Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C995FF842AC11F081F59CDEDAE4EC9C.roa
File: 3C995FF842AC11F081F59CDEDAE4EC9C.roa (raw, json)
Hash identifier: 2yZV0pwxu34RQQc1onX1XwxUk5Fn6kLttxnNvZXNNuE=
Subject key identifier: 23:C1:DC:5F:21:7A:A7:42:37:A5:DC:67:C3:F0:45:42:CC:A1:27:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018513
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C995FF842AC11F081F59CDEDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 07:59:57 +0000
ROA not before: Fri 06 Jun 2025 07:59:52 +0000
ROA not after: Sat 06 Dec 2025 07:59:52 +0000
asID: 328608
IP address blocks: 154.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99603 (0x18513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:59:52 2025 GMT
Not After : Dec 6 07:59:52 2025 GMT
Subject: CN=68429ffd-9632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:9d:6a:e2:c4:d5:08:df:19:23:c5:23:c4:
7b:83:bf:88:3b:c7:74:2e:5e:ae:de:50:20:42:d6:
35:c5:b4:a9:ec:6c:de:27:b6:8f:e8:ff:18:8d:ee:
d8:c6:c2:17:a1:96:98:4e:6d:5a:fb:83:eb:af:6e:
a6:c0:84:c2:9d:11:ba:a4:e1:ba:cf:ac:9c:1e:7b:
83:55:8a:89:86:a7:fa:62:87:fb:f4:0b:8f:e2:5d:
2d:ed:04:15:52:0b:f2:8d:76:c4:4c:37:d6:87:80:
67:0d:1d:e0:88:18:fd:6b:7c:cc:e6:c7:1d:41:cc:
08:29:83:59:93:14:9d:18:6a:2a:c9:04:b7:72:eb:
53:9a:7b:cc:65:09:f8:ed:79:19:ca:03:3c:d9:f9:
03:67:fe:01:e4:02:b7:31:b9:4a:5f:ce:d2:2e:98:
e6:c1:df:41:c9:71:be:9d:5f:52:dd:3f:de:9e:f8:
12:64:1b:b9:3b:7f:6e:b4:97:45:b5:4e:89:ca:b3:
d7:61:65:cc:ab:46:8b:f7:01:eb:34:95:e9:10:af:
b8:5f:e9:e8:e5:f6:d5:9f:6f:14:23:ad:97:3b:59:
63:b8:a7:8c:fd:e0:8c:cc:ad:d5:2a:7d:d8:26:56:
63:86:c6:ab:49:d8:c7:8f:d3:70:99:48:99:3b:90:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:DC:5F:21:7A:A7:42:37:A5:DC:67:C3:F0:45:42:CC:A1:27:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C995FF842AC11F081F59CDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:b7:19:f1:e0:22:aa:a8:98:dc:45:16:b1:e2:50:b6:c2:73:
d4:57:1d:46:80:21:e0:89:12:3f:2f:59:ad:e6:d5:2c:72:18:
99:c8:c4:bd:5b:4b:62:3d:a2:a2:0c:99:07:52:53:00:32:96:
d2:ba:bd:c0:86:1f:c4:8a:37:08:8c:0a:37:7a:0f:d5:42:ae:
16:61:ce:ec:17:ca:01:6c:44:3b:83:9b:12:df:fd:c7:19:62:
22:16:79:11:aa:a9:e4:be:8a:50:f7:39:97:d9:6c:90:d3:80:
ee:89:53:17:e3:d0:c9:dd:39:8e:89:c9:5c:fc:92:b4:b2:e2:
dd:d4:13:c7:53:4c:0a:e5:21:75:c8:91:69:60:bc:ba:63:81:
88:dc:21:a2:e0:b3:9c:48:28:16:2f:87:38:33:14:ac:de:98:
de:38:f1:de:ac:e7:51:d9:6a:db:6d:8f:41:02:e1:7d:ac:c0:
fa:ac:c1:9f:0e:fb:e8:bd:e5:b6:8e:47:b7:c5:19:2c:30:84:
59:99:bb:27:b4:de:d6:6d:23:e5:5c:b6:90:6f:60:9c:76:6f:
8d:f9:d9:3d:83:7e:9a:c3:59:8c:27:c4:a7:44:1b:08:34:5e:
2e:a0:45:2e:c5:93:93:bd:3e:0c:c9:d6:be:23:38:17:6a:62:
ca:07:8f:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYUTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA2MDc1OTUyWhcNMjUxMjA2MDc1OTUyWjAYMRYw
FAYDVQQDEw02ODQyOWZmZC05NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwyidauLE1QjfGSPFI8R7g7+IO8d0Ll6u3lAgQtY1xbSp7GzeJ7aP6P8Y
je7YxsIXoZaYTm1a+4Prr26mwITCnRG6pOG6z6ycHnuDVYqJhqf6Yof79AuP4l0t
7QQVUgvyjXbETDfWh4BnDR3giBj9a3zM5scdQcwIKYNZkxSdGGoqyQS3cutTmnvM
ZQn47XkZygM82fkDZ/4B5AK3MblKX87SLpjmwd9ByXG+nV9S3T/envgSZBu5O39u
tJdFtU6JyrPXYWXMq0aL9wHrNJXpEK+4X+no5fbVn28UI62XO1ljuKeM/eCMzK3V
Kn3YJlZjhsarSdjHj9NwmUiZO5BB7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCPB
3F8heqdCN6XcZ8PwRULMoSf0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzk5NUZGODQyQUMxMUYwODFGNTlDREVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlgkMA0GCSqGSIb3DQEB
CwUAA4IBAQDLtxnx4CKqqJjcRRax4lC2wnPUVx1GgCHgiRI/L1mt5tUschiZyMS9
W0tiPaKiDJkHUlMAMpbSur3Ahh/EijcIjAo3eg/VQq4WYc7sF8oBbEQ7g5sS3/3H
GWIiFnkRqqnkvopQ9zmX2WyQ04DuiVMX49DJ3TmOiclc/JK0suLd1BPHU0wK5SF1
yJFpYLy6Y4GI3CGi4LOcSCgWL4c4MxSs3pjeOPHerOdR2WrbbY9BAuF9rMD6rMGf
DvvoveW2jke3xRksMIRZmbsntN7WbSPlXLaQb2Ccdm+N+dk9g36aw1mMJ8SnRBsI
NF4uoEUuxZOTvT4Myda+IzgXamLKB49T
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:01:37 2025 by rpki-client