Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2973A3FE67D011F0B122628CDAE4EC9C.roa
File: 2973A3FE67D011F0B122628CDAE4EC9C.roa (raw, json)
Hash identifier: 4TtL6YB7q+Z6w5hGt2GD9sF9kXE4g9Cs/ZMeJOuxXv0=
Subject key identifier: 74:7F:25:F7:18:82:D4:65:BF:29:72:B0:22:13:3F:28:D0:1C:C1:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2973A3FE67D011F0B122628CDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 14:20:20 +0000
ROA not before: Wed 23 Jul 2025 14:20:15 +0000
ROA not after: Wed 17 Sep 2025 14:20:15 +0000
asID: 138915
IP address blocks: 154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.60.0/23 maxlen: 24
154.206.62.0/23 maxlen: 24
154.206.79.0/24 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.100.0/23 maxlen: 24
154.206.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102194 (0x18f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 14:20:15 2025 GMT
Not After : Sep 17 14:20:15 2025 GMT
Subject: CN=6880efa4-02d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:22:74:54:ac:94:9d:c8:a5:96:90:b1:43:
b5:8e:07:66:95:40:51:d9:99:0e:b5:7c:ab:5d:a3:
8c:25:b9:71:95:9b:e1:2f:91:84:03:f3:51:61:62:
b1:80:34:b8:67:cd:2d:7b:c6:36:65:20:12:2c:95:
31:85:20:fe:ff:a7:a9:bd:77:61:98:f4:b6:21:93:
f7:70:43:19:8c:a7:36:90:6a:21:50:23:09:31:05:
3b:0c:af:20:dc:1e:9a:17:e2:65:65:58:e8:ab:2a:
35:35:25:5c:fb:fb:bb:bf:cb:94:99:9d:81:ad:18:
50:73:4c:99:d0:5f:c1:fd:3a:dd:cc:e6:12:cc:29:
88:e9:a4:e6:5a:7d:1a:d2:69:01:8b:fd:64:d2:88:
07:08:2b:c2:8e:c0:d4:84:d0:9a:e0:d1:bd:f5:6d:
77:38:81:61:3a:4b:88:e3:ec:b0:25:0a:d6:12:fb:
e5:bf:04:f1:66:57:11:fa:1c:5b:e7:43:6c:15:9f:
d2:08:33:f5:59:ee:7a:d3:a9:54:61:36:fe:6c:99:
03:27:3e:28:5d:92:c9:f3:9c:2f:eb:ea:0e:25:3b:
8c:96:00:6b:74:47:c3:87:a4:83:0f:4a:ea:40:15:
fb:54:f3:a3:4d:e0:13:79:7a:59:e5:45:fe:f1:35:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7F:25:F7:18:82:D4:65:BF:29:72:B0:22:13:3F:28:D0:1C:C1:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2973A3FE67D011F0B122628CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/21
154.206.79.0/24
154.206.96.0/23
154.206.100.0/23
154.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8b:15:1a:cc:32:f7:de:32:a5:8e:9a:dd:45:5e:2e:b9:fb:
f2:fc:3b:a4:13:64:08:d4:28:01:c9:a8:85:23:1e:44:14:75:
7f:93:9c:68:60:55:46:18:0d:ed:19:5a:cc:af:7a:e6:c2:9a:
d8:d9:16:8c:8f:2d:91:e8:41:57:9d:7a:e7:78:ed:e6:2e:9f:
6b:01:e6:c6:07:2a:73:7c:87:32:4e:6d:1f:86:e8:a3:00:18:
18:39:55:f2:f9:53:0d:62:e2:e3:64:15:85:06:e2:cb:e9:da:
32:6c:f3:28:96:28:92:61:fe:75:16:bc:a5:a8:2f:5a:1f:50:
a3:ee:9a:84:23:bf:00:de:86:58:3a:b4:a8:70:84:49:05:87:
c9:04:67:b8:0c:a6:f1:bb:81:be:c4:cb:4d:5e:df:96:f4:21:
90:a4:fd:ed:80:a4:dc:a2:79:ee:a6:84:04:3c:cb:85:10:07:
b7:0d:4e:81:95:c3:9d:bc:d2:41:e3:32:a2:ff:1e:d5:97:6f:
ee:0b:c6:37:55:eb:5b:13:7f:8f:08:5b:68:89:b9:d4:c5:5d:
cf:ec:60:7b:68:75:1b:b2:1c:28:48:92:eb:f2:6e:32:15:60:
de:56:fe:92:dd:7e:aa:f5:f9:20:ff:21:74:f0:a0:ba:b2:98:
32:6d:c4:0e
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAY8yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIzMTQyMDE1WhcNMjUwOTE3MTQyMDE1WjAYMRYw
FAYDVQQDEw02ODgwZWZhNC0wMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0KkidFSslJ3IpZaQsUO1jgdmlUBR2ZkOtXyrXaOMJblxlZvhL5GEA/NR
YWKxgDS4Z80te8Y2ZSASLJUxhSD+/6epvXdhmPS2IZP3cEMZjKc2kGohUCMJMQU7
DK8g3B6aF+JlZVjoqyo1NSVc+/u7v8uUmZ2BrRhQc0yZ0F/B/TrdzOYSzCmI6aTm
Wn0a0mkBi/1k0ogHCCvCjsDUhNCa4NG99W13OIFhOkuI4+ywJQrWEvvlvwTxZlcR
+hxb50NsFZ/SCDP1We5606lUYTb+bJkDJz4oXZLJ85wv6+oOJTuMlgBrdEfDh6SD
D0rqQBX7VPOjTeATeXpZ5UX+8TW0HQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFHR/
JfcYgtRlvylysCITPyjQHMHxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTczQTNGRTY3RDAxMUYwQjEyMjYyOENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDms44AwQAms5PAwQBms5g
AwQBms5kAwQAms5rMA0GCSqGSIb3DQEBCwUAA4IBAQCXixUazDL33jKljprdRV4u
ufvy/DukE2QI1CgByaiFIx5EFHV/k5xoYFVGGA3tGVrMr3rmwprY2RaMjy2R6EFX
nXrneO3mLp9rAebGBypzfIcyTm0fhuijABgYOVXy+VMNYuLjZBWFBuLL6doybPMo
liiSYf51FrylqC9aH1Cj7pqEI78A3oZYOrSocIRJBYfJBGe4DKbxu4G+xMtNXt+W
9CGQpP3tgKTconnupoQEPMuFEAe3DU6BlcOdvNJB4zKi/x7Vl2/uC8Y3VetbE3+P
CFtoibnUxV3P7GB7aHUbshwoSJLr8m4yFWDeVv6S3X6q9fkg/yF08KC6spgybcQO
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:19 2025 by rpki-client