Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6806233025D111F094253D79DAE4EC9C.roa
File: 6806233025D111F094253D79DAE4EC9C.roa (raw, json)
Hash identifier: tLX5ZyC+Fn5RtV78gqKK5aTrVXhT8zV0L4xl73YoWI8=
Subject key identifier: 7D:40:8B:6C:AA:EA:C3:23:A3:BA:83:E4:C1:FE:A7:FE:85:1D:B1:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6806233025D111F094253D79DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:42:57 +0000
ROA not before: Wed 30 Apr 2025 14:42:53 +0000
ROA not after: Tue 28 Apr 2026 14:42:53 +0000
asID: 984
IP address blocks: 154.93.163.0/24 maxlen: 24
154.93.186.0/24 maxlen: 24
154.93.198.0/24 maxlen: 24
154.93.202.0/24 maxlen: 24
154.93.208.0/24 maxlen: 24
154.93.210.0/24 maxlen: 24
154.93.211.0/24 maxlen: 24
154.93.228.0/24 maxlen: 24
154.93.233.0/24 maxlen: 24
154.93.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97683 (0x17d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:42:53 2025 GMT
Not After : Apr 28 14:42:53 2026 GMT
Subject: CN=681236f1-cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:e4:ea:69:1b:91:8c:e9:fd:5e:a3:30:c4:
20:a0:79:ad:9b:96:89:f4:02:8a:7c:11:5a:6a:b9:
12:f0:a9:53:85:17:6d:b3:82:9d:0b:c1:34:7e:a2:
15:a7:a8:da:a8:09:d7:d5:0d:4b:cf:b7:6a:8f:3b:
65:7f:6d:08:50:45:53:24:14:ca:3a:a6:dd:43:89:
7d:77:be:f3:08:98:68:c4:dd:d2:76:3d:24:9d:14:
c8:d1:d4:ef:2b:08:84:fd:eb:fd:43:14:d2:c2:e0:
e9:8a:f3:e0:ca:db:84:63:75:50:84:4a:e9:0b:cd:
81:ef:05:e0:44:a7:8f:45:cc:80:22:eb:b7:4b:10:
44:5a:ce:70:40:23:04:eb:ca:a2:51:98:83:7d:45:
15:33:0a:18:07:51:e1:b4:89:54:cd:0a:99:14:40:
3f:d4:ef:50:8c:b7:39:e1:84:c5:34:c9:1a:4f:a6:
36:b7:27:92:e3:1f:8e:df:94:66:b0:3b:b7:43:02:
96:23:80:38:de:34:c1:85:7a:ac:c9:8d:19:21:03:
06:69:1b:bb:c6:da:9f:bb:e7:03:b9:d7:83:dd:b6:
54:33:31:d9:4e:c1:8b:bd:c1:6a:33:5c:68:c1:90:
17:4d:31:ee:62:60:e7:51:e4:a1:ff:84:a1:e7:f7:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:8B:6C:AA:EA:C3:23:A3:BA:83:E4:C1:FE:A7:FE:85:1D:B1:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6806233025D111F094253D79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.163.0/24
154.93.186.0/24
154.93.198.0/24
154.93.202.0/24
154.93.208.0/24
154.93.210.0/23
154.93.228.0/24
154.93.233.0/24
154.93.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:95:c2:6d:51:47:c5:cc:92:0d:c5:30:d1:f5:c6:83:88:cb:
24:38:7a:ed:ae:65:c0:b5:3b:0b:f7:e8:c5:c7:05:ae:db:4a:
71:35:0b:eb:4e:6c:c1:5d:a2:f3:bd:66:5f:0e:51:94:82:de:
81:de:f7:b1:5a:f3:9e:c9:6a:bb:6d:74:07:fd:c3:89:1c:a6:
6e:78:f6:23:47:8d:c6:96:78:48:98:26:e7:76:13:87:24:78:
44:86:2e:ad:c8:63:bd:3b:8d:8b:a5:c7:f6:85:e2:58:e6:ca:
8f:cd:be:da:c9:3c:8c:c7:3a:36:95:9c:e0:06:0e:7d:63:63:
22:69:1f:17:9b:aa:af:5f:50:84:c8:7a:a2:b6:07:47:19:44:
83:23:02:14:95:be:69:04:91:70:49:72:70:ba:00:a4:9b:51:
60:45:44:a7:9f:23:78:81:a9:7d:5e:07:b7:b6:d5:2c:51:53:
f6:bc:33:e2:85:ad:c9:84:df:62:13:fc:e6:b4:01:1d:d6:ba:
15:0c:e3:f0:27:0c:70:2c:3f:f6:50:39:ac:42:c5:72:98:d4:
a0:b7:ac:07:60:18:84:ad:3b:b8:93:00:45:06:6a:d5:37:0b:
0f:a9:b6:86:16:a9:1d:e9:b3:f8:ae:18:90:4e:fb:df:53:6a:
be:d6:20:0a
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAX2TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTQ0MjUzWhcNMjYwNDI4MTQ0MjUzWjAYMRYw
FAYDVQQDEw02ODEyMzZmMS1jYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqIbk6mkbkYzp/V6jMMQgoHmtm5aJ9AKKfBFaarkS8KlThRdts4KdC8E0
fqIVp6jaqAnX1Q1Lz7dqjztlf20IUEVTJBTKOqbdQ4l9d77zCJhoxN3Sdj0knRTI
0dTvKwiE/ev9QxTSwuDpivPgytuEY3VQhErpC82B7wXgRKePRcyAIuu3SxBEWs5w
QCME68qiUZiDfUUVMwoYB1HhtIlUzQqZFEA/1O9QjLc54YTFNMkaT6Y2tyeS4x+O
35RmsDu3QwKWI4A43jTBhXqsyY0ZIQMGaRu7xtqfu+cDudeD3bZUMzHZTsGLvcFq
M1xowZAXTTHuYmDnUeSh/4Sh5/d21QIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFH1A
i2yq6sMjo7qD5MH+p/6FHbEzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82ODA2MjMzMDI1RDExMUYwOTQyNTNENzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAml2jAwQAml26AwQAml3G
AwQAml3KAwQAml3QAwQBml3SAwQAml3kAwQAml3pAwQAml3uMA0GCSqGSIb3DQEB
CwUAA4IBAQCulcJtUUfFzJINxTDR9caDiMskOHrtrmXAtTsL9+jFxwWu20pxNQvr
TmzBXaLzvWZfDlGUgt6B3vexWvOeyWq7bXQH/cOJHKZuePYjR43GlnhImCbndhOH
JHhEhi6tyGO9O42Lpcf2heJY5sqPzb7ayTyMxzo2lZzgBg59Y2MiaR8Xm6qvX1CE
yHqitgdHGUSDIwIUlb5pBJFwSXJwugCkm1FgRUSnnyN4gal9Xge3ttUsUVP2vDPi
ha3JhN9iE/zmtAEd1roVDOPwJwxwLD/2UDmsQsVymNSgt6wHYBiErTu4kwBFBmrV
NwsPqbaGFqkd6bP4rhiQTvvfU2q+1iAK
-----END CERTIFICATE-----
Generated at Sat May 10 10:13:10 2025 by rpki-client