Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835587C4502A11F0BAD5F7B9DAE4EC9C.roa
File: 835587C4502A11F0BAD5F7B9DAE4EC9C.roa (raw, json)
Hash identifier: dp0cybN7nnayfnUOS8JHz7GYI3bKStryEH1iwAv8S4M=
Subject key identifier: 24:30:E5:01:31:09:93:A9:37:3A:13:E3:45:60:62:31:B0:D7:63:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835587C4502A11F0BAD5F7B9DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 12:06:37 +0000
ROA not before: Mon 23 Jun 2025 12:06:33 +0000
ROA not after: Tue 29 Jul 2025 12:06:33 +0000
asID: 134365
IP address blocks: 154.194.248.0/21 maxlen: 24
154.198.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100351 (0x187ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 12:06:33 2025 GMT
Not After : Jul 29 12:06:33 2025 GMT
Subject: CN=6859434d-9d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:99:ee:43:3f:c6:e8:66:59:16:a8:67:b1:
3e:a0:48:93:40:e9:54:98:a8:7b:69:0e:d7:41:d2:
54:c0:ec:92:a7:28:a9:ba:fa:11:26:c9:7d:ac:81:
06:ab:c1:ae:29:5b:ca:3e:76:d9:53:70:34:f4:8b:
1d:e9:c9:af:00:95:08:df:08:59:58:96:47:7c:e8:
26:57:bb:3a:9b:1b:d3:c7:89:e7:81:69:52:df:02:
32:d7:3a:23:fb:cd:a2:fe:97:a6:ce:7d:d1:5a:3e:
70:d5:60:02:db:c7:7e:ae:dc:b5:73:65:fb:37:a1:
20:e3:25:eb:4c:7c:67:43:67:d5:89:55:21:a3:1d:
c7:32:c5:30:5c:eb:e9:f5:fa:36:47:71:e8:db:89:
31:c8:1b:20:7d:81:3e:b6:27:c4:18:90:de:8c:72:
53:7d:56:84:f6:13:98:4f:9c:ab:ef:c7:ad:8a:4c:
1a:60:86:8d:11:71:f8:d7:a8:25:9e:3e:3e:df:88:
47:33:d3:0f:eb:c8:58:82:c8:fc:2e:6a:5f:cb:11:
ab:67:79:f6:17:42:7f:d7:35:0d:8e:5c:c8:26:12:
94:72:c7:6c:5a:c1:df:df:5e:a6:91:40:5c:9e:c0:
91:65:9b:f2:42:d1:c3:29:5d:4c:fb:f4:27:ab:80:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:E5:01:31:09:93:A9:37:3A:13:E3:45:60:62:31:B0:D7:63:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835587C4502A11F0BAD5F7B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.248.0/21
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3d:5e:12:9b:30:b1:26:a7:25:ff:87:6d:76:d8:00:47:1f:
ad:0a:e1:4b:8f:c2:79:7e:08:ab:ce:9c:8b:80:4e:12:c8:fa:
4d:5c:67:1e:29:da:09:a7:41:83:45:3f:44:c2:4a:46:c3:a2:
b5:25:27:1c:60:7e:25:ad:93:7a:85:3d:89:8a:a3:24:e1:46:
ca:9e:53:38:74:46:bd:60:15:bd:6d:be:3e:5b:5b:85:a2:e7:
3b:e0:04:02:0c:d4:fd:c3:c8:a4:62:fc:25:66:38:c8:48:4a:
84:81:e0:be:ae:8d:8b:dd:46:0f:ce:fd:61:26:fe:7e:81:bd:
6d:5f:2c:1c:2d:1d:7c:2f:aa:39:73:70:41:30:5d:78:3e:31:
63:46:73:bf:8c:9e:13:69:aa:9a:a0:0e:5f:f7:db:cf:82:6c:
b1:6b:00:0c:6c:65:8f:2b:99:8b:da:74:69:e9:cc:4a:8a:22:
1f:8c:bf:1e:9e:63:39:2f:8f:dc:9a:10:f2:7e:48:a8:49:f6:
06:ac:50:13:fb:b4:43:76:61:ef:94:26:0e:88:42:29:39:a6:
cb:34:52:4b:3b:d4:87:6c:0d:ec:b8:a3:76:08:d2:db:88:9b:
08:76:d3:90:fd:1e:b0:53:51:ba:2e:47:2c:8b:63:9d:70:be:
57:ee:25:07
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYf/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIzMTIwNjMzWhcNMjUwNzI5MTIwNjMzWjAYMRYw
FAYDVQQDEw02ODU5NDM0ZC05ZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2CCZ7kM/xuhmWRaoZ7E+oEiTQOlUmKh7aQ7XQdJUwOySpyipuvoRJsl9
rIEGq8GuKVvKPnbZU3A09Isd6cmvAJUI3whZWJZHfOgmV7s6mxvTx4nngWlS3wIy
1zoj+82i/pemzn3RWj5w1WAC28d+rty1c2X7N6Eg4yXrTHxnQ2fViVUhox3HMsUw
XOvp9fo2R3Ho24kxyBsgfYE+tifEGJDejHJTfVaE9hOYT5yr78etikwaYIaNEXH4
16glnj4+34hHM9MP68hYgsj8LmpfyxGrZ3n2F0J/1zUNjlzIJhKUcsdsWsHf316m
kUBcnsCRZZvyQtHDKV1M+/Qnq4DklwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCQw
5QExCZOpNzoT40VgYjGw12OGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MzU1ODdDNDUwMkExMUYwQkFENUY3QjlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmsL4AwQCmsYoMA0GCSqG
SIb3DQEBCwUAA4IBAQCNPV4SmzCxJqcl/4dtdtgARx+tCuFLj8J5fgirzpyLgE4S
yPpNXGceKdoJp0GDRT9EwkpGw6K1JSccYH4lrZN6hT2JiqMk4UbKnlM4dEa9YBW9
bb4+W1uFouc74AQCDNT9w8ikYvwlZjjISEqEgeC+ro2L3UYPzv1hJv5+gb1tXywc
LR18L6o5c3BBMF14PjFjRnO/jJ4TaaqaoA5f99vPgmyxawAMbGWPK5mL2nRp6cxK
iiIfjL8enmM5L4/cmhDyfkioSfYGrFAT+7RDdmHvlCYOiEIpOabLNFJLO9SHbA3s
uKN2CNLbiJsIdtOQ/R6wU1G6Lkcsi2OdcL5X7iUH
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:39:04 2025 by rpki-client