Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E906FD82513811F094A1FB91DAE4EC9C.roa
File: E906FD82513811F094A1FB91DAE4EC9C.roa (raw, json)
Hash identifier: a78z4+vlXeLZYhxRs9ETWRCFyjCd2eDBgMJX05yWo+k=
Subject key identifier: 69:ED:AD:68:6C:6A:F2:78:58:EE:FC:78:36:5C:0B:65:BA:02:BC:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E906FD82513811F094A1FB91DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 20:22:12 +0000
ROA not before: Tue 24 Jun 2025 20:22:07 +0000
ROA not after: Wed 03 Sep 2025 20:22:07 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.86.0/24 maxlen: 24
154.93.92.0/24 maxlen: 24
154.93.93.0/24 maxlen: 24
154.93.102.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100530 (0x188b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 20:22:07 2025 GMT
Not After : Sep 3 20:22:07 2025 GMT
Subject: CN=685b08f4-8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:c6:a2:03:e5:a9:57:6a:4e:da:63:56:2f:
3b:2b:8a:fd:f2:9a:2a:1f:7e:ac:f1:cc:4e:bd:9f:
ae:65:e8:57:9d:db:18:d4:e2:3c:3f:97:dd:67:e1:
ca:8e:32:d0:67:26:15:b1:c6:79:c3:4d:94:98:28:
d7:9c:55:8c:30:de:c1:52:94:df:87:c4:e8:a3:e3:
55:42:69:f9:84:e7:20:3b:5c:13:59:01:87:81:8c:
f2:46:f1:8c:65:5b:91:8d:99:53:8d:10:bb:f9:4a:
44:4c:17:3f:e0:59:18:9a:9d:e4:7f:ca:26:41:93:
aa:55:8a:34:d1:81:a6:fe:b2:0e:5d:08:8b:50:f9:
dc:49:47:53:d0:6c:e9:dc:2a:94:d3:cc:0b:85:c6:
3a:a4:78:1a:08:e4:18:2c:de:dd:65:48:6f:cb:98:
cf:5d:da:c1:e1:3c:05:74:2d:49:8e:15:d2:55:71:
62:5a:1f:8a:6e:e3:89:92:9d:a5:77:ef:0b:e2:44:
74:83:72:03:65:8a:dd:2a:fc:4b:ea:28:9b:01:1b:
c6:33:2d:88:d0:91:a8:45:db:b2:3b:bc:e3:30:7f:
4d:c0:23:05:0f:09:b5:22:af:cc:7c:a4:f0:f1:20:
c5:20:ee:76:39:f5:dc:65:9b:72:52:22:49:f6:8f:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:AD:68:6C:6A:F2:78:58:EE:FC:78:36:5C:0B:65:BA:02:BC:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E906FD82513811F094A1FB91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.86.0/24
154.93.92.0/23
154.93.102.0/23
154.93.106.0-154.93.108.255
154.93.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:06:99:a3:a1:80:04:aa:c5:6a:ac:f8:b7:f1:43:a1:91:dc:
5f:13:e1:6c:82:94:18:75:99:d7:c8:10:e8:f3:f3:b4:3b:57:
52:b6:88:d8:60:9e:66:dd:1d:5a:4d:ca:00:95:b4:af:b8:dc:
77:5b:96:44:0b:6b:a8:bc:ba:cb:23:c2:b9:de:a0:20:07:a0:
d5:58:42:45:78:d0:c7:ef:c5:a3:27:3f:74:0c:4a:26:a9:d9:
aa:5a:06:23:90:74:68:7b:39:23:33:2d:49:64:4a:2a:10:8e:
78:7e:c0:5a:52:60:0a:68:fb:c9:97:16:73:d0:f7:5c:29:77:
69:fb:61:97:51:0b:a9:53:29:f5:8e:38:2e:59:c0:a9:bf:18:
ea:62:f1:44:b5:f1:41:bc:c6:3b:e5:42:4f:46:99:e4:a6:a6:
f3:de:4c:2b:a8:50:7c:20:dc:f4:94:32:02:ab:4a:26:61:46:
b2:da:d9:15:4d:6e:af:6d:44:00:99:2a:0c:74:e5:6f:ef:0d:
d2:83:bd:21:ee:1f:af:bd:6c:6e:93:c2:52:9e:02:b0:43:5c:
04:2e:9f:b0:5f:0e:ee:e0:2b:8f:4c:d8:bc:bc:b3:5d:6d:4f:
08:a9:4e:25:8b:76:dc:11:6a:b8:e0:ad:46:b0:db:36:a7:91:
aa:89:79:43
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAYiyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI0MjAyMjA3WhcNMjUwOTAzMjAyMjA3WjAYMRYw
FAYDVQQDEw02ODViMDhmNC04ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArnTGogPlqVdqTtpjVi87K4r98poqH36s8cxOvZ+uZehXndsY1OI8P5fd
Z+HKjjLQZyYVscZ5w02UmCjXnFWMMN7BUpTfh8Too+NVQmn5hOcgO1wTWQGHgYzy
RvGMZVuRjZlTjRC7+UpETBc/4FkYmp3kf8omQZOqVYo00YGm/rIOXQiLUPncSUdT
0Gzp3CqU08wLhcY6pHgaCOQYLN7dZUhvy5jPXdrB4TwFdC1JjhXSVXFiWh+KbuOJ
kp2ld+8L4kR0g3IDZYrdKvxL6iibARvGMy2I0JGoRduyO7zjMH9NwCMFDwm1Iq/M
fKTw8SDFIO52OfXcZZtyUiJJ9o+hUQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFGnt
rWhsavJ4WO78eDZcC2W6Arx1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTA2RkQ4MjUxMzgxMUYwOTRBMUZCOTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAml1JAwQAml1WAwQBml1c
AwQBml1mMAwDBAGaXWoDBACaXWwDBAGaXXAwDQYJKoZIhvcNAQELBQADggEBAA0G
maOhgASqxWqs+LfxQ6GR3F8T4WyClBh1mdfIEOjz87Q7V1K2iNhgnmbdHVpNygCV
tK+43HdblkQLa6i8ussjwrneoCAHoNVYQkV40MfvxaMnP3QMSiap2apaBiOQdGh7
OSMzLUlkSioQjnh+wFpSYApo+8mXFnPQ91wpd2n7YZdRC6lTKfWOOC5ZwKm/GOpi
8US18UG8xjvlQk9GmeSmpvPeTCuoUHwg3PSUMgKrSiZhRrLa2RVNbq9tRACZKgx0
5W/vDdKDvSHuH6+9bG6TwlKeArBDXAQun7BfDu7gK49M2Ly8s11tTwipTiWLdtwR
arjgrUaw2zankaqJeUM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:08:54 2025 by rpki-client