Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4271D66676B011F0B8B56BF1DAE4EC9C.roa
File: 4271D66676B011F0B8B56BF1DAE4EC9C.roa (raw, json)
Hash identifier: xEZtSxuU3835fTQBk3nIwKsOQYXefeLGY/l/wxIdNgs=
Subject key identifier: F0:04:B5:89:56:5E:DB:7D:B5:CB:51:32:F2:5C:64:DA:73:0F:D3:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019147
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4271D66676B011F0B8B56BF1DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 12:39:45 +0000
ROA not before: Mon 11 Aug 2025 12:39:41 +0000
ROA not after: Tue 16 Sep 2025 12:39:41 +0000
asID: 20326
IP address blocks: 154.194.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102727 (0x19147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 12:39:41 2025 GMT
Not After : Sep 16 12:39:41 2025 GMT
Subject: CN=6899e491-23c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:7a:ea:e6:07:17:ce:aa:e4:69:60:8f:36:
ba:7c:7e:48:36:3f:83:1e:5d:fb:12:da:8e:e2:1e:
ee:85:5f:ba:4f:94:25:ec:63:a5:07:5a:91:ab:f7:
b0:26:60:a2:d4:c0:6b:d1:d7:fc:53:c0:a0:f6:78:
59:20:88:99:9a:49:2e:2c:e5:8a:a8:78:61:a8:4b:
6a:af:45:b3:22:e3:20:6f:6b:0d:6f:95:99:b1:cd:
bf:73:d4:d4:f7:13:21:c2:8d:de:81:5e:6c:a1:13:
c5:3a:36:30:72:f0:11:ff:39:e4:51:73:b0:98:d7:
5c:e2:81:72:11:81:3c:0e:8e:45:45:a4:cf:e2:97:
f2:78:d2:bc:0f:ae:9a:c0:dc:18:4a:6d:87:0c:1c:
65:f3:ab:8e:86:84:33:b7:27:32:86:3c:be:44:af:
2f:4a:db:73:95:4c:8d:f3:68:50:80:dd:fc:8e:f8:
f4:72:49:c2:73:07:c5:8b:e9:1a:b7:7c:76:f2:d2:
a5:07:32:dc:33:1c:6d:c1:77:77:4e:0b:25:1a:e2:
16:ae:c2:8b:70:cd:db:d7:30:14:fb:86:8e:71:b6:
26:1b:02:c7:6a:c4:31:67:0d:98:85:a8:8b:80:62:
c5:21:18:fa:56:f5:25:ea:2f:d9:70:48:25:5c:91:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:B5:89:56:5E:DB:7D:B5:CB:51:32:F2:5C:64:DA:73:0F:D3:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4271D66676B011F0B8B56BF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.224.0/23
Signature Algorithm: sha256WithRSAEncryption
77:91:39:90:01:f2:53:b3:8d:b1:0c:80:31:a8:ad:57:ce:35:
af:77:a0:b8:01:71:d8:17:7f:64:0f:49:ba:c5:f1:5a:5c:02:
a5:81:85:d1:e5:e2:4f:bb:c2:12:49:b9:51:d6:09:4a:ba:72:
58:9f:c9:c6:2e:cf:92:05:46:8e:71:fa:e7:24:dc:a6:ce:cb:
ed:3f:35:30:3c:7d:40:c4:e4:da:e0:8b:a3:0a:6d:98:97:e1:
26:fc:c2:2c:ab:5f:a5:bc:8f:d2:72:87:f6:67:ae:f2:61:98:
b2:5f:95:a9:fd:4f:aa:95:e5:28:61:1d:fe:15:87:9f:92:3a:
df:26:cb:14:38:ea:79:9a:c8:98:44:be:73:e8:5a:9e:a7:57:
0e:45:2f:a2:9e:ff:fb:07:d9:aa:ee:57:9f:3b:42:50:4b:c5:
5b:17:e8:50:df:0e:17:ef:79:6e:fb:1d:80:f0:70:d0:68:34:
b9:10:35:64:e7:5c:f6:78:0d:93:02:20:d0:33:99:2e:94:11:
b0:d2:81:57:56:c9:59:22:44:72:6e:5d:0b:6a:c9:56:64:1b:
96:86:c0:91:dc:ad:03:58:8e:e2:09:31:91:56:c4:18:61:0e:
75:c5:6e:f4:b4:01:9e:da:6b:1d:92:be:db:3d:e1:8a:2d:de:
01:c0:ad:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZFHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODExMTIzOTQxWhcNMjUwOTE2MTIzOTQxWjAYMRYw
FAYDVQQDEw02ODk5ZTQ5MS0yM2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArv966uYHF86q5Glgjza6fH5INj+DHl37EtqO4h7uhV+6T5Ql7GOlB1qR
q/ewJmCi1MBr0df8U8Cg9nhZIIiZmkkuLOWKqHhhqEtqr0WzIuMgb2sNb5WZsc2/
c9TU9xMhwo3egV5soRPFOjYwcvAR/znkUXOwmNdc4oFyEYE8Do5FRaTP4pfyeNK8
D66awNwYSm2HDBxl86uOhoQztycyhjy+RK8vSttzlUyN82hQgN38jvj0cknCcwfF
i+kat3x28tKlBzLcMxxtwXd3TgslGuIWrsKLcM3b1zAU+4aOcbYmGwLHasQxZw2Y
haiLgGLFIRj6VvUl6i/ZcEglXJFX8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPAE
tYlWXtt9tctRMvJcZNpzD9MdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjcxRDY2Njc2QjAxMUYwQjhCNTZCRjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsLgMA0GCSqGSIb3DQEB
CwUAA4IBAQB3kTmQAfJTs42xDIAxqK1XzjWvd6C4AXHYF39kD0m6xfFaXAKlgYXR
5eJPu8ISSblR1glKunJYn8nGLs+SBUaOcfrnJNymzsvtPzUwPH1AxOTa4IujCm2Y
l+Em/MIsq1+lvI/Scof2Z67yYZiyX5Wp/U+qleUoYR3+FYefkjrfJssUOOp5msiY
RL5z6Fqep1cORS+inv/7B9mq7lefO0JQS8VbF+hQ3w4X73lu+x2A8HDQaDS5EDVk
51z2eA2TAiDQM5kulBGw0oFXVslZIkRybl0LaslWZBuWhsCR3K0DWI7iCTGRVsQY
YQ51xW70tAGe2msdkr7bPeGKLd4BwK0p
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:44 2025 by rpki-client