Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68F2CF147E7D11F0A871FEE5DAE4EC9C.roa
File: 68F2CF147E7D11F0A871FEE5DAE4EC9C.roa (raw, json)
Hash identifier: 4J2FwKpdX+chMt4iSI6kz1DmxM8hCmin+Iz1AYxvp4E=
Subject key identifier: 35:C5:3D:79:84:99:BE:75:E7:BB:70:9D:A7:4E:93:D6:5B:99:D5:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019316
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68F2CF147E7D11F0A871FEE5DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 10:55:55 +0000
ROA not before: Thu 21 Aug 2025 10:55:50 +0000
ROA not after: Thu 25 Sep 2025 10:55:50 +0000
asID: 203020
IP address blocks: 154.82.24.0/21 maxlen: 24
154.85.24.0/23 maxlen: 24
154.88.10.0/23 maxlen: 24
154.88.18.0/23 maxlen: 24
154.90.160.0/21 maxlen: 24
154.90.168.0/22 maxlen: 24
154.90.184.0/22 maxlen: 24
154.94.10.0/23 maxlen: 24
154.94.20.0/23 maxlen: 24
154.94.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103190 (0x19316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 10:55:50 2025 GMT
Not After : Sep 25 10:55:50 2025 GMT
Subject: CN=68a6fb3b-f086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:bf:a0:fd:16:77:15:e9:07:82:bf:1c:8a:
93:8a:16:d5:12:a2:09:01:b6:e8:81:1b:d2:43:20:
30:fa:48:2e:8e:eb:2a:31:29:bd:eb:f2:7f:32:1f:
4a:ea:bf:1a:c2:6a:7f:f2:11:8d:c1:26:e9:45:5b:
39:89:42:0c:de:b5:5c:0e:67:64:2a:3b:f1:05:cd:
c5:cb:51:a4:2f:31:e5:57:b3:0e:a6:7f:0e:09:ff:
2d:93:00:a7:75:18:85:ce:06:1f:37:84:41:82:75:
09:11:a4:ab:d5:19:7c:75:7d:04:75:5d:85:44:e6:
af:2e:cc:9a:f4:b2:94:f8:64:41:b0:97:10:4a:e3:
a2:86:cd:cb:76:7b:20:e4:9e:2c:72:fc:6f:86:2a:
79:dc:4b:d1:25:83:8a:82:61:03:a0:64:68:0a:69:
2f:1b:a7:1b:ef:5c:9e:e0:0c:a2:7e:87:a4:35:e8:
b6:8d:01:02:e4:17:21:84:dd:ac:1f:8d:b8:5d:ff:
8c:21:c3:ae:9d:dc:38:e2:8d:45:bb:e0:ca:f5:7f:
76:1d:43:8d:2c:73:19:f1:da:02:e7:35:70:9f:fc:
a7:77:aa:35:7f:00:b5:91:8f:3a:13:8c:66:c1:54:
62:10:57:4e:22:38:0b:3f:55:5a:f9:09:61:da:3d:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:3D:79:84:99:BE:75:E7:BB:70:9D:A7:4E:93:D6:5B:99:D5:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68F2CF147E7D11F0A871FEE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/21
154.85.24.0/23
154.88.10.0/23
154.88.18.0/23
154.90.160.0-154.90.171.255
154.90.184.0/22
154.94.10.0/23
154.94.20.0/23
154.94.54.0/23
Signature Algorithm: sha256WithRSAEncryption
90:97:c5:e0:f8:3c:c9:37:ac:47:66:af:c3:d5:03:84:2a:2d:
c6:5d:77:fc:91:61:e1:d0:e8:24:87:35:5c:09:52:a1:04:27:
1f:48:f0:ea:cd:da:00:53:af:dd:9c:c9:91:58:e9:72:d5:9e:
52:02:7a:a2:42:01:fd:45:10:98:c0:94:50:74:ae:9f:a3:c5:
55:af:d4:92:bd:db:48:9f:44:2e:7b:42:d5:2f:3f:c5:e5:70:
75:81:23:1d:25:53:f9:b1:58:b0:63:ff:09:8d:97:93:eb:ea:
84:ea:c9:8f:93:6b:44:ec:46:9b:25:b9:71:c5:88:85:65:e6:
de:25:ba:7b:45:ff:53:e9:fb:08:a6:c3:49:70:90:a9:36:92:
77:71:aa:cb:32:a2:55:e0:ff:74:7b:0b:fd:0c:76:58:f3:dd:
c2:4d:4d:23:29:e8:ec:3a:b3:53:45:9f:76:ab:d9:0e:9f:60:
09:45:37:85:7d:5b:ba:98:ef:5a:5c:db:40:a3:c7:f5:d4:a4:
52:a9:18:06:42:4f:ea:02:27:b9:b6:ea:57:a4:b6:97:a8:74:
a6:ea:20:c7:a9:86:5e:4c:8f:b3:18:df:26:4a:38:5c:69:f3:
e0:57:87:94:1e:a8:66:ab:48:33:b8:4b:af:6c:8c:55:27:aa:
29:0a:5d:6a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIDAZMWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIxMTA1NTUwWhcNMjUwOTI1MTA1NTUwWjAYMRYw
FAYDVQQDEw02OGE2ZmIzYi1mMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxVG/oP0WdxXpB4K/HIqTihbVEqIJAbbogRvSQyAw+kgujusqMSm96/J/
Mh9K6r8awmp/8hGNwSbpRVs5iUIM3rVcDmdkKjvxBc3Fy1GkLzHlV7MOpn8OCf8t
kwCndRiFzgYfN4RBgnUJEaSr1Rl8dX0EdV2FROavLsya9LKU+GRBsJcQSuOihs3L
dnsg5J4scvxvhip53EvRJYOKgmEDoGRoCmkvG6cb71ye4AyifoekNei2jQEC5Bch
hN2sH424Xf+MIcOundw44o1Fu+DK9X92HUONLHMZ8doC5zVwn/ynd6o1fwC1kY86
E4xmwVRiEFdOIjgLP1Va+Qlh2j2AcQIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFDXF
PXmEmb5157twnadOk9ZbmdXUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OEYyQ0YxNDdFN0QxMUYwQTg3MUZFRTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDmlIYAwQBmlUYAwQBmlgK
AwQBmlgSMAwDBAWaWqADBAKaWqgDBAKaWrgDBAGaXgoDBAGaXhQDBAGaXjYwDQYJ
KoZIhvcNAQELBQADggEBAJCXxeD4PMk3rEdmr8PVA4QqLcZdd/yRYeHQ6CSHNVwJ
UqEEJx9I8OrN2gBTr92cyZFY6XLVnlICeqJCAf1FEJjAlFB0rp+jxVWv1JK920if
RC57QtUvP8XlcHWBIx0lU/mxWLBj/wmNl5Pr6oTqyY+Ta0TsRpsluXHFiIVl5t4l
untF/1Pp+wimw0lwkKk2kndxqssyolXg/3R7C/0Mdljz3cJNTSMp6Ow6s1NFn3ar
2Q6fYAlFN4V9W7qY71pc20Cjx/XUpFKpGAZCT+oCJ7m26lektpeodKbqIMephl5M
j7MY3yZKOFxp8+BXh5QeqGarSDO4S69sjFUnqikKXWo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:38 2025 by rpki-client