Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/677B718857FC11F097A3E299DAE4EC9C.roa
File: 677B718857FC11F097A3E299DAE4EC9C.roa (raw, json)
Hash identifier: d2p4wvzdOSWxCONY5Nt7pxRePDBSktBgL4ox/Nokuj4=
Subject key identifier: 4B:27:35:94:F4:D7:49:90:84:6D:3E:7E:AB:18:DF:27:2A:11:F5:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/677B718857FC11F097A3E299DAE4EC9C.roa
Signing time: Thu 03 Jul 2025 10:56:43 +0000
ROA not before: Thu 03 Jul 2025 10:56:38 +0000
ROA not after: Thu 17 Jul 2025 10:56:38 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100865 (0x18a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 10:56:38 2025 GMT
Not After : Jul 17 10:56:38 2025 GMT
Subject: CN=686661eb-c034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:4f:2f:4d:3c:49:53:24:d8:ac:73:4f:c4:
dd:68:1b:9f:f0:42:25:05:f6:ac:41:4c:e1:82:24:
00:23:ef:97:37:bf:2c:69:ad:8e:d0:4f:64:de:f3:
8f:4a:8c:f4:d9:1b:7d:a0:26:96:cb:dc:d7:84:e3:
9d:b1:ba:29:23:a8:2b:2e:3a:00:1c:1e:fc:34:0a:
1f:4d:d1:fb:de:f4:36:f0:92:fd:b7:90:58:6c:1c:
4f:34:47:07:49:cb:ef:0c:9e:5e:d2:2f:84:32:78:
ab:51:05:6d:d7:f6:3c:af:c3:c9:f4:ad:71:83:0a:
11:5a:2b:4c:84:70:c2:e0:4b:9d:3c:02:a2:60:33:
d5:be:c8:f9:78:ee:03:6d:76:c6:d7:c1:0c:ed:8b:
2d:7e:d0:d2:f2:b7:ff:ea:5e:a9:6e:2f:40:4d:5e:
3e:05:84:98:63:e5:bd:3a:1f:b1:24:5c:ce:8a:b5:
25:8e:36:b6:34:03:37:7c:59:51:9d:cd:7d:d8:0b:
42:36:82:f4:58:6c:1f:16:7f:bf:af:a0:72:45:4e:
d1:4b:4a:82:4f:68:ba:5c:33:2a:20:bf:e7:fe:56:
d2:bd:99:70:96:19:c3:3b:34:16:20:74:e7:0a:26:
6e:1d:bb:8a:cc:db:3b:80:d6:85:39:93:31:61:8c:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:35:94:F4:D7:49:90:84:6D:3E:7E:AB:18:DF:27:2A:11:F5:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/677B718857FC11F097A3E299DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:98:8e:d0:dd:bd:c6:ac:0e:99:d0:43:95:06:ef:1d:05:03:
24:f6:6f:13:c0:07:be:55:b8:87:69:ff:c1:9e:0e:0f:6e:32:
91:dd:70:7d:e7:21:5c:7c:2e:e9:1b:1a:7f:21:c3:07:85:65:
d4:f2:10:57:7f:a9:41:9a:b7:e4:63:4f:0e:dd:14:a0:77:5d:
89:2c:9d:83:5c:7e:88:53:23:a8:12:5a:0e:53:de:8b:e0:bf:
3a:24:16:fc:c0:c7:21:54:cd:09:1e:80:9e:23:67:61:d0:a0:
be:b4:84:39:07:a0:05:f8:dc:34:08:d7:06:92:e1:da:aa:6c:
dc:e9:66:30:7d:95:f2:39:35:9a:e9:eb:8c:d4:92:c8:0a:75:
c3:8c:3c:5d:aa:07:f7:7f:ee:9a:2e:ca:ba:39:f5:1e:a8:74:
7a:5e:d3:c2:36:12:96:f8:cf:3e:d3:98:7a:7a:4b:35:e4:33:
b6:e1:2b:cb:1b:30:0b:9a:53:7d:33:78:d6:40:b9:d2:2b:b7:
16:80:17:59:92:3e:9c:2b:53:e3:39:21:2c:13:76:17:9e:b3:
f9:65:a1:27:7e:b2:1a:a5:8d:9d:4f:fe:e2:d4:1b:bc:3e:24:
b3:e8:a7:5d:a9:65:a8:d2:d9:66:73:2d:6a:65:4a:54:00:0b:
48:11:09:8a
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYoBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzAzMTA1NjM4WhcNMjUwNzE3MTA1NjM4WjAYMRYw
FAYDVQQDEw02ODY2NjFlYi1jMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3DlPL008SVMk2KxzT8TdaBuf8EIlBfasQUzhgiQAI++XN78saa2O0E9k
3vOPSoz02Rt9oCaWy9zXhOOdsbopI6grLjoAHB78NAofTdH73vQ28JL9t5BYbBxP
NEcHScvvDJ5e0i+EMnirUQVt1/Y8r8PJ9K1xgwoRWitMhHDC4EudPAKiYDPVvsj5
eO4DbXbG18EM7YstftDS8rf/6l6pbi9ATV4+BYSYY+W9Oh+xJFzOirUljja2NAM3
fFlRnc192AtCNoL0WGwfFn+/r6ByRU7RS0qCT2i6XDMqIL/n/lbSvZlwlhnDOzQW
IHTnCiZuHbuKzNs7gNaFOZMxYYxcqwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEsn
NZT010mQhG0+fqsY3ycqEfVsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NzdCNzE4ODU3RkMxMUYwOTdBM0UyOTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlYAAwQFmlvgMA0GCSqG
SIb3DQEBCwUAA4IBAQAtmI7Q3b3GrA6Z0EOVBu8dBQMk9m8TwAe+VbiHaf/Bng4P
bjKR3XB95yFcfC7pGxp/IcMHhWXU8hBXf6lBmrfkY08O3RSgd12JLJ2DXH6IUyOo
EloOU96L4L86JBb8wMchVM0JHoCeI2dh0KC+tIQ5B6AF+Nw0CNcGkuHaqmzc6WYw
fZXyOTWa6euM1JLICnXDjDxdqgf3f+6aLsq6OfUeqHR6XtPCNhKW+M8+05h6eks1
5DO24SvLGzALmlN9M3jWQLnSK7cWgBdZkj6cK1PjOSEsE3YXnrP5ZaEnfrIapY2d
T/7i1Bu8PiSz6KddqWWo0tlmcy1qZUpUAAtIEQmK
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:09:03 2025 by rpki-client