
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257A280C4B6711F0BBB04BB1DAE4EC9C.roa
File: 257A280C4B6711F0BBB04BB1DAE4EC9C.roa (raw, json)
Hash identifier: ThPcMdKg+7Q+VFhhJUChPIIzh+Dd1C3Yu3mXNdsCgA8=
Subject key identifier: 9E:CD:4B:C0:49:CB:17:55:FD:55:30:BA:2E:81:03:2C:76:1F:1D:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257A280C4B6711F0BBB04BB1DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 10:38:04 +0000
ROA not before: Tue 17 Jun 2025 10:37:57 +0000
ROA not after: Fri 12 Sep 2025 10:37:57 +0000
asID: 54600
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100099 (0x18703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 10:37:57 2025 GMT
Not After : Sep 12 10:37:57 2025 GMT
Subject: CN=6851458b-7860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:d6:cd:bd:24:46:d6:4e:61:83:aa:30:dd:
aa:b1:74:bb:46:50:e7:5f:83:8a:d8:b9:f2:74:29:
42:a3:88:40:3c:75:0e:39:75:b4:35:5d:6c:bb:c3:
da:69:37:68:2a:3c:b1:8e:40:73:cf:5d:e4:dd:9c:
b7:c9:d6:fc:ca:be:2a:08:0d:23:16:b7:2e:a3:a7:
e8:2d:9e:1c:cd:93:28:4f:9f:b5:d9:c3:3c:c3:5d:
9e:a0:44:e2:a6:0b:0d:1d:89:9b:81:c8:88:4c:bf:
d0:ee:ea:2a:99:7f:09:e7:b7:07:f0:52:c9:eb:e2:
c3:92:83:dc:f8:ef:31:e7:b3:8a:08:f7:b1:35:c2:
b8:d4:d5:51:f0:4f:91:b0:38:38:c7:ae:f2:c2:df:
3b:17:55:a4:5b:a8:8c:17:db:a7:47:ed:37:b5:68:
48:9f:ab:31:45:76:56:2c:68:27:e3:65:fd:49:71:
37:ed:8a:bd:a4:4d:84:69:7f:8c:66:db:a1:ef:07:
6c:65:f2:f1:0e:fd:58:ca:b6:ee:f6:d4:0c:9b:e7:
24:38:69:c3:54:18:dd:7b:7c:54:12:89:d6:9b:a2:
98:3c:60:47:9f:e4:73:67:c6:ca:6a:aa:32:52:ee:
5e:74:88:8c:d2:12:a2:80:ff:f2:2b:c7:1a:9e:19:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:4B:C0:49:CB:17:55:FD:55:30:BA:2E:81:03:2C:76:1F:1D:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/257A280C4B6711F0BBB04BB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
c2:24:0f:92:6f:76:96:ae:ca:d9:62:4e:de:01:05:97:ca:81:
e5:40:f4:ee:4a:8a:70:b6:38:d2:53:35:12:17:36:cb:8a:c6:
50:6a:62:93:45:ba:e4:18:64:1a:c3:43:e2:5d:a7:39:20:22:
42:61:2a:3d:0b:e1:41:9a:90:1d:6d:84:53:e2:fe:ac:cb:c1:
39:dd:ff:08:0a:78:67:fb:82:bd:59:59:a9:cd:5d:ae:54:dd:
2f:39:3b:6f:b2:e6:a7:b7:29:8b:12:7a:bf:83:6d:fa:82:fc:
5d:f5:1e:6f:c2:fe:76:d8:2f:85:2e:50:d1:9c:d2:a4:44:b0:
20:41:66:25:e6:0b:2c:20:e5:70:9a:57:51:3b:fe:c8:ff:ee:
be:2f:86:b1:e6:29:5e:8e:1a:e9:7e:10:09:0d:e7:97:73:d9:
c6:d2:94:57:12:99:3d:8a:05:1b:3a:65:c3:d2:0c:22:da:43:
4e:40:6e:bb:5a:80:c0:64:39:7f:f8:7b:49:2e:5a:11:35:a3:
e3:82:fb:2d:cc:31:f9:28:f2:35:fd:c8:fe:a6:ed:91:6e:22:
0e:a7:0b:b0:67:2a:37:05:c6:a6:f4:32:94:96:77:99:27:b0:
3b:a6:26:f9:45:d7:37:45:1b:9d:34:fb:33:66:59:d8:96:5a:
35:16:f9:7f
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAYcDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE3MTAzNzU3WhcNMjUwOTEyMTAzNzU3WjAYMRYw
FAYDVQQDEw02ODUxNDU4Yi03ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt+3Wzb0kRtZOYYOqMN2qsXS7RlDnX4OK2LnydClCo4hAPHUOOXW0NV1s
u8PaaTdoKjyxjkBzz13k3Zy3ydb8yr4qCA0jFrcuo6foLZ4czZMoT5+12cM8w12e
oETipgsNHYmbgciITL/Q7uoqmX8J57cH8FLJ6+LDkoPc+O8x57OKCPexNcK41NVR
8E+RsDg4x67ywt87F1WkW6iMF9unR+03tWhIn6sxRXZWLGgn42X9SXE37Yq9pE2E
aX+MZtuh7wdsZfLxDv1Yyrbu9tQMm+ckOGnDVBjde3xUEonWm6KYPGBHn+RzZ8bK
aqoyUu5edIiM0hKigP/yK8canhnFpwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFJ7N
S8BJyxdV/VUwui6BAyx2Hx3qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTdBMjgwQzRCNjcxMUYwQkJCMDRCQjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAsDBASax9ADAwOawAMEAJrK
dQMEA5rKeDALAwQBmtnqAwMBmtgwDQYJKoZIhvcNAQELBQADggEBAMIkD5Jvdpau
ytliTt4BBZfKgeVA9O5KinC2ONJTNRIXNsuKxlBqYpNFuuQYZBrDQ+JdpzkgIkJh
Kj0L4UGakB1thFPi/qzLwTnd/wgKeGf7gr1ZWanNXa5U3S85O2+y5qe3KYsSer+D
bfqC/F31Hm/C/nbYL4UuUNGc0qREsCBBZiXmCywg5XCaV1E7/sj/7r4vhrHmKV6O
Gul+EAkN55dz2cbSlFcSmT2KBRs6ZcPSDCLaQ05AbrtagMBkOX/4e0kuWhE1o+OC
+y3MMfko8jX9yP6m7ZFuIg6nC7BnKjcFxqb0MpSWd5knsDumJvlF1zdFG500+zNm
WdiWWjUW+X8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:01:35 2025 by rpki-client