Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C383E512811F0ABED5AA6DAE4EC9C.roa
File: 0A3C383E512811F0ABED5AA6DAE4EC9C.roa (raw, json)
Hash identifier: T3HRCd5py7B/5o8HfIFCO1VggTDo5RY71rVeE3A8C7o=
Subject key identifier: 7B:26:56:3B:FD:2B:A8:70:46:67:E2:35:3C:07:7F:F1:8A:C8:C7:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01888E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C383E512811F0ABED5AA6DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 18:21:26 +0000
ROA not before: Tue 24 Jun 2025 18:21:22 +0000
ROA not after: Fri 15 Aug 2025 18:21:22 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.135.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100494 (0x1888e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:21:22 2025 GMT
Not After : Aug 15 18:21:22 2025 GMT
Subject: CN=685aeca6-0eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:90:e9:ce:8e:5d:b4:d4:42:2e:85:1b:7a:
05:e4:31:52:14:67:31:1b:21:10:e8:7d:41:69:06:
50:82:21:57:0c:e2:0c:10:ab:5b:b9:9e:24:5f:11:
b5:01:58:d6:26:dc:1e:d8:e3:9b:97:4c:59:c9:d3:
ea:8a:59:7e:06:da:16:e6:6d:bd:37:4c:dd:96:3a:
90:84:87:66:8a:07:31:9a:a9:b2:e9:f8:58:19:c2:
1e:d5:43:bf:84:b8:0f:62:2a:12:57:c5:56:9c:c4:
19:8d:75:90:da:e3:fe:46:be:80:4e:fb:77:ab:5c:
c2:0c:ce:53:bd:28:9f:fb:fc:15:d5:d0:63:dd:4d:
58:9e:9a:72:c2:93:73:fa:7d:e5:cd:fc:e7:c3:fa:
b8:aa:1e:c7:8e:7f:7f:15:76:fd:6a:4f:ec:b6:70:
8e:fb:7e:25:71:d4:f4:a5:e7:4b:e8:70:8c:bb:77:
9d:c0:f9:3e:2c:40:9c:6a:f8:b2:95:52:f9:81:7e:
f1:fd:9d:02:20:c7:5a:89:d1:8e:16:1d:34:28:08:
92:e9:00:b4:03:76:a5:01:ae:60:cf:2c:f4:8f:62:
09:ec:2d:22:5f:d2:0a:f3:0d:cb:7d:74:4e:73:36:
65:8f:5e:63:62:40:e3:89:9e:75:1c:34:95:dd:d8:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:56:3B:FD:2B:A8:70:46:67:E2:35:3C:07:7F:F1:8A:C8:C7:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A3C383E512811F0ABED5AA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0-154.203.135.255
154.203.138.0-154.203.141.255
154.203.146.0/23
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4e:30:d7:24:91:a1:27:dc:20:81:a1:bb:cf:eb:70:16:33:
c7:8e:bc:fb:73:ad:af:4a:09:4b:66:f5:81:af:2a:2e:e9:1c:
36:f6:fb:9d:48:b0:6f:40:54:df:66:0d:b6:46:4c:6a:2a:40:
69:7c:a6:43:c7:a3:76:38:60:f0:91:69:59:54:69:9b:b5:2d:
ca:2f:c3:1f:1b:e6:d3:6c:dc:93:6b:9c:4c:c2:41:b5:39:99:
f0:09:fc:ac:11:d7:3c:28:58:e3:04:d9:9f:55:59:8a:8b:c0:
51:87:b4:ab:29:8e:bd:5f:f9:33:de:97:6c:fb:0d:40:81:79:
ef:9f:5b:f8:b1:30:aa:28:42:ce:92:a2:7c:99:02:9f:ba:1c:
6f:59:31:74:cb:11:72:44:e7:08:fd:99:75:19:29:78:0d:2e:
3f:cc:3a:a9:f7:3b:bb:70:d9:1e:99:77:f8:cf:0c:ef:84:7c:
22:50:d7:04:ff:98:86:a9:8e:09:80:99:d7:9c:03:40:59:16:
15:cb:bc:25:f1:1e:08:38:5d:e6:63:6c:d5:b5:4e:c1:37:ef:
1f:32:c1:4f:83:06:fd:cd:b3:98:30:d8:6d:54:ef:2c:bc:80:
ce:d4:5e:7f:ac:da:22:74:81:ac:9d:bd:f3:e3:fc:f8:fb:05:
1e:05:10:24
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAYiOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI0MTgyMTIyWhcNMjUwODE1MTgyMTIyWjAYMRYw
FAYDVQQDEw02ODVhZWNhNi0wZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvzCQ6c6OXbTUQi6FG3oF5DFSFGcxGyEQ6H1BaQZQgiFXDOIMEKtbuZ4k
XxG1AVjWJtwe2OObl0xZydPqill+BtoW5m29N0zdljqQhIdmigcxmqmy6fhYGcIe
1UO/hLgPYioSV8VWnMQZjXWQ2uP+Rr6ATvt3q1zCDM5TvSif+/wV1dBj3U1Ynppy
wpNz+n3lzfznw/q4qh7Hjn9/FXb9ak/stnCO+34lcdT0pedL6HCMu3edwPk+LECc
aviylVL5gX7x/Z0CIMdaidGOFh00KAiS6QC0A3alAa5gzyz0j2IJ7C0iX9IK8w3L
fXROczZlj15jYkDjiZ51HDSV3dj9EQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFHsm
Vjv9K6hwRmfiNTwHf/GKyMcyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQTNDMzgzRTUxMjgxMUYwQUJFRDVBQTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACay4UDBAOay4AwDAME
AZrLigMEAZrLjAMEAZrLkgMEAJrLpjANBgkqhkiG9w0BAQsFAAOCAQEAcU4w1ySR
oSfcIIGhu8/rcBYzx468+3Otr0oJS2b1ga8qLukcNvb7nUiwb0BU32YNtkZMaipA
aXymQ8ejdjhg8JFpWVRpm7Utyi/DHxvm02zck2ucTMJBtTmZ8An8rBHXPChY4wTZ
n1VZiovAUYe0qymOvV/5M96XbPsNQIF5759b+LEwqihCzpKifJkCn7ocb1kxdMsR
ckTnCP2ZdRkpeA0uP8w6qfc7u3DZHpl3+M8M74R8IlDXBP+YhqmOCYCZ15wDQFkW
Fcu8JfEeCDhd5mNs1bVOwTfvHzLBT4MG/c2zmDDYbVTvLLyAztRef6zaInSBrJ29
8+P8+PsFHgUQJA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:06:50 2025 by rpki-client