
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/302F5AFC572D11F0808E59D5DAE4EC9C.roa
File: 302F5AFC572D11F0808E59D5DAE4EC9C.roa (raw, json)
Hash identifier: HB0bO/C8cbYrsquSgK8RO9qNuyzV/vkoEECV/b8T47g=
Subject key identifier: 08:30:E7:52:EE:27:04:48:10:71:2D:54:29:89:B8:A7:98:D3:82:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/302F5AFC572D11F0808E59D5DAE4EC9C.roa
Signing time: Wed 02 Jul 2025 10:13:25 +0000
ROA not before: Wed 02 Jul 2025 10:13:20 +0000
ROA not after: Sat 09 Aug 2025 10:13:20 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.213.193.0/24 maxlen: 24
154.213.194.0/24 maxlen: 24
154.213.195.0/24 maxlen: 24
154.213.196.0/24 maxlen: 24
154.213.197.0/24 maxlen: 24
154.213.198.0/24 maxlen: 24
154.213.199.0/24 maxlen: 24
154.213.202.0/24 maxlen: 24
154.213.203.0/24 maxlen: 24
154.213.204.0/24 maxlen: 24
154.214.1.0/24 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100786 (0x189b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:13:20 2025 GMT
Not After : Aug 9 10:13:20 2025 GMT
Subject: CN=68650644-6cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:de:ca:78:f9:23:e4:d7:5b:9b:2c:da:9f:
ea:b8:00:7b:84:24:90:aa:63:e7:ac:4b:47:83:49:
ea:21:ca:48:7c:b8:55:f7:ac:cc:a5:7a:38:7a:40:
32:e3:63:8f:ff:20:c7:9f:43:20:a5:ee:1b:94:f7:
34:47:4d:c4:2c:fa:0f:75:80:88:30:6f:53:f0:d5:
52:17:f1:f4:45:20:92:cd:6e:4a:6c:2a:df:5b:3b:
65:f1:de:c0:b3:35:02:81:67:1f:92:aa:82:9d:cf:
77:40:25:83:7a:7c:1a:6b:66:b4:17:77:a5:94:62:
e9:5c:b4:cf:34:c1:fc:1a:94:8a:d5:b7:65:d6:67:
6f:48:7c:e5:df:fe:05:09:4c:7b:98:e0:8d:e1:3e:
9d:ab:74:81:53:13:80:64:f9:4b:64:9a:60:a2:40:
b1:01:6e:ee:65:a2:af:32:b2:56:72:a7:92:4b:84:
91:35:de:1f:95:5e:98:d4:1d:6e:cb:c6:5d:3e:66:
05:12:e0:1b:78:42:25:6b:b8:9a:44:d2:45:15:3f:
db:2e:25:06:f5:8c:8e:1c:ee:88:c8:b8:f8:de:52:
14:fe:d3:9b:39:d7:f8:66:ee:39:24:0d:91:47:6d:
4f:7e:f7:fc:6d:bb:e5:ae:50:62:f0:93:7d:8a:b6:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:E7:52:EE:27:04:48:10:71:2D:54:29:89:B8:A7:98:D3:82:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/302F5AFC572D11F0808E59D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.213.193.0-154.213.199.255
154.213.202.0-154.213.204.255
154.214.1.0/24
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0f:9e:da:84:cd:87:52:7a:0a:7b:c0:20:8a:52:02:78:e1:
b3:b6:21:fe:6e:32:8d:34:8c:aa:76:a6:88:4f:c3:5a:62:83:
d2:ab:6a:f1:3c:34:4d:23:31:40:19:48:80:05:28:9c:10:2b:
56:b7:4d:0c:58:be:19:e2:e5:0f:48:5e:16:df:be:db:ce:0f:
3b:35:a7:4c:57:9b:9f:fe:76:a5:c3:10:78:e9:1c:09:70:ad:
9a:d8:7d:87:8a:95:5f:ae:59:84:f2:50:03:c5:71:34:c2:17:
e1:91:51:ef:3d:6d:73:29:5b:ae:d8:81:bd:ff:d7:ca:62:af:
26:7f:60:49:ff:6b:aa:cc:44:4f:f9:7e:3d:23:71:31:f7:66:
7a:e5:f4:e9:d5:cc:47:2d:02:aa:27:9c:b7:da:d7:ea:e6:46:
fd:b3:2e:d8:34:69:61:0c:aa:24:87:0b:a4:12:79:3e:49:82:
e2:01:1a:45:f1:d5:78:5b:86:3d:3f:ba:06:dd:5c:78:eb:a5:
c5:f4:ae:d3:af:d2:a0:2a:2b:25:e6:4d:a6:2c:0f:31:0b:ad:
38:ca:12:5b:72:df:ea:cd:97:ab:bf:e4:fc:c1:af:e1:0c:88:
6c:9f:1e:ca:cb:b0:85:dd:42:de:15:6e:e0:7a:a4:da:9e:64:
1e:15:41:0d
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIDAYmyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzAyMTAxMzIwWhcNMjUwODA5MTAxMzIwWjAYMRYw
FAYDVQQDEw02ODY1MDY0NC02Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuLfeynj5I+TXW5ss2p/quAB7hCSQqmPnrEtHg0nqIcpIfLhV96zMpXo4
ekAy42OP/yDHn0Mgpe4blPc0R03ELPoPdYCIMG9T8NVSF/H0RSCSzW5KbCrfWztl
8d7AszUCgWcfkqqCnc93QCWDenwaa2a0F3ellGLpXLTPNMH8GpSK1bdl1mdvSHzl
3/4FCUx7mOCN4T6dq3SBUxOAZPlLZJpgokCxAW7uZaKvMrJWcqeSS4SRNd4flV6Y
1B1uy8ZdPmYFEuAbeEIla7iaRNJFFT/bLiUG9YyOHO6IyLj43lIU/tObOdf4Zu45
JA2RR21Pfvf8bbvlrlBi8JN9irZXLQIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFAgw
51LuJwRIEHEtVCmJuKeY04IdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMDJGNUFGQzU3MkQxMUYwODA4RTU5RDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQCmsGYAwQBmsGeAwQBmscO
AwQBmsdEAwQDmtWgMAwDBACa1cEDBAOa1cAwDAMEAZrVygMEAJrVzAMEAJrWAQME
AJrehDANBgkqhkiG9w0BAQsFAAOCAQEAFg+e2oTNh1J6CnvAIIpSAnjhs7Yh/m4y
jTSMqnamiE/DWmKD0qtq8Tw0TSMxQBlIgAUonBArVrdNDFi+GeLlD0heFt++284P
OzWnTFebn/52pcMQeOkcCXCtmth9h4qVX65ZhPJQA8VxNMIX4ZFR7z1tcylbrtiB
vf/XymKvJn9gSf9rqsxET/l+PSNxMfdmeuX06dXMRy0Cqiect9rX6uZG/bMu2DRp
YQyqJIcLpBJ5PkmC4gEaRfHVeFuGPT+6Bt1ceOulxfSu06/SoCorJeZNpiwPMQut
OMoSW3Lf6s2Xq7/k/MGv4QyIbJ8eysuwhd1C3hVu4Hqk2p5kHhVBDQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 10:09:59 2025 by rpki-client