Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF57DA64C5211F08EB548BBDAE4EC9C.roa
File: 6EF57DA64C5211F08EB548BBDAE4EC9C.roa (raw, json)
Hash identifier: xdb3GYGU5SQIb9Me7Mk68/+EtNkmX8/Z9bIBSBQAckw=
Subject key identifier: B2:79:C9:FF:6E:31:2F:1E:29:2D:9E:5E:CA:54:2D:86:BB:16:CF:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018753
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF57DA64C5211F08EB548BBDAE4EC9C.roa
Signing time: Wed 18 Jun 2025 14:42:18 +0000
ROA not before: Wed 18 Jun 2025 14:42:14 +0000
ROA not after: Fri 25 Jul 2025 14:42:14 +0000
asID: 203020
IP address blocks: 154.85.24.0/23 maxlen: 24
154.88.10.0/23 maxlen: 24
154.88.18.0/23 maxlen: 24
154.90.168.0/22 maxlen: 24
154.90.176.0/21 maxlen: 24
154.90.184.0/22 maxlen: 24
154.94.10.0/23 maxlen: 24
154.94.20.0/23 maxlen: 24
154.94.24.0/21 maxlen: 24
154.94.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100179 (0x18753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 14:42:14 2025 GMT
Not After : Jul 25 14:42:14 2025 GMT
Subject: CN=6852d04a-260a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:6d:cb:44:ab:b3:00:95:b5:60:e0:cd:12:
1f:45:52:e2:1c:8c:e1:64:7b:8d:ac:27:a8:d0:4f:
3b:fd:da:b2:83:65:55:b6:8d:55:05:cd:6a:a7:51:
20:f9:1d:be:d9:33:6f:e2:20:0e:de:e6:17:52:a9:
98:25:69:2a:c8:20:e7:24:39:a2:72:64:71:22:e6:
b7:ad:30:81:90:8e:9b:54:0b:18:3e:11:c8:20:6d:
8c:11:93:db:f6:55:53:60:65:e4:13:51:81:7f:fc:
42:a5:5c:ab:64:8c:19:00:ff:ac:e4:50:46:c4:3c:
df:10:f2:90:13:4b:56:61:73:9c:d5:da:66:96:ae:
9f:c1:14:99:01:2b:04:ec:d3:20:bb:48:67:33:a1:
57:22:d3:06:2c:da:fe:e5:e2:61:89:32:1a:37:08:
88:ce:83:74:c4:97:d6:62:44:cc:9a:d6:9c:9c:47:
3d:62:fe:e3:70:6a:d0:82:59:bf:c9:12:6c:2e:f5:
c2:bb:2e:7a:a4:b4:d5:8e:e0:4c:0b:54:b6:58:4e:
eb:a4:15:12:3f:1d:90:7f:19:4e:50:5c:c2:87:01:
ef:07:06:0e:4b:51:83:ed:c8:c1:7a:e6:24:19:33:
52:d3:40:81:44:86:fc:d9:50:1c:01:49:79:7d:58:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:C9:FF:6E:31:2F:1E:29:2D:9E:5E:CA:54:2D:86:BB:16:CF:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF57DA64C5211F08EB548BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.24.0/23
154.88.10.0/23
154.88.18.0/23
154.90.168.0/22
154.90.176.0-154.90.187.255
154.94.10.0/23
154.94.20.0/23
154.94.24.0/21
154.94.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:90:84:ec:a4:d0:b2:dc:38:04:61:b0:f5:2d:9e:ca:8e:06:
35:dd:ee:4b:7b:8b:35:7a:ec:ef:69:09:41:2f:07:df:f7:b7:
cc:bb:5c:ac:33:9f:e5:ec:05:47:1b:3c:b1:79:0b:a6:e5:8d:
bc:64:00:27:ab:5b:12:de:3b:c9:70:8d:3f:4d:31:a7:06:5c:
f5:39:e7:b5:73:c2:02:38:9c:5b:04:25:a5:12:fa:fc:c6:d1:
2d:16:28:21:0c:50:be:16:85:91:74:9f:c7:1d:8f:94:66:d1:
0f:b9:65:b0:d9:d3:d7:72:36:fb:fe:33:88:99:52:9b:c2:d6:
74:cd:8f:31:ea:46:c7:73:af:89:e7:03:a9:38:97:00:91:d1:
29:8c:22:7d:ab:1f:ed:ba:9f:ee:d0:3c:4f:e9:0c:ce:fe:58:
e9:98:a5:59:d9:2b:f0:85:d6:e9:20:0e:04:2f:39:88:a4:f7:
d5:1f:f2:51:fb:b6:cf:51:11:19:f0:2c:67:0a:51:4f:e0:cc:
1a:3d:b5:c0:ed:27:f2:b5:55:76:2f:c2:08:6a:1f:81:58:10:
f1:9e:2d:af:39:ae:03:58:38:c1:07:6d:e6:83:38:b3:7c:d0:
e8:df:c8:4c:86:e0:94:96:20:a8:36:52:af:7d:de:70:be:56:
5c:a1:9f:e6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAYdTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE4MTQ0MjE0WhcNMjUwNzI1MTQ0MjE0WjAYMRYw
FAYDVQQDEw02ODUyZDA0YS0yNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzwZty0SrswCVtWDgzRIfRVLiHIzhZHuNrCeo0E87/dqyg2VVto1VBc1q
p1Eg+R2+2TNv4iAO3uYXUqmYJWkqyCDnJDmicmRxIua3rTCBkI6bVAsYPhHIIG2M
EZPb9lVTYGXkE1GBf/xCpVyrZIwZAP+s5FBGxDzfEPKQE0tWYXOc1dpmlq6fwRSZ
ASsE7NMgu0hnM6FXItMGLNr+5eJhiTIaNwiIzoN0xJfWYkTMmtacnEc9Yv7jcGrQ
glm/yRJsLvXCuy56pLTVjuBMC1S2WE7rpBUSPx2QfxlOUFzChwHvBwYOS1GD7cjB
euYkGTNS00CBRIb82VAcAUl5fVg40wIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFLJ5
yf9uMS8eKS2eXspULYa7Fs/GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RUY1N0RBNjRDNTIxMUYwOEVCNTQ4QkJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBmlUYAwQBmlgKAwQBmlgS
AwQCmlqoMAwDBASaWrADBAKaWrgDBAGaXgoDBAGaXhQDBAOaXhgDBAGaXjYwDQYJ
KoZIhvcNAQELBQADggEBALCQhOyk0LLcOARhsPUtnsqOBjXd7kt7izV67O9pCUEv
B9/3t8y7XKwzn+XsBUcbPLF5C6bljbxkACerWxLeO8lwjT9NMacGXPU557VzwgI4
nFsEJaUS+vzG0S0WKCEMUL4WhZF0n8cdj5Rm0Q+5ZbDZ09dyNvv+M4iZUpvC1nTN
jzHqRsdzr4nnA6k4lwCR0SmMIn2rH+26n+7QPE/pDM7+WOmYpVnZK/CF1ukgDgQv
OYik99Uf8lH7ts9RERnwLGcKUU/gzBo9tcDtJ/K1VXYvwghqH4FYEPGeLa85rgNY
OMEHbeaDOLN80OjfyEyG4JSWIKg2Uq993nC+Vlyhn+Y=
-----END CERTIFICATE-----
Generated at Mon Jun 30 06:04:32 2025 by rpki-client