Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C01760A047A211F08336CE9CDAE4EC9C.roa
File: C01760A047A211F08336CE9CDAE4EC9C.roa (raw, json)
Hash identifier: iCKIv8G/1KoXdRND+8PiRgKdSuScozeTRj4rNWQz/18=
Subject key identifier: 98:9A:B5:D4:45:F1:F6:99:FA:6C:27:A0:FB:02:2B:EA:93:36:DD:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01863E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C01760A047A211F08336CE9CDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 15:34:39 +0000
ROA not before: Thu 12 Jun 2025 15:34:33 +0000
ROA not after: Tue 28 Apr 2026 15:34:33 +0000
asID: 984
IP address blocks: 154.215.193.0/24 maxlen: 24
154.215.194.0/24 maxlen: 24
154.215.195.0/24 maxlen: 24
154.215.196.0/24 maxlen: 24
154.215.197.0/24 maxlen: 24
154.215.198.0/24 maxlen: 24
154.215.199.0/24 maxlen: 24
154.219.10.0/24 maxlen: 24
154.219.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99902 (0x1863e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 15:34:33 2025 GMT
Not After : Apr 28 15:34:33 2026 GMT
Subject: CN=684af38e-3934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:84:2a:70:17:7c:10:f8:87:32:bc:eb:63:
c2:7b:d6:27:fc:7c:a6:b3:e1:e8:6e:71:14:84:8c:
c7:c0:b2:e0:2b:a2:c0:73:8e:f5:ba:14:3a:dc:a7:
31:bd:fb:35:df:42:10:6c:e0:59:de:ea:05:d2:55:
9b:59:72:17:b6:ef:3e:09:7f:f3:60:ee:3a:16:62:
ef:48:5c:3e:f9:31:2c:18:30:d6:99:ac:87:fa:15:
0c:07:be:2f:be:cf:ad:aa:5f:5d:eb:05:ce:70:d4:
73:9b:27:9d:f7:fe:3c:01:26:8e:ff:6d:94:d0:1a:
19:d8:7d:f1:f0:0f:18:fc:c1:b4:e0:3e:6c:25:be:
f4:c0:bb:fd:b7:ab:ea:57:c6:ef:a9:94:1c:3b:73:
b9:62:0d:5c:2e:1a:3e:2f:c3:2c:8f:a8:18:fa:58:
af:57:72:c2:98:fb:89:c7:f9:fb:9e:10:ee:7e:c2:
99:aa:43:93:fb:3c:49:e3:cf:85:27:92:4c:93:b7:
d7:ec:7f:d3:a8:14:07:8d:67:6b:06:62:89:7a:6b:
0f:a5:56:02:ad:39:31:3f:a0:d6:46:76:a1:33:f8:
ab:0f:55:17:83:e0:67:55:40:98:28:40:0e:db:71:
52:72:43:41:b4:fe:0d:54:69:cc:44:ee:1b:c8:0d:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9A:B5:D4:45:F1:F6:99:FA:6C:27:A0:FB:02:2B:EA:93:36:DD:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C01760A047A211F08336CE9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.193.0-154.215.199.255
154.219.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:9c:9a:fd:86:bd:56:a2:a4:c1:67:11:75:0f:6f:ce:bb:57:
12:1b:8d:28:31:5a:5a:10:02:df:3a:e1:53:59:ec:2e:a9:48:
50:ac:bc:dd:95:71:5a:31:51:49:34:19:12:de:5b:53:68:2c:
18:7a:83:b5:6d:76:fc:bf:6c:b4:06:c9:9d:8c:23:a8:89:9b:
fe:5f:b4:0e:45:05:1a:d0:5e:09:ad:20:a4:35:9a:e2:f1:99:
f1:40:bf:cf:2d:f6:cc:00:16:d7:16:28:c5:82:75:55:04:0e:
0e:f4:f5:03:ab:b0:2a:bc:d3:d1:08:09:c7:b9:1e:44:06:f9:
da:ba:25:05:96:4f:c4:4a:f9:e2:a2:20:30:31:f8:2c:31:76:
5f:3c:c3:c2:31:fa:59:60:e6:73:57:8f:b9:4b:61:5e:b4:6e:
4a:b8:aa:4c:98:82:30:4b:58:ed:65:a9:3d:32:4f:3b:bb:f8:
26:28:59:ab:3b:15:1a:53:8b:2a:a5:12:19:d4:9a:55:06:bf:
e9:dd:6a:9c:34:29:3c:ff:3e:2d:5f:6a:17:09:02:cb:94:6d:
1c:d7:df:38:c2:8d:14:75:81:5f:cb:4e:c7:23:90:1f:4b:0f:
2a:1e:d7:c7:65:5b:1f:47:e4:9b:42:e4:91:aa:aa:4b:7c:51:
53:e1:84:18
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAYY+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjEyMTUzNDMzWhcNMjYwNDI4MTUzNDMzWjAYMRYw
FAYDVQQDEw02ODRhZjM4ZS0zOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn1GEKnAXfBD4hzK862PCe9Yn/Hyms+HobnEUhIzHwLLgK6LAc471uhQ6
3Kcxvfs130IQbOBZ3uoF0lWbWXIXtu8+CX/zYO46FmLvSFw++TEsGDDWmayH+hUM
B74vvs+tql9d6wXOcNRzmyed9/48ASaO/22U0BoZ2H3x8A8Y/MG04D5sJb70wLv9
t6vqV8bvqZQcO3O5Yg1cLho+L8Msj6gY+livV3LCmPuJx/n7nhDufsKZqkOT+zxJ
48+FJ5JMk7fX7H/TqBQHjWdrBmKJemsPpVYCrTkxP6DWRnahM/irD1UXg+BnVUCY
KEAO23FSckNBtP4NVGnMRO4byA1ovQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFJia
tdRF8faZ+mwnoPsCK+qTNt2CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDE3NjBBMDQ3QTIxMUYwODMzNkNFOUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACa18EDBAOa18ADBAGa
2wowDQYJKoZIhvcNAQELBQADggEBABucmv2GvVaipMFnEXUPb867VxIbjSgxWloQ
At864VNZ7C6pSFCsvN2VcVoxUUk0GRLeW1NoLBh6g7Vtdvy/bLQGyZ2MI6iJm/5f
tA5FBRrQXgmtIKQ1muLxmfFAv88t9swAFtcWKMWCdVUEDg709QOrsCq809EICce5
HkQG+dq6JQWWT8RK+eKiIDAx+Cwxdl88w8Ix+llg5nNXj7lLYV60bkq4qkyYgjBL
WO1lqT0yTzu7+CYoWas7FRpTiyqlEhnUmlUGv+ndapw0KTz/Pi1fahcJAsuUbRzX
3zjCjRR1gV/LTscjkB9LDyoe18dlWx9H5JtC5JGqqkt8UVPhhBg=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:13:59 2025 by rpki-client