Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF66E04688711F0B303E5B6DAE4EC9C.roa
File: 7DF66E04688711F0B303E5B6DAE4EC9C.roa (raw, json)
Hash identifier: 4S9g8+a+Ub+tQjH3g+XZZDL4smEOgR5kgpYGTW4m+U0=
Subject key identifier: AF:8C:84:30:B8:CA:70:66:B2:66:19:C8:D8:E6:D2:6D:80:84:16:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF66E04688711F0B303E5B6DAE4EC9C.roa
Signing time: Thu 24 Jul 2025 12:12:40 +0000
ROA not before: Thu 24 Jul 2025 12:12:35 +0000
ROA not after: Thu 04 Sep 2025 12:12:35 +0000
asID: 272011
IP address blocks: 154.88.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102258 (0x18f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 12:12:35 2025 GMT
Not After : Sep 4 12:12:35 2025 GMT
Subject: CN=68822337-9eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:e4:7a:7f:69:84:85:01:7c:0e:d5:a7:42:
d7:6f:9c:3d:38:8e:91:55:d9:33:3c:fe:f8:33:47:
17:1d:6c:42:17:2a:f0:0b:58:63:45:df:0f:bd:8c:
56:c8:29:be:6c:8d:0c:49:f3:f0:9d:f0:bb:d8:5a:
d4:bb:5c:97:8f:3d:73:66:48:0c:c2:c7:bb:9b:d7:
69:4b:6c:04:cd:a0:f1:82:78:c6:cc:36:0f:6a:0e:
8b:a0:a2:24:74:e2:da:4c:f8:2d:e3:82:2b:c0:01:
6c:ce:d8:3f:98:dd:c9:90:38:77:a8:6d:cf:d8:7c:
c2:27:47:eb:57:a2:41:3f:fc:89:44:2f:b7:a2:a1:
29:2f:29:5c:bf:c9:1e:71:08:fb:fc:dd:1d:6b:10:
cb:3f:0f:49:18:84:08:c6:e9:86:56:fb:eb:57:1d:
bd:57:31:9f:86:3d:4a:77:17:72:0d:94:1d:a2:35:
f4:73:de:96:a8:d1:dd:eb:0c:fd:dd:cc:af:d2:9e:
2d:42:34:5d:d4:b7:d6:2d:7c:4a:c2:34:c9:89:7f:
32:be:d2:d0:d3:7f:92:6a:5c:31:52:97:e8:1a:2b:
6b:21:9f:9c:94:76:aa:ac:05:47:62:5f:aa:d1:6a:
30:d5:2f:18:3f:38:44:7c:01:43:e3:fd:16:06:46:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:84:30:B8:CA:70:66:B2:66:19:C8:D8:E6:D2:6D:80:84:16:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DF66E04688711F0B303E5B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.189.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:6e:a4:83:a4:23:86:6d:46:f6:fb:8c:8f:99:de:0c:66:f5:
97:fb:c2:01:33:03:e9:d4:32:69:98:12:9f:03:38:83:bd:37:
9e:38:53:61:ba:e7:af:a6:92:2e:7d:6d:9a:63:bb:73:09:a6:
d8:5f:c1:c7:4e:5b:8e:cb:c1:83:21:c3:d2:ae:52:95:f7:9d:
cc:6a:5e:f4:68:a7:f2:3c:cb:da:e0:0f:db:09:16:9c:ee:21:
be:5d:47:30:3c:d4:ef:28:6b:dd:0c:c0:a8:8a:48:2b:4d:a4:
26:66:23:ac:c3:09:6d:dd:fb:27:4a:c6:75:7c:91:9d:26:5f:
8c:34:a7:38:64:fd:a2:78:7e:a7:fc:f8:b3:db:84:f2:8c:8a:
f0:31:ee:68:56:d5:04:95:5b:9a:18:ed:63:8c:b4:ac:b5:27:
86:b8:b2:0c:a6:c7:ad:bc:41:1e:9e:3f:db:eb:bf:7a:7c:62:
0d:bd:ab:27:df:eb:de:a4:66:5e:24:cf:b6:fe:60:a4:70:52:
21:ef:46:f6:bb:64:8f:00:c2:f6:2f:c8:1f:31:f0:85:79:20:
ce:88:a1:e4:4e:e8:d1:ca:30:fc:32:12:a4:c9:0b:43:c5:c4:
2c:53:34:c2:c6:1a:a3:68:f5:ba:76:ed:95:59:04:af:02:ba:
3a:42:08:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY9yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzI0MTIxMjM1WhcNMjUwOTA0MTIxMjM1WjAYMRYw
FAYDVQQDEw02ODgyMjMzNy05ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvsLken9phIUBfA7Vp0LXb5w9OI6RVdkzPP74M0cXHWxCFyrwC1hjRd8P
vYxWyCm+bI0MSfPwnfC72FrUu1yXjz1zZkgMwse7m9dpS2wEzaDxgnjGzDYPag6L
oKIkdOLaTPgt44IrwAFsztg/mN3JkDh3qG3P2HzCJ0frV6JBP/yJRC+3oqEpLylc
v8kecQj7/N0daxDLPw9JGIQIxumGVvvrVx29VzGfhj1KdxdyDZQdojX0c96WqNHd
6wz93cyv0p4tQjRd1LfWLXxKwjTJiX8yvtLQ03+SalwxUpfoGitrIZ+clHaqrAVH
Yl+q0Wow1S8YPzhEfAFD4/0WBkaYaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK+M
hDC4ynBmsmYZyNjm0m2AhBasMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83REY2NkUwNDY4ODcxMUYwQjMwM0U1QjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmli9MA0GCSqGSIb3DQEB
CwUAA4IBAQDSbqSDpCOGbUb2+4yPmd4MZvWX+8IBMwPp1DJpmBKfAziDvTeeOFNh
uuevppIufW2aY7tzCabYX8HHTluOy8GDIcPSrlKV953Mal70aKfyPMva4A/bCRac
7iG+XUcwPNTvKGvdDMCoikgrTaQmZiOswwlt3fsnSsZ1fJGdJl+MNKc4ZP2ieH6n
/Piz24TyjIrwMe5oVtUElVuaGO1jjLSstSeGuLIMpsetvEEenj/b6796fGINvasn
3+vepGZeJM+2/mCkcFIh70b2u2SPAML2L8gfMfCFeSDOiKHkTujRyjD8MhKkyQtD
xcQsUzTCxhqjaPW6du2VWQSvAro6QgjO
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:25:10 2025 by rpki-client