Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76594EEC7E9311F0B9C82479DAE4EC9C.roa
File: 76594EEC7E9311F0B9C82479DAE4EC9C.roa (raw, json)
Hash identifier: 8u2iZBhBrPHqSBvgVi+ecUJmt/xhmWftAbZlu9OXVsM=
Subject key identifier: 4D:2B:65:FC:3C:49:71:D3:6B:DC:1E:60:5A:B0:D3:A4:5C:A8:6C:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76594EEC7E9311F0B9C82479DAE4EC9C.roa
Signing time: Thu 21 Aug 2025 13:33:46 +0000
ROA not before: Thu 21 Aug 2025 13:33:41 +0000
ROA not after: Thu 01 Aug 2030 13:33:41 +0000
asID: 17561
IP address blocks: 154.223.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103286 (0x19376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 13:33:41 2025 GMT
Not After : Aug 1 13:33:41 2030 GMT
Subject: CN=68a7203a-fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:55:5e:74:b8:ac:2b:e5:39:c9:de:d4:84:
c4:d3:fd:a7:35:bd:4f:8f:b6:35:ee:b1:6a:84:10:
94:48:ac:28:e3:d0:07:00:4a:6e:1a:3e:a5:38:b3:
76:f0:0c:bd:84:b1:21:ac:9d:f1:6e:e7:b5:64:be:
e0:d3:6a:0f:67:e0:93:d1:d8:05:fa:55:34:ae:d3:
f1:0c:ff:84:5e:bc:8e:5b:b7:1b:cb:20:c0:85:96:
d4:da:8d:04:6b:d2:e2:e1:c4:2b:61:c4:96:fd:3f:
1e:13:f7:75:c1:3b:d7:c5:f6:a1:04:1c:19:4e:83:
df:40:5f:9a:eb:ed:29:6d:40:43:66:be:c7:6b:1d:
f8:c3:c3:2f:26:34:f5:d3:86:30:db:1e:85:25:63:
3c:91:49:99:69:a3:12:52:e4:9e:87:2f:e2:7d:87:
11:96:56:49:28:76:33:e3:96:a9:4b:4e:74:9c:42:
0b:db:b0:05:40:01:9e:19:32:c5:9b:c7:ec:e0:23:
e3:62:26:d1:63:3f:5b:64:a6:b3:7d:f8:29:1b:2f:
e8:f2:18:f9:6a:3a:53:96:74:7b:c5:87:5f:8c:5d:
0c:14:b8:8d:d5:75:ef:54:bf:26:a8:99:c7:d8:b5:
b9:64:f8:6d:14:0a:57:94:09:16:ff:92:07:43:fe:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:65:FC:3C:49:71:D3:6B:DC:1E:60:5A:B0:D3:A4:5C:A8:6C:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76594EEC7E9311F0B9C82479DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:89:6a:b7:88:29:c0:d6:94:e1:03:89:c5:57:7f:cd:70:fe:
ee:5d:49:be:bc:ff:2b:63:47:22:11:24:40:fa:76:47:8e:23:
04:b3:06:e8:ff:9a:51:15:9c:fc:61:50:cd:2b:e4:5c:3c:a1:
57:1c:d7:4d:22:70:aa:81:b8:ad:5d:c9:9b:12:b8:25:a1:50:
4d:9d:6f:4b:48:d8:bc:8f:18:b8:61:15:9c:46:45:87:1c:60:
fe:25:19:f8:a1:a2:9b:11:65:ef:7d:fb:16:53:5b:04:b1:04:
1c:f1:f1:d4:29:6a:d6:e6:2d:ab:0d:52:b7:0b:84:18:0d:d7:
d1:7f:4a:3b:1b:2e:6b:3e:8c:ab:89:34:a9:ff:b2:51:7b:4b:
75:43:88:ed:db:c8:65:94:cb:71:aa:2d:f3:5e:3e:32:03:87:
08:6f:fe:21:1f:3f:53:34:eb:28:43:64:b2:f9:dd:97:06:80:
24:3b:fb:f8:68:f4:c2:be:4a:14:e9:71:64:59:ea:18:1f:4d:
2f:a3:7e:9e:e9:d5:51:77:5d:7f:ee:06:e9:a5:59:a1:7e:9a:
6b:e4:e9:4f:47:51:b8:20:e9:b9:ce:0d:e4:ae:72:a9:2a:87:
a1:89:21:23:80:70:ce:f6:76:51:f6:ed:c1:2d:f0:c7:60:05:
c1:2d:4e:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAZN2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIxMTMzMzQxWhcNMzAwODAxMTMzMzQxWjAYMRYw
FAYDVQQDEw02OGE3MjAzYS1mYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA761VXnS4rCvlOcne1ITE0/2nNb1Pj7Y17rFqhBCUSKwo49AHAEpuGj6l
OLN28Ay9hLEhrJ3xbue1ZL7g02oPZ+CT0dgF+lU0rtPxDP+EXryOW7cbyyDAhZbU
2o0Ea9Li4cQrYcSW/T8eE/d1wTvXxfahBBwZToPfQF+a6+0pbUBDZr7Hax34w8Mv
JjT104Yw2x6FJWM8kUmZaaMSUuSehy/ifYcRllZJKHYz45apS050nEIL27AFQAGe
GTLFm8fs4CPjYibRYz9bZKazffgpGy/o8hj5ajpTlnR7xYdfjF0MFLiN1XXvVL8m
qJnH2LW5ZPhtFApXlAkW/5IHQ/6o2wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE0r
Zfw8SXHTa9weYFqw06RcqGziMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NjU5NEVFQzdFOTMxMUYwQjlDODI0NzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmt8wDQYJKoZIhvcNAQEL
BQADggEBAJ2JareIKcDWlOEDicVXf81w/u5dSb68/ytjRyIRJED6dkeOIwSzBuj/
mlEVnPxhUM0r5Fw8oVcc100icKqBuK1dyZsSuCWhUE2db0tI2LyPGLhhFZxGRYcc
YP4lGfihopsRZe99+xZTWwSxBBzx8dQpatbmLasNUrcLhBgN19F/SjsbLms+jKuJ
NKn/slF7S3VDiO3byGWUy3GqLfNePjIDhwhv/iEfP1M06yhDZLL53ZcGgCQ7+/ho
9MK+ShTpcWRZ6hgfTS+jfp7p1VF3XX/uBumlWaF+mmvk6U9HUbgg6bnODeSucqkq
h6GJISOAcM72dlH27cEt8MdgBcEtTjI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:21:44 2025 by rpki-client