Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E0049C574F11F0BCE55EB0DAE4EC9C.roa
File: C7E0049C574F11F0BCE55EB0DAE4EC9C.roa (raw, json)
Hash identifier: 6SF2KhmZvAHLQ/ymTACUBX4knawTQDdVTqStUQtg/gc=
Subject key identifier: 31:A8:51:3B:B7:35:38:43:56:C9:25:8A:E0:6F:4B:2E:87:60:E0:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E0049C574F11F0BCE55EB0DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 14:21:02 +0000
ROA not before: Wed 02 Jul 2025 14:20:57 +0000
ROA not after: Sun 24 Aug 2025 14:20:57 +0000
asID: 400619
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100822 (0x189d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 14:20:57 2025 GMT
Not After : Aug 24 14:20:57 2025 GMT
Subject: CN=6865404e-11ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:0f:05:45:e2:ea:26:72:16:f8:05:30:67:
5c:38:4e:d9:ea:b7:15:3b:47:26:8c:79:c8:12:06:
38:55:b4:94:9b:e6:9a:9c:18:43:96:a2:2b:65:62:
36:57:b7:77:9b:c0:b9:5c:ba:65:55:04:67:84:ca:
1d:98:9f:fd:79:a6:68:9a:38:c9:0e:99:fe:d6:06:
76:9a:39:cf:3d:df:fb:17:2c:34:a4:96:5a:df:6c:
75:78:0a:19:ae:29:41:1f:36:24:c2:e8:cd:73:a2:
e4:dd:95:f2:28:ff:6b:6f:80:2b:9b:df:61:b1:c3:
8c:34:3e:34:82:7e:ba:0b:ea:95:cf:99:37:78:69:
c9:01:61:33:56:3c:91:2e:3d:19:2c:32:7a:dd:e0:
bd:f6:a9:f2:42:62:c6:75:24:8f:3f:77:f4:4f:32:
01:da:8d:1c:9d:42:06:a4:b7:25:39:61:55:97:1a:
ce:ee:44:6d:02:da:d6:1c:04:69:9d:40:64:0a:27:
13:84:e2:e6:c6:45:51:f9:90:65:c8:63:23:ee:91:
b3:d2:a1:da:13:10:30:2b:89:7c:7e:38:90:74:15:
4b:17:12:c5:c1:eb:c9:3e:d0:4b:0a:29:fe:ce:8f:
7d:89:bb:72:cc:65:c2:43:6a:58:5d:aa:6f:b4:5a:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:51:3B:B7:35:38:43:56:C9:25:8A:E0:6F:4B:2E:87:60:E0:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E0049C574F11F0BCE55EB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0-154.202.127.255
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
50:b8:ca:5c:c2:7d:83:d9:e2:ac:3d:ea:a6:3b:4e:1a:6b:b5:
ae:73:02:d7:ac:ea:3a:75:71:8e:99:43:21:4b:1b:62:28:ec:
e4:11:d8:c3:fc:a1:26:e4:5d:fc:6c:f7:23:82:58:7b:95:1d:
fb:5a:27:db:51:8d:a6:2d:b6:36:8b:6c:c5:e3:b4:c3:0b:13:
46:12:de:3a:63:c9:b5:73:d1:0e:eb:8c:54:75:66:8b:48:42:
e2:0d:fc:a6:16:6c:1a:21:b4:67:25:ac:82:40:70:ed:71:98:
ee:3e:be:6e:47:01:d2:e6:bd:75:f7:e5:c1:98:91:9b:28:74:
57:82:58:d1:3e:6b:74:94:80:4d:6f:49:2f:c0:91:a3:4f:9d:
17:05:af:7b:ce:b4:53:23:dd:6f:3f:c3:f6:07:ea:0d:22:fa:
2e:5e:d2:13:c0:5b:5d:87:f7:90:ab:0c:30:42:06:c1:37:b0:
21:d8:04:d1:e0:37:df:09:ac:7e:0c:69:1f:0a:ec:a0:bd:68:
07:55:34:44:56:5d:ab:ee:92:23:4a:39:53:c0:8b:1f:b6:86:
0d:a3:b0:77:9c:68:43:58:43:81:68:8e:56:49:0d:2e:d4:a2:
3b:49:b8:cb:02:54:3e:8e:04:9f:74:d6:58:93:ee:e5:94:cd:
8f:c9:e1:e1
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAYnWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzAyMTQyMDU3WhcNMjUwODI0MTQyMDU3WjAYMRYw
FAYDVQQDEw02ODY1NDA0ZS0xMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxdEPBUXi6iZyFvgFMGdcOE7Z6rcVO0cmjHnIEgY4VbSUm+aanBhDlqIr
ZWI2V7d3m8C5XLplVQRnhModmJ/9eaZomjjJDpn+1gZ2mjnPPd/7Fyw0pJZa32x1
eAoZrilBHzYkwujNc6Lk3ZXyKP9rb4Arm99hscOMND40gn66C+qVz5k3eGnJAWEz
VjyRLj0ZLDJ63eC99qnyQmLGdSSPP3f0TzIB2o0cnUIGpLclOWFVlxrO7kRtAtrW
HARpnUBkCicThOLmxkVR+ZBlyGMj7pGz0qHaExAwK4l8fjiQdBVLFxLFwevJPtBL
Cin+zo99ibtyzGXCQ2pYXapvtFp9gwIDAQABo4ICujCCArYwHQYDVR0OBBYEFDGo
UTu3NThDVskliuBvSy6HYOCaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DN0UwMDQ5QzU3NEYxMUYwQkNFNTVFQjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBACaynUDBAeaygAwCwME
AZrZ6gMDAZrYMA0GCSqGSIb3DQEBCwUAA4IBAQBQuMpcwn2D2eKsPeqmO04aa7Wu
cwLXrOo6dXGOmUMhSxtiKOzkEdjD/KEm5F38bPcjglh7lR37WifbUY2mLbY2i2zF
47TDCxNGEt46Y8m1c9EO64xUdWaLSELiDfymFmwaIbRnJayCQHDtcZjuPr5uRwHS
5r119+XBmJGbKHRXgljRPmt0lIBNb0kvwJGjT50XBa97zrRTI91vP8P2B+oNIvou
XtITwFtdh/eQqwwwQgbBN7Ah2ATR4DffCax+DGkfCuygvWgHVTREVl2r7pIjSjlT
wIsftoYNo7B3nGhDWEOBaI5WSQ0u1KI7SbjLAlQ+jgSfdNZYk+7llM2PyeHh
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:00:59 2025 by rpki-client