Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76EBA5CA4B8B11F0A0FA9198DAE4EC9C.roa
File: 76EBA5CA4B8B11F0A0FA9198DAE4EC9C.roa (raw, json)
Hash identifier: pFBUeIOQyLLb4H3bEu7gXHXoYXVpWCtEZvGtUtPn/bc=
Subject key identifier: F5:35:2D:EF:D0:8C:F1:71:7C:7B:99:09:5A:31:01:02:6D:38:98:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01872F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76EBA5CA4B8B11F0A0FA9198DAE4EC9C.roa
Signing time: Tue 17 Jun 2025 14:58:02 +0000
ROA not before: Tue 17 Jun 2025 14:57:53 +0000
ROA not after: Mon 04 Aug 2025 14:57:53 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100143 (0x1872f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 14:57:53 2025 GMT
Not After : Aug 4 14:57:53 2025 GMT
Subject: CN=6851827a-f1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:73:8b:4d:18:b2:2d:b2:c9:22:75:c0:09:
59:8a:a0:53:94:1d:c0:7a:ad:b2:77:b1:8b:91:10:
1f:9c:c9:99:cf:6a:72:3d:53:fe:10:10:80:90:17:
4c:a2:37:7f:a0:41:f9:d2:66:57:96:f3:45:c4:29:
41:72:27:7d:27:d8:45:de:df:c8:ff:9b:de:93:8d:
67:ec:9b:f5:d1:7d:b6:22:df:ed:a9:b9:78:ce:fc:
76:e2:70:ce:f0:a5:90:a3:ce:b5:03:7c:97:06:d9:
c4:93:df:0f:97:89:22:a9:80:db:19:dd:9d:2c:42:
7c:f6:f2:9d:12:fc:82:84:9b:88:dc:b7:59:61:f2:
bc:8b:3f:c2:ec:b3:c4:5c:b2:97:52:be:52:85:9b:
a1:e8:29:25:5a:d3:1a:a5:b5:40:9e:2b:00:1f:09:
ee:6d:e4:00:e6:7c:9e:4b:58:66:34:69:95:a6:79:
6c:6d:ec:b3:64:c5:95:ec:fc:3d:01:ab:1c:d5:6a:
b3:f6:a9:90:b2:f8:cd:76:a9:92:1c:ed:d1:62:93:
7e:1a:ea:09:48:e7:53:dd:d1:07:2c:e8:0e:ec:a6:
5c:4d:7d:fe:fe:63:8a:3c:f5:d9:d5:78:eb:af:9f:
57:e4:5e:7f:c2:cc:3d:61:c2:de:77:28:32:33:6d:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:2D:EF:D0:8C:F1:71:7C:7B:99:09:5A:31:01:02:6D:38:98:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76EBA5CA4B8B11F0A0FA9198DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
36:d4:e7:26:ce:9f:c5:f1:9a:b3:3e:67:5d:a1:17:9f:38:70:
ae:88:dd:ef:7a:e2:e0:fc:a3:86:e0:62:48:f0:f0:60:77:37:
16:9e:63:4e:76:88:62:81:00:5e:e1:6c:97:d8:f5:dc:24:7c:
ef:0b:91:f2:0e:17:66:c7:fc:43:74:53:99:f6:28:dd:37:42:
d2:fb:85:11:5f:e8:17:d0:9a:7f:78:ac:8f:f2:76:18:d7:70:
87:72:81:fd:09:d1:68:4d:a5:6e:94:7b:1f:fb:67:5d:2d:56:
ea:b1:6c:61:44:06:32:2e:70:ee:1d:7f:3d:18:3a:97:5c:62:
a4:8b:d8:b4:97:8b:eb:e2:22:38:24:11:c3:aa:a1:19:94:35:
a6:b1:82:0d:ef:20:4d:56:8b:1c:bb:dd:da:2f:9e:20:0d:a6:
30:ef:37:30:04:dc:06:f7:d2:d4:b7:d6:42:51:77:fc:ef:21:
78:9d:2c:77:be:44:dc:83:7c:bb:50:e5:18:e5:2c:80:7a:4c:
fc:da:fb:7b:f2:3c:2c:3c:f7:57:ea:38:ec:1b:38:c9:d5:bb:
2b:6f:f6:f9:c1:f0:a2:d1:59:23:ca:92:2a:96:f7:4d:9e:60:
76:77:11:f5:cc:b6:e6:19:70:12:49:d8:e1:c8:e9:b2:dd:a1:
bf:83:a6:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYcvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjE3MTQ1NzUzWhcNMjUwODA0MTQ1NzUzWjAYMRYw
FAYDVQQDEw02ODUxODI3YS1mMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvEtzi00Ysi2yySJ1wAlZiqBTlB3Aeq2yd7GLkRAfnMmZz2pyPVP+EBCA
kBdMojd/oEH50mZXlvNFxClBcid9J9hF3t/I/5vek41n7Jv10X22It/tqbl4zvx2
4nDO8KWQo861A3yXBtnEk98Pl4kiqYDbGd2dLEJ89vKdEvyChJuI3LdZYfK8iz/C
7LPEXLKXUr5ShZuh6CklWtMapbVAnisAHwnubeQA5nyeS1hmNGmVpnlsbeyzZMWV
7Pw9Aasc1Wqz9qmQsvjNdqmSHO3RYpN+GuoJSOdT3dEHLOgO7KZcTX3+/mOKPPXZ
1Xjrr59X5F5/wsw9YcLedygyM20KxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPU1
Le/QjPFxfHuZCVoxAQJtOJj1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NkVCQTVDQTRCOEIxMUYwQTBGQTkxOThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQA21Ocmzp/F8ZqzPmddoRefOHCuiN3veuLg/KOG4GJI8PBgdzcWnmNO
dohigQBe4WyX2PXcJHzvC5HyDhdmx/xDdFOZ9ijdN0LS+4URX+gX0Jp/eKyP8nYY
13CHcoH9CdFoTaVulHsf+2ddLVbqsWxhRAYyLnDuHX89GDqXXGKki9i0l4vr4iI4
JBHDqqEZlDWmsYIN7yBNVoscu93aL54gDaYw7zcwBNwG99LUt9ZCUXf87yF4nSx3
vkTcg3y7UOUY5SyAekz82vt78jwsPPdX6jjsGzjJ1bsrb/b5wfCi0VkjypIqlvdN
nmB2dxH1zLbmGXASSdjhyOmy3aG/g6b3
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:14:31 2025 by rpki-client