Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6CEF0A67CB11F089712AEEDAE4EC9C.roa
File: BA6CEF0A67CB11F089712AEEDAE4EC9C.roa (raw, json)
Hash identifier: /KpSgKkEa0Wv5fsMR8pNJybhChBQhyrn+Zl9gUoMYI4=
Subject key identifier: 93:D6:EC:9F:1F:FF:27:B5:64:C3:D2:CB:AD:EE:E8:86:76:C5:F6:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6CEF0A67CB11F089712AEEDAE4EC9C.roa
Signing time: Wed 23 Jul 2025 13:48:36 +0000
ROA not before: Wed 23 Jul 2025 13:48:31 +0000
ROA not after: Tue 09 Sep 2025 13:48:31 +0000
asID: 138915
IP address blocks: 154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102186 (0x18f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 13:48:31 2025 GMT
Not After : Sep 9 13:48:31 2025 GMT
Subject: CN=6880e833-b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:08:17:4e:77:df:b7:80:13:bf:fd:4c:59:
8a:33:2e:f1:9b:3a:23:d4:02:b4:17:86:1c:27:16:
33:5d:cb:18:2a:d4:f3:c3:0c:ee:6d:d8:59:8b:55:
0e:ee:d5:bf:48:47:4d:35:2e:34:f1:e3:00:8c:82:
ce:73:8d:2d:60:b6:a2:ab:5e:c8:60:35:e8:22:37:
78:17:53:50:58:de:68:47:fb:ec:01:99:b2:de:44:
24:bd:36:e1:b4:16:4b:d1:03:52:a7:c4:e6:61:4f:
2b:7f:a3:2a:da:b4:f8:5d:be:3d:31:c2:57:35:98:
82:4e:bc:25:90:3f:f8:90:75:c7:21:45:51:88:7d:
eb:e5:64:4e:93:2c:ba:44:86:42:ca:95:23:02:d6:
b5:1a:47:82:75:e4:ae:02:16:56:83:a0:ba:8b:33:
bd:65:40:b4:e2:47:ea:d2:6c:c7:e7:72:68:f8:7d:
1d:cd:10:b3:e2:fb:8f:b3:f3:a5:44:e7:a9:71:7f:
11:ab:da:58:24:d7:a1:6a:5f:4c:c4:eb:e7:84:75:
0d:55:60:26:7e:36:e0:f0:c4:b6:7f:5c:d8:8c:30:
79:1c:bb:4f:c9:69:43:6c:bf:ec:d5:fa:bf:39:d6:
6d:18:35:a3:4b:2d:ec:1d:72:21:63:91:24:1e:b1:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:EC:9F:1F:FF:27:B5:64:C3:D2:CB:AD:EE:E8:86:76:C5:F6:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6CEF0A67CB11F089712AEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.17.0-154.223.24.255
154.223.26.0-154.223.30.255
154.223.32.0/22
154.223.37.0/24
154.223.40.0-154.223.45.255
Signature Algorithm: sha256WithRSAEncryption
4a:7b:e3:43:e0:68:e3:e2:16:ca:38:03:e3:9a:52:d5:52:c1:
4f:7c:01:8e:c3:0f:bb:81:b5:f8:79:60:0a:a5:4b:c3:8e:07:
d1:2a:f2:f9:4f:a7:98:ba:c0:97:26:93:10:fc:3b:8d:d1:c5:
9c:a5:f5:b9:61:24:d3:c2:c7:25:d0:8f:a0:19:a1:16:d6:8b:
e6:4d:89:80:82:d9:65:8b:0a:ee:78:55:5a:8f:ed:57:a1:d8:
5f:53:56:0e:6b:41:e1:68:bf:1b:67:8c:9f:81:55:c6:f5:3d:
ab:fc:3a:df:89:2e:2b:96:3a:81:a2:4e:4d:6b:00:55:f2:8d:
15:45:bd:c2:e8:15:38:0f:32:53:cd:bb:2d:14:8e:a8:69:b4:
eb:6f:46:21:d4:40:c3:69:4e:8e:fb:6b:7a:9f:53:ea:2c:44:
05:82:a9:0f:a5:42:ac:88:11:0e:32:24:41:bd:d9:23:88:17:
ae:f0:f4:2c:7f:58:30:12:e7:d1:44:bd:7a:49:4b:59:7b:5c:
ce:61:02:5a:e4:7a:b1:c5:1b:e8:bc:e4:f4:5b:aa:1e:4a:29:
dd:72:cc:fc:cb:fa:64:82:2c:78:4e:1f:41:f4:58:d2:09:a5:
10:bf:f2:a9:43:0c:4e:5e:35:c2:80:3d:6f:1f:6b:6b:7a:fb:
ed:85:0b:e6
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAY8qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzIzMTM0ODMxWhcNMjUwOTA5MTM0ODMxWjAYMRYw
FAYDVQQDEw02ODgwZTgzMy1iMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA27IIF05337eAE7/9TFmKMy7xmzoj1AK0F4YcJxYzXcsYKtTzwwzubdhZ
i1UO7tW/SEdNNS408eMAjILOc40tYLaiq17IYDXoIjd4F1NQWN5oR/vsAZmy3kQk
vTbhtBZL0QNSp8TmYU8rf6Mq2rT4Xb49McJXNZiCTrwlkD/4kHXHIUVRiH3r5WRO
kyy6RIZCypUjAta1GkeCdeSuAhZWg6C6izO9ZUC04kfq0mzH53Jo+H0dzRCz4vuP
s/OlROepcX8Rq9pYJNehal9MxOvnhHUNVWAmfjbg8MS2f1zYjDB5HLtPyWlDbL/s
1fq/OdZtGDWjSy3sHXIhY5EkHrGAcwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFJPW
7J8f/ye1ZMPSy63u6IZ2xfaGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQTZDRUYwQTY3Q0IxMUYwODk3MTJBRUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBACa3xEDBACa3xgwDAME
AZrfGgMEAJrfHgMEAprfIAMEAJrfJTAMAwQDmt8oAwQBmt8sMA0GCSqGSIb3DQEB
CwUAA4IBAQBKe+ND4Gjj4hbKOAPjmlLVUsFPfAGOww+7gbX4eWAKpUvDjgfRKvL5
T6eYusCXJpMQ/DuN0cWcpfW5YSTTwscl0I+gGaEW1ovmTYmAgtlliwrueFVaj+1X
odhfU1YOa0HhaL8bZ4yfgVXG9T2r/DrfiS4rljqBok5NawBV8o0VRb3C6BU4DzJT
zbstFI6oabTrb0Yh1EDDaU6O+2t6n1PqLEQFgqkPpUKsiBEOMiRBvdkjiBeu8PQs
f1gwEufRRL16SUtZe1zOYQJa5HqxxRvovOT0W6oeSindcsz8y/pkgix4Th9B9FjS
CaUQv/KpQwxOXjXCgD1vH2trevvthQvm
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:52:48 2025 by rpki-client