Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96936F3E241C11F08471708BDAE4EC9C.roa
File: 96936F3E241C11F08471708BDAE4EC9C.roa (raw, json)
Hash identifier: mzmSmOt1YEv+gU5R9yYGclYFxx3lI12ErliddYDxUNk=
Subject key identifier: B1:02:E9:99:AA:E8:A5:80:5A:5B:12:13:DC:9E:3A:2C:20:11:36:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96936F3E241C11F08471708BDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:36:06 +0000
ROA not before: Mon 28 Apr 2025 10:36:00 +0000
ROA not after: Wed 06 May 2026 10:36:00 +0000
asID: 140224
IP address blocks: 154.86.16.0/24 maxlen: 24
154.86.17.0/24 maxlen: 24
154.86.18.0/24 maxlen: 24
154.86.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97118 (0x17b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:36:00 2025 GMT
Not After : May 6 10:36:00 2026 GMT
Subject: CN=680f5a16-c327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5c:2f:24:60:a5:f4:c0:a4:86:b6:6c:27:18:
0e:78:ad:bb:d5:9b:ef:b5:2e:d0:ba:44:bd:da:23:
1a:64:72:40:43:a2:d5:f3:9d:1a:82:d9:ff:16:18:
00:d3:6a:30:59:68:e8:ed:31:11:3c:14:c2:7e:f0:
9d:f6:ee:74:6c:68:53:84:30:d9:cd:c0:da:d5:29:
ad:d3:e9:53:bc:8a:f2:9d:f7:d4:1a:05:ba:7e:a5:
8b:6b:3f:24:b8:60:3d:a6:8f:93:91:70:da:d0:8a:
3e:f3:b0:8a:25:8a:f1:b5:0f:f6:94:b4:f1:49:5e:
21:82:61:90:fd:7a:53:69:4c:c0:9f:c0:d8:53:54:
58:66:ef:98:63:62:c6:b1:1f:df:ae:9e:b4:54:e1:
16:23:a7:c0:60:10:62:bd:0c:d0:0c:90:ad:05:fc:
c0:b7:8c:9e:de:b9:52:f6:42:91:b2:0b:aa:72:66:
29:9f:99:b0:2d:50:a4:04:91:4b:c0:f6:79:ce:0f:
aa:25:6c:d8:de:f8:65:d2:2e:20:77:4b:ca:83:dd:
ea:a9:65:a0:d3:f4:4a:c1:1b:72:39:c6:74:c8:de:
60:06:9f:d0:3c:6e:e4:65:d8:fd:e3:33:1c:26:d9:
d3:f7:7b:65:16:81:54:79:32:d1:a5:85:49:f3:42:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:E9:99:AA:E8:A5:80:5A:5B:12:13:DC:9E:3A:2C:20:11:36:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96936F3E241C11F08471708BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b9:81:c1:8c:47:a7:aa:6b:e6:bc:34:4e:03:29:86:a0:32:
5e:3f:1a:86:eb:96:34:f0:73:2a:34:2b:b3:20:ff:a7:3b:82:
7e:1f:10:af:0c:d6:69:50:20:3b:89:f9:1f:19:bc:74:2b:98:
cc:ee:10:92:9e:73:9b:2d:2e:5d:aa:b1:5c:05:77:d2:75:87:
3c:ba:0e:72:f9:e2:b0:73:44:15:bc:93:9c:c2:c8:e7:bb:ec:
67:c4:89:64:44:9d:8e:83:5f:48:52:72:53:8a:b6:32:cb:13:
ed:3d:27:30:ad:4c:8d:14:ce:08:8c:6a:e4:25:bc:d9:fb:87:
75:b7:8c:70:a0:f1:9d:6c:0e:c7:ba:2c:03:e7:13:4b:13:71:
d6:b3:2f:dc:90:54:2f:58:29:f0:59:68:82:c2:db:eb:39:58:
c4:5b:46:bb:0c:57:91:35:6c:ab:2f:3f:1b:a2:c1:70:82:c5:
63:83:63:bb:90:c9:51:f4:36:eb:c1:d9:b4:a6:81:3a:11:a7:
5f:ba:ab:08:0d:c7:e5:bd:c3:f5:34:9d:7d:8f:38:fa:c9:3f:
10:f5:57:09:51:49:da:38:1c:a9:da:4e:eb:22:c7:f5:a9:89:
d1:1c:16:06:5e:b7:7e:c6:a0:18:27:e7:d4:43:61:4c:06:e9:
67:15:84:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXteMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTAzNjAwWhcNMjYwNTA2MTAzNjAwWjAYMRYw
FAYDVQQDEw02ODBmNWExNi1jMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3FwvJGCl9MCkhrZsJxgOeK271ZvvtS7QukS92iMaZHJAQ6LV850agtn/
FhgA02owWWjo7TERPBTCfvCd9u50bGhThDDZzcDa1Smt0+lTvIrynffUGgW6fqWL
az8kuGA9po+TkXDa0Io+87CKJYrxtQ/2lLTxSV4hgmGQ/XpTaUzAn8DYU1RYZu+Y
Y2LGsR/frp60VOEWI6fAYBBivQzQDJCtBfzAt4ye3rlS9kKRsguqcmYpn5mwLVCk
BJFLwPZ5zg+qJWzY3vhl0i4gd0vKg93qqWWg0/RKwRtyOcZ0yN5gBp/QPG7kZdj9
4zMcJtnT93tlFoFUeTLRpYVJ80LDaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLEC
6Zmq6KWAWlsSE9yeOiwgETboMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjkzNkYzRTI0MUMxMUYwODQ3MTcwOEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlYQMA0GCSqGSIb3DQEB
CwUAA4IBAQAAuYHBjEenqmvmvDROAymGoDJePxqG65Y08HMqNCuzIP+nO4J+HxCv
DNZpUCA7ifkfGbx0K5jM7hCSnnObLS5dqrFcBXfSdYc8ug5y+eKwc0QVvJOcwsjn
u+xnxIlkRJ2Og19IUnJTirYyyxPtPScwrUyNFM4IjGrkJbzZ+4d1t4xwoPGdbA7H
uiwD5xNLE3HWsy/ckFQvWCnwWWiCwtvrOVjEW0a7DFeRNWyrLz8bosFwgsVjg2O7
kMlR9Dbrwdm0poE6EadfuqsIDcflvcP1NJ19jzj6yT8Q9VcJUUnaOByp2k7rIsf1
qYnRHBYGXrd+xqAYJ+fUQ2FMBulnFYS2
-----END CERTIFICATE-----
Generated at Sat May 10 07:35:42 2025 by rpki-client