Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF4E06E753611F0B53F81CDDAE4EC9C.roa
File: 1EF4E06E753611F0B53F81CDDAE4EC9C.roa (raw, json)
Hash identifier: KGqWoUHoce7CC76EfOxPEo76sRSXyNyCvI6eqVLUrjI=
Subject key identifier: 0A:E6:56:84:A2:93:46:17:FF:96:0D:25:EF:CE:23:58:1A:E2:25:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019131
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF4E06E753611F0B53F81CDDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 15:32:56 +0000
ROA not before: Sat 09 Aug 2025 15:32:51 +0000
ROA not after: Thu 11 Sep 2025 15:32:51 +0000
asID: 203020
IP address blocks: 154.85.28.0/22 maxlen: 24
154.94.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102705 (0x19131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 15:32:51 2025 GMT
Not After : Sep 11 15:32:51 2025 GMT
Subject: CN=68976a28-3647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:b8:66:d6:ac:e9:c3:9f:67:d0:cd:9c:a6:
63:e7:ab:b3:42:f0:be:ee:cc:cb:e7:42:ff:b8:20:
91:f7:7a:6c:85:00:23:bb:c8:e1:71:d7:67:bd:7f:
11:39:70:0f:9a:9f:9c:01:95:8b:21:70:70:4f:9b:
fb:d6:2c:2a:9e:7f:59:4e:17:28:1a:03:c6:dd:63:
f4:24:99:70:b6:89:9a:b9:0e:f3:f7:4d:a9:91:7f:
ff:e6:53:d2:4e:30:4a:2e:a7:66:75:d6:ba:30:08:
e6:a6:7e:59:28:9f:8b:58:93:74:e0:f4:44:8e:cb:
13:cd:36:41:44:3b:5c:7f:2c:b4:17:1c:a3:64:63:
dd:c1:5e:93:b2:76:b7:01:68:f9:65:d7:2c:bf:41:
95:e0:21:ba:95:44:aa:a1:53:1b:ee:46:cb:be:a3:
5f:e1:0b:59:ac:6f:8b:9a:1a:c9:ce:3c:2b:35:63:
18:46:87:ae:44:ae:d9:e1:d0:00:f1:2f:62:75:42:
a0:1b:34:24:57:ba:1c:3d:5b:b8:05:7e:bf:56:42:
be:89:f4:57:37:a3:ec:05:ee:69:7d:c8:ee:b4:90:
f2:86:37:3d:32:5e:bf:cc:05:fa:ba:b4:19:ce:fb:
cf:cc:9e:93:77:fa:a1:20:08:49:22:1a:89:20:69:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E6:56:84:A2:93:46:17:FF:96:0D:25:EF:CE:23:58:1A:E2:25:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF4E06E753611F0B53F81CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.28.0/22
154.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
17:7e:b3:bf:6e:43:5a:29:34:0c:3c:23:18:88:d8:76:f0:be:
c0:47:66:e3:7e:79:9a:b0:cf:b7:f6:f1:9f:08:0e:26:e3:26:
62:8f:26:46:34:47:10:d7:74:aa:fd:69:3b:cd:91:f1:c8:a2:
62:84:7c:f5:d2:14:e5:37:a9:5b:1a:31:d5:26:80:31:f1:4d:
97:84:a1:d3:58:d7:f0:74:42:51:08:85:98:46:5a:c6:1b:24:
e1:27:d0:2f:a1:fc:af:48:fb:8c:a1:1a:9b:75:e3:c9:16:b1:
43:09:ce:28:01:85:e9:b3:76:b3:72:cf:a2:4c:ce:bb:fc:dc:
7f:10:0e:83:8c:59:86:c4:6c:f9:ed:38:94:96:c7:3f:17:04:
19:84:94:ee:6e:39:43:75:ab:11:8b:72:08:d0:6d:50:96:41:
f7:88:88:5f:e8:cb:fe:8f:a4:1c:db:0f:d1:a8:56:dc:af:2f:
bd:f5:b0:c0:20:7f:b4:e6:d5:fe:8d:8b:5a:bf:8a:3e:7d:47:
a1:11:91:c6:d4:fe:87:f2:3c:82:26:65:47:a8:74:02:79:dc:
84:63:f6:af:1c:1f:bd:52:f5:31:97:8d:4c:cb:c0:9a:5d:16:
27:7a:91:96:82:59:da:e5:7b:a7:d1:fa:8a:b3:5e:cd:54:a4:
4e:0d:f7:8a
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZExMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA5MTUzMjUxWhcNMjUwOTExMTUzMjUxWjAYMRYw
FAYDVQQDEw02ODk3NmEyOC0zNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyWC4Ztas6cOfZ9DNnKZj56uzQvC+7szL50L/uCCR93pshQAju8jhcddn
vX8ROXAPmp+cAZWLIXBwT5v71iwqnn9ZThcoGgPG3WP0JJlwtomauQ7z902pkX//
5lPSTjBKLqdmdda6MAjmpn5ZKJ+LWJN04PREjssTzTZBRDtcfyy0FxyjZGPdwV6T
sna3AWj5Zdcsv0GV4CG6lUSqoVMb7kbLvqNf4QtZrG+LmhrJzjwrNWMYRoeuRK7Z
4dAA8S9idUKgGzQkV7ocPVu4BX6/VkK+ifRXN6PsBe5pfcjutJDyhjc9Ml6/zAX6
urQZzvvPzJ6Td/qhIAhJIhqJIGkf2QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFArm
VoSik0YX/5YNJe/OI1ga4iVxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRUY0RTA2RTc1MzYxMUYwQjUzRjgxQ0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmlUcAwQEml7wMA0GCSqG
SIb3DQEBCwUAA4IBAQAXfrO/bkNaKTQMPCMYiNh28L7AR2bjfnmasM+39vGfCA4m
4yZijyZGNEcQ13Sq/Wk7zZHxyKJihHz10hTlN6lbGjHVJoAx8U2XhKHTWNfwdEJR
CIWYRlrGGyThJ9AvofyvSPuMoRqbdePJFrFDCc4oAYXps3azcs+iTM67/Nx/EA6D
jFmGxGz57TiUlsc/FwQZhJTubjlDdasRi3II0G1QlkH3iIhf6Mv+j6Qc2w/RqFbc
ry+99bDAIH+05tX+jYtav4o+fUehEZHG1P6H8jyCJmVHqHQCedyEY/avHB+9UvUx
l41My8CaXRYnepGWglna5Xun0fqKs17NVKRODfeK
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:25 2025 by rpki-client