Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67830FDA242E11F09CCFD081DAE4EC9C.roa
File: 67830FDA242E11F09CCFD081DAE4EC9C.roa (raw, json)
Hash identifier: nIUX0ICPmS37Tr/6dYgKq1vhuU7FIdgXVz6/Rd22op0=
Subject key identifier: 5D:8D:55:1D:08:B8:66:28:BB:36:FA:8E:32:21:B5:F0:4C:3D:7C:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67830FDA242E11F09CCFD081DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:43:38 +0000
ROA not before: Mon 28 Apr 2025 12:43:33 +0000
ROA not after: Mon 23 Mar 2026 12:43:33 +0000
asID: 984
IP address blocks: 154.90.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 13:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97206 (0x17bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:43:33 2025 GMT
Not After : Mar 23 12:43:33 2026 GMT
Subject: CN=680f77f9-6bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:20:86:7d:a2:b7:0a:ae:b9:21:b2:75:da:
ab:78:17:fa:1b:84:48:44:65:7e:99:e1:9f:29:dd:
81:14:93:41:d4:b5:f4:85:80:9d:79:54:1f:9c:65:
7f:10:98:1b:71:98:f1:d5:a4:42:4c:ba:67:24:c6:
76:c4:e8:03:9c:55:cd:6c:66:05:52:5f:cc:32:97:
f5:34:42:44:59:d5:3b:2b:b9:f7:4b:3f:1d:a4:d9:
90:8a:0e:2e:31:da:91:97:79:62:61:d2:12:a9:a9:
0b:eb:83:f4:eb:e8:a2:7a:34:1b:07:eb:e1:c6:35:
15:65:3b:f3:3f:fa:c3:1b:43:f8:fd:32:bd:94:97:
3f:1c:ee:3f:f5:aa:98:6b:28:3b:c7:fb:a7:f0:a6:
e1:7c:bb:1e:28:9f:97:df:f1:d3:31:47:52:35:2b:
a4:42:61:eb:2f:f0:6b:9a:04:9e:03:05:0f:95:ae:
38:26:5c:21:d4:b8:52:02:ff:a7:5a:ff:97:1a:6c:
62:1b:80:76:3c:df:ac:17:60:8e:91:16:90:da:ca:
8f:40:16:51:d0:3f:a1:d7:84:51:5c:f8:60:07:fa:
60:60:64:b4:70:86:e0:b8:8e:f9:53:af:82:4c:24:
32:48:ed:d7:f9:cc:22:27:ff:39:e4:d9:91:b7:11:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:55:1D:08:B8:66:28:BB:36:FA:8E:32:21:B5:F0:4C:3D:7C:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67830FDA242E11F09CCFD081DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.19.0/24
Signature Algorithm: sha256WithRSAEncryption
84:48:7f:2c:91:a2:e7:47:fa:77:ce:8a:57:00:55:e4:47:97:
2d:88:55:7d:b4:76:1d:5d:6d:0d:cc:7b:ea:05:c4:1f:26:4b:
be:93:b9:0b:cc:c0:3b:fd:42:ff:99:6b:4b:c2:bd:8e:ec:e0:
00:9c:7f:7c:6d:d3:09:d0:dc:53:f5:5c:21:02:d9:56:45:d2:
a1:b2:cb:33:7d:3e:c4:8a:3e:bb:70:9c:79:86:f0:53:7b:fb:
f9:10:9b:dd:06:f5:fd:68:d7:20:13:ee:4b:d1:79:6f:e2:29:
6b:05:c3:73:54:a7:c1:03:19:23:de:e3:be:50:35:df:fb:42:
12:f2:78:f9:dd:19:e1:b5:e3:d8:d9:14:fa:64:45:0d:34:8f:
26:42:6d:cb:cd:bf:de:97:2b:e2:72:a6:90:16:9b:1f:d0:00:
8a:d6:30:e4:c1:77:ab:51:b8:91:a7:59:79:1f:56:4b:c3:58:
7d:91:16:80:a8:74:bb:b4:7c:7f:55:24:2d:0c:c7:7a:8d:81:
7e:95:58:6a:85:fa:30:72:ad:67:1d:5a:6c:ad:41:86:0b:ff:
05:3d:d3:4b:b3:a4:43:f1:68:35:25:90:1d:0a:ab:bb:16:31:
79:39:e6:81:16:dc:79:0c:e7:3f:8d:5a:b6:09:4c:4b:02:b9:
f5:9e:2c:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXu2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTI0MzMzWhcNMjYwMzIzMTI0MzMzWjAYMRYw
FAYDVQQDEw02ODBmNzdmOS02YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuuwghn2itwquuSGyddqreBf6G4RIRGV+meGfKd2BFJNB1LX0hYCdeVQf
nGV/EJgbcZjx1aRCTLpnJMZ2xOgDnFXNbGYFUl/MMpf1NEJEWdU7K7n3Sz8dpNmQ
ig4uMdqRl3liYdISqakL64P06+iiejQbB+vhxjUVZTvzP/rDG0P4/TK9lJc/HO4/
9aqYayg7x/un8KbhfLseKJ+X3/HTMUdSNSukQmHrL/BrmgSeAwUPla44Jlwh1LhS
Av+nWv+XGmxiG4B2PN+sF2COkRaQ2sqPQBZR0D+h14RRXPhgB/pgYGS0cIbguI75
U6+CTCQySO3X+cwiJ/855NmRtxHSxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF2N
VR0IuGYouzb6jjIhtfBMPXycMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NzgzMEZEQTI0MkUxMUYwOUNDRkQwODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmloTMA0GCSqGSIb3DQEB
CwUAA4IBAQCESH8skaLnR/p3zopXAFXkR5ctiFV9tHYdXW0NzHvqBcQfJku+k7kL
zMA7/UL/mWtLwr2O7OAAnH98bdMJ0NxT9VwhAtlWRdKhssszfT7Eij67cJx5hvBT
e/v5EJvdBvX9aNcgE+5L0Xlv4ilrBcNzVKfBAxkj3uO+UDXf+0IS8nj53RnhtePY
2RT6ZEUNNI8mQm3Lzb/elyvicqaQFpsf0ACK1jDkwXerUbiRp1l5H1ZLw1h9kRaA
qHS7tHx/VSQtDMd6jYF+lVhqhfowcq1nHVpsrUGGC/8FPdNLs6RD8Wg1JZAdCqu7
FjF5OeaBFtx5DOc/jVq2CUxLArn1niyh
-----END CERTIFICATE-----
Generated at Fri May 9 02:48:55 2025 by rpki-client