Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB288D0C519511F0823C777DDAE4EC9C.roa
File: FB288D0C519511F0823C777DDAE4EC9C.roa (raw, json)
Hash identifier: +1JfgzMFPVpoIr6Ta08avqWKqZ52p+V0PkgBANgzK2A=
Subject key identifier: 8F:4C:47:02:7E:3F:A1:99:08:50:56:F1:67:A7:DB:98:5B:8B:19:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB288D0C519511F0823C777DDAE4EC9C.roa
Signing time: Wed 25 Jun 2025 07:28:26 +0000
ROA not before: Wed 25 Jun 2025 07:28:21 +0000
ROA not after: Thu 31 Jul 2025 07:28:21 +0000
asID: 62240
IP address blocks: 154.90.172.0/24 maxlen: 24
154.90.173.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.39.0/24 maxlen: 24
154.94.42.0/24 maxlen: 24
154.94.45.0/24 maxlen: 24
154.94.57.0/24 maxlen: 24
154.94.58.0/24 maxlen: 24
154.94.61.0/24 maxlen: 24
154.94.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100587 (0x188eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 07:28:21 2025 GMT
Not After : Jul 31 07:28:21 2025 GMT
Subject: CN=685ba51a-506f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:72:80:d9:f2:27:7b:03:1e:99:aa:83:e2:
76:7f:fc:e0:de:f6:c7:a2:41:c5:11:c5:0a:aa:c0:
d9:97:3c:c5:17:6e:4d:08:3e:e0:a8:ef:5c:39:07:
67:5e:2d:c2:cb:26:8f:56:e4:56:51:ab:6b:e1:97:
45:16:7e:0a:58:9b:74:52:85:44:c9:50:ed:52:b6:
a9:47:4f:93:c9:48:96:0e:31:be:a0:65:53:32:f2:
51:37:2d:00:7b:91:c1:d7:8b:12:3d:a4:c4:c2:c4:
1c:bf:48:2e:9d:8f:76:81:47:ee:15:c1:76:3a:ca:
1c:75:b5:24:3d:f2:2c:c6:05:81:d5:97:5d:7c:b3:
40:e8:51:d8:43:40:75:46:cc:cf:c7:63:26:d5:3a:
05:ba:1e:e6:01:a5:9b:2e:f7:e9:8d:35:ac:d3:b5:
39:22:69:63:9a:bd:86:bf:f3:c6:53:5c:f8:67:b9:
58:4d:f5:33:a5:ba:7a:17:23:a7:af:3c:4c:af:cb:
05:f1:76:2b:06:60:be:81:ff:40:43:3d:50:5a:96:
86:15:ed:7a:af:10:32:56:f4:19:82:94:c9:66:20:
fa:fc:fc:78:89:26:c0:c4:43:4c:c5:ef:3a:f9:9d:
21:95:2e:4a:11:2b:8e:d4:c1:af:13:b7:02:cd:99:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:47:02:7E:3F:A1:99:08:50:56:F1:67:A7:DB:98:5B:8B:19:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB288D0C519511F0823C777DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.172.0/23
154.94.34.0/24
154.94.39.0/24
154.94.42.0/24
154.94.45.0/24
154.94.57.0-154.94.58.255
154.94.61.0-154.94.62.255
Signature Algorithm: sha256WithRSAEncryption
67:a1:72:4c:9d:c8:07:ff:a8:e2:be:d7:3f:7b:8c:5b:39:90:
9a:a6:58:5e:f3:e2:a2:43:e5:0f:5d:c4:b3:9c:89:31:2f:3b:
39:b4:f3:96:84:ba:70:bd:a4:55:63:8a:2e:1d:6b:75:27:88:
81:b6:bf:40:c1:9d:fd:0c:1e:ac:45:6a:38:75:0e:ed:e3:4f:
be:07:a7:86:e8:c3:22:72:05:3e:60:a9:c1:a1:03:16:ff:0f:
e2:cb:95:c9:33:2f:68:6c:78:a7:a2:c9:35:c7:be:7b:ad:f1:
eb:0d:42:44:2e:8d:b9:03:d4:9b:5e:9e:c4:de:4a:65:21:d4:
70:76:ed:01:4f:1b:0b:58:ea:65:eb:d7:0b:28:a0:a4:dd:8b:
6c:75:c5:aa:dd:21:07:af:6e:d7:7d:91:86:7c:7a:51:6f:99:
63:86:78:14:91:d8:23:b0:0f:2d:88:3b:94:15:7c:0d:ea:a0:
22:d1:bf:d4:01:44:1e:d0:49:1c:6d:c7:44:a9:e6:27:4d:96:
9c:1e:d2:6d:08:9f:65:f3:2b:34:0e:4c:44:bb:99:4d:b7:09:
49:4c:f3:f1:e9:7c:79:22:22:76:a3:7e:40:24:40:78:9f:a2:
d0:30:17:e1:de:4e:f3:a6:d5:c8:21:c9:5d:d2:9d:e3:61:e7:
9f:f1:80:4b
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAYjrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI1MDcyODIxWhcNMjUwNzMxMDcyODIxWjAYMRYw
FAYDVQQDEw02ODViYTUxYS01MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy+1ygNnyJ3sDHpmqg+J2f/zg3vbHokHFEcUKqsDZlzzFF25NCD7gqO9c
OQdnXi3CyyaPVuRWUatr4ZdFFn4KWJt0UoVEyVDtUrapR0+TyUiWDjG+oGVTMvJR
Ny0Ae5HB14sSPaTEwsQcv0gunY92gUfuFcF2OsocdbUkPfIsxgWB1ZddfLNA6FHY
Q0B1RszPx2Mm1ToFuh7mAaWbLvfpjTWs07U5Imljmr2Gv/PGU1z4Z7lYTfUzpbp6
FyOnrzxMr8sF8XYrBmC+gf9AQz1QWpaGFe16rxAyVvQZgpTJZiD6/Px4iSbAxENM
xe86+Z0hlS5KESuO1MGvE7cCzZkDaQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFI9M
RwJ+P6GZCFBW8Wen25hbixm5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjI4OEQwQzUxOTUxMUYwODIzQzc3N0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBmlqsAwQAml4iAwQAml4n
AwQAml4qAwQAml4tMAwDBACaXjkDBACaXjowDAMEAJpePQMEAJpePjANBgkqhkiG
9w0BAQsFAAOCAQEAZ6FyTJ3IB/+o4r7XP3uMWzmQmqZYXvPiokPlD13Es5yJMS87
ObTzloS6cL2kVWOKLh1rdSeIgba/QMGd/QwerEVqOHUO7eNPvgenhujDInIFPmCp
waEDFv8P4suVyTMvaGx4p6LJNce+e63x6w1CRC6NuQPUm16exN5KZSHUcHbtAU8b
C1jqZevXCyigpN2LbHXFqt0hB69u132Rhnx6UW+ZY4Z4FJHYI7APLYg7lBV8Deqg
ItG/1AFEHtBJHG3HRKnmJ02WnB7SbQifZfMrNA5MRLuZTbcJSUzz8el8eSIidqN+
QCRAeJ+i0DAX4d5O86bVyCHJXdKd42Hnn/GASw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:27 2025 by rpki-client