Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2B31DE630B011F085B4B4B9DAE4EC9C.roa
File: A2B31DE630B011F085B4B4B9DAE4EC9C.roa (raw, json)
Hash identifier: OWKR4u8+wtSp04qYXE9Tb1/lQRBXFfoPD+4HesKndEk=
Subject key identifier: 81:C2:11:7C:34:F8:37:86:AA:1B:6F:FF:6E:87:0D:2C:BB:E7:77:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2B31DE630B011F085B4B4B9DAE4EC9C.roa
Signing time: Wed 14 May 2025 10:46:05 +0000
ROA not before: Wed 14 May 2025 10:46:01 +0000
ROA not after: Mon 30 Jun 2025 10:46:01 +0000
asID: 57043
IP address blocks: 154.222.38.0/23 maxlen: 24
154.222.66.0/23 maxlen: 24
154.222.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98457 (0x18099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 10:46:01 2025 GMT
Not After : Jun 30 10:46:01 2025 GMT
Subject: CN=6824746d-61ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:3a:5d:ee:7d:4e:31:96:3a:d2:bb:c3:ec:
2d:6b:fe:a9:2d:38:6b:91:2b:d1:c9:d6:1a:bb:6c:
a9:ba:36:07:62:3f:4a:5e:ce:f3:3b:2f:4e:84:bd:
14:3d:13:6e:5d:f0:ac:97:ff:88:16:a1:10:de:86:
2a:5b:2c:4b:23:c9:07:36:3f:0b:62:e6:c7:3a:72:
e1:0c:c7:0b:10:da:02:fd:68:af:05:ce:fb:ca:fe:
e0:4b:ef:24:7d:0f:03:8a:66:3f:30:ae:7b:59:4d:
94:37:90:f1:a6:aa:b2:30:31:25:04:70:5c:26:89:
16:d2:2a:ba:7d:38:c2:15:91:d4:26:82:98:34:5f:
c0:f6:25:d3:06:10:c0:af:70:d1:0a:e1:ba:49:c1:
a0:88:3e:5e:cf:3f:ed:e3:31:07:d5:df:ef:8c:07:
c6:36:ec:81:68:a6:8e:d2:87:df:37:18:a1:94:c2:
93:c6:9f:80:3c:ca:f3:1c:89:34:5c:99:9e:14:46:
bd:f9:03:fe:e5:1b:ab:87:5f:7c:ab:ed:8a:47:fd:
fe:1c:48:3e:ff:0a:a0:15:f5:3c:d3:13:48:78:1d:
99:b2:bf:3b:87:5f:28:44:36:f7:7f:84:4a:d7:36:
5d:db:f7:20:3b:3f:f4:28:cc:77:4a:41:cd:6e:22:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:11:7C:34:F8:37:86:AA:1B:6F:FF:6E:87:0D:2C:BB:E7:77:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2B31DE630B011F085B4B4B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.38.0/23
154.222.66.0/23
154.222.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:6c:be:98:46:3c:76:56:ae:0b:48:60:a6:4f:43:5a:9f:d7:
be:b3:2d:05:f7:93:e2:1b:a9:df:8e:4a:ea:8a:46:34:63:99:
3f:ec:c5:c2:05:1c:f3:1d:e0:3b:9d:17:83:fe:c9:68:1b:b9:
40:5f:5b:20:99:86:9e:c6:11:3d:96:ea:12:d1:d1:99:2a:bb:
97:9d:99:82:6a:9e:39:24:eb:ed:cf:b8:2e:d9:49:03:79:44:
c2:e9:87:a2:3f:83:0e:4d:c8:d8:0e:e1:54:b5:3e:08:cd:57:
cb:f0:27:fe:1d:88:b9:f0:28:ab:46:47:1c:7c:2f:d8:32:c0:
33:35:74:31:95:69:3e:82:c6:d1:12:24:74:3d:eb:ba:67:24:
29:6c:a5:d2:e8:0a:ad:c9:a8:ff:4b:ac:49:6e:9a:c9:33:ec:
dd:d1:db:c5:84:af:49:a3:3a:a5:6f:89:f7:79:64:f0:61:79:
5e:d8:bb:25:36:1e:0e:61:18:8e:47:6c:8e:dd:45:6f:da:fc:
08:d2:5b:62:b2:05:8d:55:59:90:dd:b6:23:90:94:08:79:61:
d7:05:7b:01:36:5e:26:af:e3:b7:dc:e4:62:ea:e6:b2:1b:b2:
69:0a:c6:90:9b:a4:45:fe:bb:98:56:45:26:25:79:88:26:17:
ec:55:f3:8e
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAYCZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE0MTA0NjAxWhcNMjUwNjMwMTA0NjAxWjAYMRYw
FAYDVQQDEw02ODI0NzQ2ZC02MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwp86Xe59TjGWOtK7w+wta/6pLThrkSvRydYau2ypujYHYj9KXs7zOy9O
hL0UPRNuXfCsl/+IFqEQ3oYqWyxLI8kHNj8LYubHOnLhDMcLENoC/WivBc77yv7g
S+8kfQ8DimY/MK57WU2UN5DxpqqyMDElBHBcJokW0iq6fTjCFZHUJoKYNF/A9iXT
BhDAr3DRCuG6ScGgiD5ezz/t4zEH1d/vjAfGNuyBaKaO0offNxihlMKTxp+APMrz
HIk0XJmeFEa9+QP+5Rurh198q+2KR/3+HEg+/wqgFfU80xNIeB2Zsr87h18oRDb3
f4RK1zZd2/cgOz/0KMx3SkHNbiLK5wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFIHC
EXw0+DeGqhtv/26HDSy753e0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMkIzMURFNjMwQjAxMUYwODVCNEI0QjlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmt4mAwQBmt5CAwQBmt6G
MA0GCSqGSIb3DQEBCwUAA4IBAQALbL6YRjx2Vq4LSGCmT0Nan9e+sy0F95PiG6nf
jkrqikY0Y5k/7MXCBRzzHeA7nReD/sloG7lAX1sgmYaexhE9luoS0dGZKruXnZmC
ap45JOvtz7gu2UkDeUTC6YeiP4MOTcjYDuFUtT4IzVfL8Cf+HYi58CirRkccfC/Y
MsAzNXQxlWk+gsbREiR0Peu6ZyQpbKXS6Aqtyaj/S6xJbprJM+zd0dvFhK9Jozql
b4n3eWTwYXle2LslNh4OYRiOR2yO3UVv2vwI0ltisgWNVVmQ3bYjkJQIeWHXBXsB
Nl4mr+O33ORi6uayG7JpCsaQm6RF/ruYVkUmJXmIJhfsVfOO
-----END CERTIFICATE-----
Generated at Thu May 15 23:50:16 2025 by rpki-client