Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A479465625C411F0840DF9A3DAE4EC9C.roa
File: A479465625C411F0840DF9A3DAE4EC9C.roa (raw, json)
Hash identifier: 9gDYhmuHxmw/l6zFoYV8DZL0pweNf0riSBMkDd+YtAc=
Subject key identifier: FE:15:95:99:51:FA:FF:0B:DF:41:F6:01:48:3B:E6:5C:4B:81:21:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A479465625C411F0840DF9A3DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 13:11:36 +0000
ROA not before: Wed 30 Apr 2025 13:11:31 +0000
ROA not after: Tue 28 Apr 2026 13:11:31 +0000
asID: 984
IP address blocks: 154.80.128.0/24 maxlen: 24
154.80.129.0/24 maxlen: 24
154.80.130.0/24 maxlen: 24
154.80.131.0/24 maxlen: 24
154.94.41.0/24 maxlen: 24
154.94.46.0/24 maxlen: 24
154.94.48.0/24 maxlen: 24
154.94.49.0/24 maxlen: 24
154.94.50.0/24 maxlen: 24
154.94.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 18:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97652 (0x17d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:11:31 2025 GMT
Not After : Apr 28 13:11:31 2026 GMT
Subject: CN=68122187-e998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:4a:4b:4f:ca:54:0a:f1:37:17:e9:8b:3a:
a4:d8:c6:13:fa:2f:09:bb:d8:1b:2d:55:0e:88:41:
8a:19:b0:a1:2c:7c:9a:73:c8:3f:fb:ef:6b:86:4c:
2e:5c:9a:c6:c7:37:62:84:e5:8b:ee:74:88:c3:e0:
5b:79:c3:ce:1a:d8:3e:b6:3e:3b:65:0d:6c:f1:a7:
50:1d:92:8c:11:13:42:f9:06:a3:20:22:c5:ee:9b:
6d:40:e2:ef:a6:45:b3:18:c7:c5:ca:43:e3:e4:d1:
9d:76:66:d8:96:cf:fa:6d:bd:6a:a2:9a:fc:f4:45:
21:6d:29:71:6c:eb:e3:b4:89:4e:04:c5:56:62:e7:
52:d6:2b:87:d6:23:dc:49:4a:c0:1b:2c:0c:03:07:
c8:c4:4d:3b:e3:7e:ca:c9:36:9d:36:68:eb:63:95:
28:40:33:bb:c0:37:3b:c9:ab:62:cf:10:8f:e5:ec:
74:e0:39:22:9f:96:fa:38:fd:75:e0:45:38:1d:87:
0d:06:16:b8:73:f2:f6:66:10:07:dd:ad:76:b2:5c:
ad:9f:d3:bc:f2:6f:9e:09:17:a5:bf:22:19:be:36:
45:3a:eb:86:c0:de:bb:d6:ab:01:d1:63:9b:67:9d:
43:28:f0:6f:6a:b1:b3:0a:16:47:73:e5:dc:a0:d8:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:95:99:51:FA:FF:0B:DF:41:F6:01:48:3B:E6:5C:4B:81:21:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A479465625C411F0840DF9A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.128.0/22
154.94.41.0/24
154.94.46.0/24
154.94.48.0-154.94.50.255
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:df:c7:4b:27:e5:2b:af:86:c0:14:b9:0b:fb:bf:d5:38:8d:
83:14:e9:8c:a5:26:0f:be:4d:c1:eb:5d:0c:11:df:ad:46:d3:
02:ee:62:4c:a0:d5:5b:73:f1:9f:ae:b7:79:75:19:7a:48:8e:
ab:01:65:71:51:a8:53:d2:9a:aa:4b:6e:8b:8f:66:37:79:d0:
54:0b:f3:e6:9a:32:09:d7:20:2f:57:95:03:66:39:c0:a7:65:
b5:0e:64:81:48:d7:72:35:a5:d2:94:48:40:5e:f2:ef:27:74:
48:9c:96:e9:57:89:d3:fc:ad:1e:8e:a6:97:39:e2:12:6e:1a:
47:c2:b2:b3:5e:74:64:bb:bf:e5:9a:42:6f:d5:d1:15:c2:74:
23:97:e9:5e:b0:c2:df:b6:1f:79:01:18:22:f8:77:5e:8a:63:
24:eb:39:96:cb:68:3d:d4:91:06:d9:e4:56:ff:94:9f:24:82:
f2:a7:a0:4c:af:2c:50:9c:10:d1:95:3a:ec:3e:9e:37:fd:dc:
ad:0b:96:38:a8:0a:83:85:54:18:02:11:fa:b8:2c:fc:a9:bf:
60:d7:21:0f:15:22:eb:ef:ad:a3:f0:e7:a3:2d:4f:cd:58:df:
7f:5e:06:e7:21:61:f9:42:0e:f3:9f:4c:74:a6:d9:06:4d:de:
b9:4e:34:96
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAX10MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTMxMTMxWhcNMjYwNDI4MTMxMTMxWjAYMRYw
FAYDVQQDEw02ODEyMjE4Ny1lOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA25NKS0/KVArxNxfpizqk2MYT+i8Ju9gbLVUOiEGKGbChLHyac8g/++9r
hkwuXJrGxzdihOWL7nSIw+BbecPOGtg+tj47ZQ1s8adQHZKMERNC+QajICLF7ptt
QOLvpkWzGMfFykPj5NGddmbYls/6bb1qopr89EUhbSlxbOvjtIlOBMVWYudS1iuH
1iPcSUrAGywMAwfIxE07437KyTadNmjrY5UoQDO7wDc7yatizxCP5ex04Dkin5b6
OP114EU4HYcNBha4c/L2ZhAH3a12slytn9O88m+eCRelvyIZvjZFOuuGwN671qsB
0WObZ51DKPBvarGzChZHc+XcoNhm7wIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFP4V
lZlR+v8L30H2AUg75lxLgSHmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNDc5NDY1NjI1QzQxMUYwODQwREY5QTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCmlCAAwQAml4pAwQAml4u
MAwDBASaXjADBACaXjIDBACaXjwwDQYJKoZIhvcNAQELBQADggEBAIzfx0sn5Suv
hsAUuQv7v9U4jYMU6YylJg++TcHrXQwR361G0wLuYkyg1Vtz8Z+ut3l1GXpIjqsB
ZXFRqFPSmqpLbouPZjd50FQL8+aaMgnXIC9XlQNmOcCnZbUOZIFI13I1pdKUSEBe
8u8ndEiclulXidP8rR6Oppc54hJuGkfCsrNedGS7v+WaQm/V0RXCdCOX6V6wwt+2
H3kBGCL4d16KYyTrOZbLaD3UkQbZ5Fb/lJ8kgvKnoEyvLFCcENGVOuw+njf93K0L
ljioCoOFVBgCEfq4LPypv2DXIQ8VIuvvraPw56MtT81Y339eBuchYflCDvOfTHSm
2QZN3rlONJY=
-----END CERTIFICATE-----
Generated at Sat May 10 01:36:06 2025 by rpki-client