Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BE5362689D11F0802A3FC5DAE4EC9C.roa
File: 66BE5362689D11F0802A3FC5DAE4EC9C.roa (raw, json)
Hash identifier: wAZDHVITOKpkPe+EXNEOYeb5z/Ft/Lcet0WKMXnIxI8=
Subject key identifier: F8:F7:31:02:33:EC:12:5B:70:1C:AA:30:65:3F:FB:58:AA:E5:CF:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BE5362689D11F0802A3FC5DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 14:49:29 +0000
ROA not before: Thu 24 Jul 2025 14:49:25 +0000
ROA not after: Fri 05 Sep 2025 14:49:25 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.207.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
154.222.213.0/24 maxlen: 24
154.222.214.0/24 maxlen: 24
154.222.223.0/24 maxlen: 24
154.222.240.0/24 maxlen: 24
154.222.241.0/24 maxlen: 24
154.222.243.0/24 maxlen: 24
154.222.244.0/24 maxlen: 24
154.222.245.0/24 maxlen: 24
154.222.246.0/24 maxlen: 24
154.222.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102292 (0x18f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 14:49:25 2025 GMT
Not After : Sep 5 14:49:25 2025 GMT
Subject: CN=688247f9-a790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:05:be:10:bb:d5:40:73:2f:c7:8b:29:b8:
df:61:60:5e:f8:17:39:a3:09:ec:f8:c0:b1:4b:f0:
54:d5:e0:fc:03:44:e5:e8:0d:77:c3:bb:d4:00:47:
c5:64:a1:8a:2a:56:ec:45:f4:14:c8:29:85:3f:7d:
6a:d4:0c:41:e3:53:da:e8:fe:09:51:b4:da:d3:0b:
e1:66:ad:20:c3:cd:3a:4a:b5:96:ce:d6:18:8c:f3:
42:e8:32:83:f9:ee:ad:71:4c:15:23:34:d0:8d:76:
ca:b7:9c:6c:9e:2c:0d:ff:07:9b:fa:59:13:2d:a9:
71:47:a2:05:f5:64:ac:66:57:6f:53:91:fb:74:2c:
8e:ad:9f:d3:e9:b7:b3:ad:7f:40:14:64:3c:b5:77:
e5:33:d9:16:90:b4:35:96:77:d4:75:22:7a:99:3e:
26:fd:74:fd:f3:64:dc:27:58:ac:35:78:74:b5:79:
a6:bc:5a:f0:c2:10:b4:6b:1c:9d:ca:12:38:6f:13:
1e:cf:8d:b6:12:75:30:83:5a:cd:3d:9f:08:58:cf:
01:3e:03:00:c5:c7:8a:77:7a:0f:6a:3e:b0:99:5d:
00:61:5e:04:a4:8f:7d:2b:1b:32:01:ca:31:50:d6:
91:6b:1c:8e:f2:1b:b3:59:ad:3c:db:f3:01:4b:64:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:31:02:33:EC:12:5B:70:1C:AA:30:65:3F:FB:58:AA:E5:CF:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BE5362689D11F0802A3FC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.207.0-154.222.214.255
154.222.223.0/24
154.222.240.0/23
154.222.243.0-154.222.247.255
Signature Algorithm: sha256WithRSAEncryption
17:a5:68:df:8c:79:ae:4c:87:49:61:2a:e0:2c:55:88:d7:ad:
5b:03:a5:8c:39:92:76:53:c2:b7:af:00:34:11:06:db:69:c4:
1a:f0:dd:42:e2:64:8f:d2:9b:bd:8c:e4:dc:a3:d8:66:bb:bc:
ae:ba:7c:65:d3:ad:2f:76:d8:0d:e1:ec:dc:8b:a1:c0:90:69:
8d:5f:fc:42:7f:a7:b2:c6:da:96:4d:ee:99:08:6a:34:21:13:
f2:80:ea:09:51:1a:27:e8:64:31:5e:d7:86:78:9a:40:df:a6:
c0:e7:c1:8f:64:89:f4:f3:7c:14:b1:68:21:87:62:02:20:50:
49:63:77:76:bd:80:2b:7f:84:13:7b:c8:76:46:de:26:25:7f:
fe:8a:16:1b:a8:7e:09:de:e6:56:f7:e6:20:7d:2c:f4:bd:ff:
c4:61:67:4e:54:62:23:99:6f:dc:23:02:e0:fe:bb:2b:98:dd:
31:44:23:6f:6d:3f:0b:ba:69:9e:7d:15:83:7f:38:bc:7a:bb:
3c:87:a9:8c:a1:44:89:71:e5:dd:81:05:93:f1:ae:42:74:39:
74:1b:bc:4f:b6:c4:3d:e7:0d:74:9d:10:8a:4b:31:8c:4e:83:
3f:cb:ee:59:42:6f:d7:0b:82:db:d4:e2:f8:1b:6b:0b:4b:1e:
a2:e3:64:6c
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAY+UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzI0MTQ0OTI1WhcNMjUwOTA1MTQ0OTI1WjAYMRYw
FAYDVQQDEw02ODgyNDdmOS1hNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr38FvhC71UBzL8eLKbjfYWBe+Bc5owns+MCxS/BU1eD8A0Tl6A13w7vU
AEfFZKGKKlbsRfQUyCmFP31q1AxB41Pa6P4JUbTa0wvhZq0gw806SrWWztYYjPNC
6DKD+e6tcUwVIzTQjXbKt5xsniwN/web+lkTLalxR6IF9WSsZldvU5H7dCyOrZ/T
6bezrX9AFGQ8tXflM9kWkLQ1lnfUdSJ6mT4m/XT982TcJ1isNXh0tXmmvFrwwhC0
axydyhI4bxMez422EnUwg1rNPZ8IWM8BPgMAxceKd3oPaj6wmV0AYV4EpI99Kxsy
AcoxUNaRaxyO8huzWa082/MBS2TyzQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFPj3
MQIz7BJbcByqMGU/+1iq5c/nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NkJFNTM2MjY4OUQxMUYwODAyQTNGQzVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBmtoUMAwDBACa2hcDBACa
2hgwDAMEAJrezwMEAJre1gMEAJre3wMEAZre8DAMAwQAmt7zAwQDmt7wMA0GCSqG
SIb3DQEBCwUAA4IBAQAXpWjfjHmuTIdJYSrgLFWI161bA6WMOZJ2U8K3rwA0EQbb
acQa8N1C4mSP0pu9jOTco9hmu7yuunxl060vdtgN4ezci6HAkGmNX/xCf6eyxtqW
Te6ZCGo0IRPygOoJURon6GQxXteGeJpA36bA58GPZIn083wUsWghh2ICIFBJY3d2
vYArf4QTe8h2Rt4mJX/+ihYbqH4J3uZW9+YgfSz0vf/EYWdOVGIjmW/cIwLg/rsr
mN0xRCNvbT8LummefRWDfzi8ers8h6mMoUSJceXdgQWT8a5CdDl0G7xPtsQ95w10
nRCKSzGMToM/y+5ZQm/XC4Lb1OL4G2sLSx6i42Rs
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:00 2025 by rpki-client