Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC6022444E5D11F08C7F8792DAE4EC9C.roa
File: DC6022444E5D11F08C7F8792DAE4EC9C.roa (raw, json)
Hash identifier: Gre4Y6DQHpc+1ZiFsnf9t8xo1TBbRBtdKjeCWJQERxE=
Subject key identifier: A0:B1:23:5B:A5:04:35:99:8E:E2:6F:8F:83:16:CF:88:65:1E:64:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0187A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC6022444E5D11F08C7F8792DAE4EC9C.roa
Signing time: Sat 21 Jun 2025 05:09:09 +0000
ROA not before: Sat 21 Jun 2025 05:09:04 +0000
ROA not after: Thu 24 Jul 2025 05:09:04 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100260 (0x187a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 21 05:09:04 2025 GMT
Not After : Jul 24 05:09:04 2025 GMT
Subject: CN=68563e74-a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:ae:8c:4d:9d:23:aa:88:d0:bd:ce:a3:1b:
fb:fd:2a:f6:86:15:76:c8:fb:81:c7:de:7d:37:9c:
61:05:b4:cd:8b:17:c1:61:d8:70:b0:1a:2b:b9:9e:
a2:ef:32:da:76:11:3e:fe:b2:3a:44:a3:14:a2:48:
8f:78:bd:2b:64:2f:fb:1a:ab:82:f4:fe:5d:7e:a3:
bd:b8:40:20:d8:cb:4a:f5:6a:b2:99:7d:52:e7:a4:
f6:95:c6:74:d0:ea:e0:94:95:13:bc:f6:0d:98:d1:
d7:da:64:1d:51:7a:ad:8f:21:84:2a:f3:00:e6:99:
b6:d7:d1:6b:88:eb:9c:9f:cd:d7:7c:47:0d:8b:e8:
21:1a:b3:3b:5e:2c:f7:1b:a9:11:d0:af:14:8b:b2:
d8:9f:11:1d:ac:f0:6e:18:3d:b0:08:7c:a2:ef:a3:
80:19:fc:77:3a:78:19:9a:db:43:d3:05:72:33:b3:
3d:80:99:04:b4:92:47:91:d7:be:b7:0d:3d:0c:56:
86:7c:52:bd:f0:56:ac:ef:28:58:f1:f1:79:fa:42:
54:85:8a:e0:7f:d3:a3:63:9d:87:f3:8f:63:4b:d2:
e6:e8:49:d9:66:7a:10:e9:7d:4a:5b:87:d1:e9:9b:
b4:f4:8b:a9:e0:d4:5d:06:f4:ce:ec:64:b5:36:92:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:23:5B:A5:04:35:99:8E:E2:6F:8F:83:16:CF:88:65:1E:64:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC6022444E5D11F08C7F8792DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:e8:b9:ba:ac:92:88:7c:f5:86:a3:5a:89:26:0f:4b:02:aa:
d6:2e:33:68:e9:3f:90:25:cf:6f:cb:c7:1f:c2:07:22:6e:83:
08:26:ad:48:41:3c:72:0a:fe:c1:eb:5f:0f:95:1a:47:3a:e9:
16:5d:c2:c2:22:00:fe:e8:f6:cf:30:df:c0:22:05:af:33:91:
5d:c4:e1:d3:b1:58:de:17:b5:87:bc:e9:4c:32:13:92:f1:6f:
78:50:b1:52:e3:f9:be:41:9d:6b:61:1b:8d:e8:eb:11:63:29:
c3:79:ee:dd:c9:72:c9:5e:7b:5b:f0:ab:6b:f8:12:fc:66:ba:
dc:11:05:24:28:cd:00:df:e4:e5:32:ad:3a:2e:0d:1b:c8:6d:
d4:03:0d:da:b9:a6:d1:b5:aa:1c:3a:55:5c:2f:64:5a:9e:99:
be:48:4a:a8:f6:c7:05:db:11:fc:36:41:9c:44:ab:0b:f9:2e:
70:e8:d0:2c:f4:98:43:0f:c4:59:ee:bf:dc:04:6f:3e:4e:1b:
7e:da:a6:55:dd:25:06:b9:2f:79:3a:6c:12:df:fb:40:fc:3a:
a2:bb:bb:06:0b:24:e3:97:19:8c:28:ca:e1:13:01:08:d7:59:
2b:de:60:39:d6:aa:1f:a4:8e:0a:13:ed:c5:a1:32:37:8b:ff:
d9:43:d3:6a
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAYekMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIxMDUwOTA0WhcNMjUwNzI0MDUwOTA0WjAYMRYw
FAYDVQQDEw02ODU2M2U3NC1hMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuBqujE2dI6qI0L3Ooxv7/Sr2hhV2yPuBx959N5xhBbTNixfBYdhwsBor
uZ6i7zLadhE+/rI6RKMUokiPeL0rZC/7GquC9P5dfqO9uEAg2MtK9WqymX1S56T2
lcZ00OrglJUTvPYNmNHX2mQdUXqtjyGEKvMA5pm219FriOucn83XfEcNi+ghGrM7
Xiz3G6kR0K8Ui7LYnxEdrPBuGD2wCHyi76OAGfx3OngZmttD0wVyM7M9gJkEtJJH
kde+tw09DFaGfFK98Fas7yhY8fF5+kJUhYrgf9OjY52H849jS9Lm6EnZZnoQ6X1K
W4fR6Zu09Iup4NRdBvTO7GS1NpJTYQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKCx
I1ulBDWZjuJvj4MWz4hlHmRGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQzYwMjI0NDRFNUQxMUYwOEM3Rjg3OTJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmtsXAwQAmtsZAwQBmtse
MA0GCSqGSIb3DQEBCwUAA4IBAQA+6Lm6rJKIfPWGo1qJJg9LAqrWLjNo6T+QJc9v
y8cfwgciboMIJq1IQTxyCv7B618PlRpHOukWXcLCIgD+6PbPMN/AIgWvM5FdxOHT
sVjeF7WHvOlMMhOS8W94ULFS4/m+QZ1rYRuN6OsRYynDee7dyXLJXntb8Ktr+BL8
ZrrcEQUkKM0A3+TlMq06Lg0byG3UAw3auabRtaocOlVcL2Ranpm+SEqo9scF2xH8
NkGcRKsL+S5w6NAs9JhDD8RZ7r/cBG8+Tht+2qZV3SUGuS95OmwS3/tA/Dqiu7sG
CyTjlxmMKMrhEwEI11kr3mA51qofpI4KE+3FoTI3i//ZQ9Nq
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:40:29 2025 by rpki-client