Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32E4C306E2411F0AB0F5FC4DAE4EC9C.roa
File: F32E4C306E2411F0AB0F5FC4DAE4EC9C.roa (raw, json)
Hash identifier: WY3f95fac4BBSP42PJWS6u7xGzrAPdfZlzQuWPrIzzc=
Subject key identifier: 19:20:8C:9A:85:ED:E8:E3:56:B9:94:0A:B2:3C:23:8D:C8:D7:1C:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01901A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32E4C306E2411F0AB0F5FC4DAE4EC9C.roa
Signing time: Thu 31 Jul 2025 15:42:23 +0000
ROA not before: Thu 31 Jul 2025 15:42:18 +0000
ROA not after: Sat 30 Aug 2025 15:42:18 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102426 (0x1901a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 31 15:42:18 2025 GMT
Not After : Aug 30 15:42:18 2025 GMT
Subject: CN=688b8edf-df96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:48:7d:4b:74:12:74:e0:6c:43:18:f4:af:
dd:5c:3a:56:12:80:ba:ab:7d:1b:bd:5f:63:cd:96:
71:f2:74:90:2f:11:ec:9a:25:cb:34:42:55:55:ff:
14:c7:71:c9:db:1c:69:7c:89:7b:8e:35:d8:19:4f:
ed:86:3e:12:73:42:88:e0:0b:31:24:90:b4:64:18:
a4:5f:51:51:6d:dd:d5:a9:8d:c3:a7:52:8a:b0:c7:
17:8b:d0:1c:b5:ab:15:15:a5:c4:82:c8:25:6d:4c:
ac:3d:d8:d3:6e:1c:bd:17:6c:97:5c:b6:f6:13:26:
25:b1:4e:da:8a:da:97:83:79:03:19:2e:63:4b:2b:
c5:ff:6a:50:ef:ee:d0:c1:57:0a:28:0a:dc:71:e7:
d5:d3:da:3c:49:ad:fe:54:f3:63:69:5d:86:ec:24:
ec:c0:59:6d:3d:38:72:b4:0e:5b:c1:b6:c7:a6:7b:
bf:8d:d2:80:95:af:3b:5f:74:56:83:da:ea:c7:d2:
25:7a:53:47:5d:92:50:f7:c9:2b:13:a0:79:f9:f2:
be:85:e8:db:97:01:f5:49:44:57:52:7d:03:64:24:
ae:15:79:b6:2d:da:61:9a:ff:3a:d3:25:4b:55:c9:
b9:b5:f2:51:0c:ef:17:56:df:7e:eb:fc:57:e0:9c:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:8C:9A:85:ED:E8:E3:56:B9:94:0A:B2:3C:23:8D:C8:D7:1C:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32E4C306E2411F0AB0F5FC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
154.204.0.0/24
154.208.12.0/22
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:8b:f1:d3:d8:6d:2c:30:a0:04:9f:ff:11:c1:a5:42:4b:73:
5c:ed:03:dc:f7:68:4a:32:53:b5:84:30:77:e6:5d:9c:7a:77:
1a:5b:ac:33:66:8f:5d:d0:03:78:4a:74:ec:37:a0:29:f4:7a:
db:18:0f:4b:a4:91:98:15:50:cc:b0:09:b2:a4:f0:34:55:87:
24:7d:13:d6:de:17:1d:53:0a:a6:99:eb:cb:57:c7:4a:31:4a:
4f:fb:e8:b1:c5:0f:36:d5:c5:5e:a6:5c:71:f9:4a:8c:0a:2f:
dd:21:77:2a:86:d0:fd:ef:e4:e5:98:65:7b:a3:74:f8:6d:ee:
6e:d2:fd:bc:2e:a0:4e:5d:9f:87:88:4e:42:5a:18:ee:88:ee:
7c:4e:bb:0f:aa:2d:77:86:58:96:3a:08:6f:bc:60:b1:f1:ae:
9f:2d:ea:f2:09:2e:11:ff:f0:a1:29:f3:56:e4:60:f4:80:11:
c2:43:a3:dd:18:78:61:aa:f8:92:8d:b6:70:48:d9:e2:c9:fe:
21:d6:26:12:e6:2f:70:e8:c3:d4:95:19:b7:64:c5:e5:a0:1e:
78:30:1f:37:4b:2c:62:50:6b:36:67:0a:72:9f:43:7f:fe:e9:
31:44:26:ce:88:d2:6d:42:79:8f:9e:4e:86:7d:2b:2e:bd:36:
f9:28:68:7d
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAZAaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzMxMTU0MjE4WhcNMjUwODMwMTU0MjE4WjAYMRYw
FAYDVQQDEw02ODhiOGVkZi1kZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3jBIfUt0EnTgbEMY9K/dXDpWEoC6q30bvV9jzZZx8nSQLxHsmiXLNEJV
Vf8Ux3HJ2xxpfIl7jjXYGU/thj4Sc0KI4AsxJJC0ZBikX1FRbd3VqY3Dp1KKsMcX
i9ActasVFaXEgsglbUysPdjTbhy9F2yXXLb2EyYlsU7aitqXg3kDGS5jSyvF/2pQ
7+7QwVcKKArccefV09o8Sa3+VPNjaV2G7CTswFltPThytA5bwbbHpnu/jdKAla87
X3RWg9rqx9IlelNHXZJQ98krE6B5+fK+hejblwH1SURXUn0DZCSuFXm2Ldphmv86
0yVLVcm5tfJRDO8XVt9+6/xX4Jy4fQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFBkg
jJqF7ejjVrmUCrI8I43I1xwRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzJFNEMzMDZFMjQxMUYwQUIwRjVGQzREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAmlYAAwQAmswAAwQCmtAM
AwQAmtSAAwQAmtcAAwQAmtoAAwQAmt0AMA0GCSqGSIb3DQEBCwUAA4IBAQALi/HT
2G0sMKAEn/8RwaVCS3Nc7QPc92hKMlO1hDB35l2cencaW6wzZo9d0AN4SnTsN6Ap
9HrbGA9LpJGYFVDMsAmypPA0VYckfRPW3hcdUwqmmevLV8dKMUpP++ixxQ821cVe
plxx+UqMCi/dIXcqhtD97+TlmGV7o3T4be5u0v28LqBOXZ+HiE5CWhjuiO58TrsP
qi13hliWOghvvGCx8a6fLeryCS4R//ChKfNW5GD0gBHCQ6PdGHhhqviSjbZwSNni
yf4h1iYS5i9w6MPUlRm3ZMXloB54MB83SyxiUGs2Zwpyn0N//ukxRCbOiNJtQnmP
nk6GfSsuvTb5KGh9
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:00 2025 by rpki-client