d3:
42:75:af:2b:98:f1:ba:b7:88:97:a4:91:d7:db:7d:12:98:74:
d4:2e:c7:06:43:36:24:20:57:ca:9e:13:3c:3b:d0:fe:ee:75:
42:ec:9d:d4:54:a3:1f:9f:a1:58:8f:02:97:ca:61:8f:14:7c:
c5:5d:d5:ad:ae:cd:73:5b:b9:86:15:5a:c2:19:fe:e0:e4:48:
a2:7d:cf:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYk8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI3MDgyNTA0WhcNMjUwODA0MDgyNTA0WjAYMRYw
FAYDVQQDEw02ODVlNTU2NS1lNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwWcpHhr0SBvMjy7RtSSOxc+XLP77p5L+8CchUM6qvubRtkGVqiz/3903
9Gpla66uhM8UA2m6p4bktsjtvViSNCbTa7UFhRWce66iGUGbrG9HdOYl3wnPLEDc
deBSaSscAXSO1ZYK8JZGDTBbKftq8yn6LhWyR93MMRKR6rb6V2b8pYrUahhiJKuo
dY+goGQKD7d3d7+eJKnyuX7GdTAcCtW6KpOrt9nLbMuKOplllIhkxju/q1yDo9uI
WKRiX6omACeX32xVLOnB7Sc1PHkzt3HG3SNZs4HNcZhS3x6QACc9o5Jzd4nRKByh
5HlVgkvuFO3UntcRdB1alsSWFXkM3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCA1
DVQ1PGyQifkYJwHNLLiMnGN4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzU4OUY2MDUzMzAxMUYwODRDQTA3RUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGjMA0GCSqGSIb3DQEB
CwUAA4IBAQAdbYUvCkulv3mOCqBYcZJ3SM6d5fNrGUOSk4/TCi/bVupEZ9yv7OY0
iL2dcwV64IyW2hqJCXZc3yvVxJSdmfZM+ctcCjGkD1pevS64z8+vOb2YqPhCnguS
cFWlbAEaA0PLKbvxLBVZuDLOoJLUh9C2rmwgFScc/LwuWNwJEtKBS2GgrLR4CORU
r8oeVVuG66vBnJexctjWQrddpCil1o164mvkmkOZ4ULMvl+LdHDK2yoicdNCda8r
mPG6t4iXpJHX230SmHTULscGQzYkIFfKnhM8O9D+7nVC7J3UVKMfn6FYjwKXymGP
FHzFXdWtrs1zW7mGFVrCGf7g5Eiifc+h
-----END CERTIFICATE-----
Generated at Mon Jun 30 06:03:49 2025 by rpki-client