Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7480A8C4E7511F0B9AD4BACDAE4EC9C.roa
File: A7480A8C4E7511F0B9AD4BACDAE4EC9C.roa (raw, json)
Hash identifier: v5ARdMoBv9HxNetpQdyi/ygc3F5b/eDWSRAP0c/AGVs=
Subject key identifier: B8:89:34:AD:DA:54:59:3C:27:47:13:0C:21:F5:49:5B:F0:87:FD:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7480A8C4E7511F0B9AD4BACDAE4EC9C.roa
Signing time: Sat 21 Jun 2025 07:59:27 +0000
ROA not before: Sat 21 Jun 2025 07:59:23 +0000
ROA not after: Tue 08 Jul 2025 07:59:23 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100268 (0x187ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 07:59:23 2025 GMT
Not After : Jul 8 07:59:23 2025 GMT
Subject: CN=6856665f-4715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:a4:29:0c:a3:01:be:ec:10:bc:d1:6a:75:
75:18:29:88:32:5b:c0:2a:dc:87:77:aa:b9:d7:f9:
c4:60:1e:b9:7e:4c:81:66:9b:ce:7c:ee:6f:b7:90:
6f:26:f6:98:25:37:ee:a2:70:2b:5f:d1:25:38:7f:
9d:b2:19:af:91:17:e8:bf:0a:13:67:34:14:10:c5:
77:72:75:45:7d:7f:0f:da:04:58:d1:72:ef:45:80:
3f:92:6e:53:91:e4:83:ae:cb:59:4b:a7:07:28:f9:
e2:5f:02:3f:cf:c9:1c:c9:c2:d3:9c:30:e9:a4:60:
f5:02:46:8c:be:14:d2:09:5f:4d:2c:75:f9:a5:51:
98:2a:4f:72:0f:23:b7:17:fb:b8:0d:85:b4:4d:18:
c4:f7:df:91:04:ad:f0:f8:86:6e:6a:b4:d2:26:f1:
35:46:7a:d6:22:45:fe:f6:cb:a8:06:f6:53:19:29:
60:61:27:a3:2b:00:65:60:a4:6b:cc:a2:78:87:64:
35:67:7f:e6:94:18:7b:84:56:9e:8f:81:a1:0b:a9:
7f:99:0a:ff:20:99:a5:52:7a:c8:fa:2f:ab:ed:b4:
e8:44:d7:7e:e4:58:09:da:01:da:75:af:11:67:1e:
4a:05:d2:33:2c:07:e6:de:ba:c7:9d:f4:55:ce:42:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:89:34:AD:DA:54:59:3C:27:47:13:0C:21:F5:49:5B:F0:87:FD:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7480A8C4E7511F0B9AD4BACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
60:3f:4e:d2:ef:85:8b:bb:af:98:e9:57:16:81:21:94:66:02:
56:d0:5c:32:15:15:de:45:61:84:cf:09:d8:aa:46:a3:17:e1:
92:75:30:bf:3b:6d:76:c0:c6:e8:22:16:13:54:20:2a:33:c1:
06:ea:34:07:1e:0d:ef:5c:83:64:11:15:75:b2:62:bf:b4:2b:
d3:ad:43:9d:73:62:32:07:01:8a:89:3a:d7:28:65:24:ba:96:
95:3b:41:70:ef:6f:00:b0:28:19:9b:eb:60:1a:28:c9:9e:6a:
cd:2c:5f:ec:26:12:c1:39:ca:0c:f2:79:16:b7:08:8a:76:ab:
bd:40:d5:0f:cb:34:e3:4a:ec:c4:94:da:09:c7:ec:fe:8e:dc:
32:4b:0e:4b:76:9b:51:00:fb:7d:94:be:10:f9:54:9a:90:52:
53:ae:9f:d1:61:41:36:6d:e1:01:47:5b:ce:ee:26:93:bb:1a:
ce:8d:1f:1c:3f:3a:95:ab:69:89:65:87:5e:4a:77:cf:f0:e9:
b2:3a:96:7d:fd:7b:76:66:fd:77:7d:20:5b:cc:91:65:7e:94:
f4:68:29:0b:c8:46:4e:fa:65:c2:d8:2a:60:85:bb:6c:8b:8e:
f3:10:00:c4:3d:10:1a:d1:ed:e5:5d:90:b3:16:6e:4e:f4:e3:
11:e8:89:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYesMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIxMDc1OTIzWhcNMjUwNzA4MDc1OTIzWjAYMRYw
FAYDVQQDEw02ODU2NjY1Zi00NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw72kKQyjAb7sELzRanV1GCmIMlvAKtyHd6q51/nEYB65fkyBZpvOfO5v
t5BvJvaYJTfuonArX9ElOH+dshmvkRfovwoTZzQUEMV3cnVFfX8P2gRY0XLvRYA/
km5TkeSDrstZS6cHKPniXwI/z8kcycLTnDDppGD1AkaMvhTSCV9NLHX5pVGYKk9y
DyO3F/u4DYW0TRjE99+RBK3w+IZuarTSJvE1RnrWIkX+9suoBvZTGSlgYSejKwBl
YKRrzKJ4h2Q1Z3/mlBh7hFaej4GhC6l/mQr/IJmlUnrI+i+r7bToRNd+5FgJ2gHa
da8RZx5KBdIzLAfm3rrHnfRVzkLMEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLiJ
NK3aVFk8J0cTDCH1SVvwh/0/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNzQ4MEE4QzRFNzUxMUYwQjlBRDRCQUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlEgMA0GCSqGSIb3DQEB
CwUAA4IBAQBgP07S74WLu6+Y6VcWgSGUZgJW0FwyFRXeRWGEzwnYqkajF+GSdTC/
O212wMboIhYTVCAqM8EG6jQHHg3vXINkERV1smK/tCvTrUOdc2IyBwGKiTrXKGUk
upaVO0Fw728AsCgZm+tgGijJnmrNLF/sJhLBOcoM8nkWtwiKdqu9QNUPyzTjSuzE
lNoJx+z+jtwySw5LdptRAPt9lL4Q+VSakFJTrp/RYUE2beEBR1vO7iaTuxrOjR8c
PzqVq2mJZYdeSnfP8OmyOpZ9/Xt2Zv13fSBbzJFlfpT0aCkLyEZO+mXC2Cpghbts
i47zEADEPRAa0e3lXZCzFm5O9OMR6Imu
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:58:38 2025 by rpki-client