Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D896268736411F0BF605880DAE4EC9C.roa
File: 7D896268736411F0BF605880DAE4EC9C.roa (raw, json)
Hash identifier: eYpc8rRrqeNDJ4rYqyA/UAiLCzkSQOWMWjlSCts4I+w=
Subject key identifier: 5A:31:33:6B:57:E7:18:E9:0D:B8:6B:83:E8:D5:B6:85:6D:32:83:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D896268736411F0BF605880DAE4EC9C.roa
Signing time: Thu 07 Aug 2025 07:59:49 +0000
ROA not before: Thu 07 Aug 2025 07:59:44 +0000
ROA not after: Wed 10 Sep 2025 07:59:44 +0000
asID: 203020
IP address blocks: 154.217.52.0/24 maxlen: 24
154.217.53.0/24 maxlen: 24
154.217.54.0/24 maxlen: 24
154.217.55.0/24 maxlen: 24
154.217.56.0/24 maxlen: 24
154.217.57.0/24 maxlen: 24
154.217.58.0/24 maxlen: 24
154.217.59.0/24 maxlen: 24
154.217.60.0/24 maxlen: 24
154.217.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102608 (0x190d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:59:44 2025 GMT
Not After : Sep 10 07:59:44 2025 GMT
Subject: CN=68945cf5-38a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:96:94:51:b2:9a:76:3a:ef:f9:fd:10:a9:
16:7d:5e:1c:d3:7a:8b:f2:55:1a:a5:f2:b0:4e:8f:
26:60:41:d8:38:e4:f4:e9:33:f5:cf:6c:73:b2:ff:
3d:cb:9e:67:54:e5:be:3b:94:c5:17:43:bc:97:c1:
a7:4c:8d:3e:40:3d:db:a5:56:37:9c:79:50:a1:28:
50:0b:c7:5d:c3:33:33:24:a3:72:59:57:82:76:09:
b4:c3:cc:08:b3:bf:4c:c5:c5:ad:21:7a:b3:4a:44:
f3:36:1f:23:53:d4:04:14:60:d0:2a:61:76:c5:29:
dd:f7:76:33:39:c7:33:fa:fc:67:a5:1e:6d:16:b0:
e9:6a:88:1e:c5:6e:eb:7e:4e:75:a9:ee:99:ae:22:
f8:8a:ae:29:07:6e:bc:1b:8e:47:bb:db:53:8c:8a:
95:b6:fe:c7:85:64:cd:96:4b:c9:82:83:77:ad:ab:
6d:a0:fd:0a:ac:fb:f3:33:18:6d:fb:74:b8:1b:2f:
5b:fd:a4:7a:ea:bc:db:90:7f:12:a4:d5:6c:80:fe:
90:e2:8c:66:06:f3:79:81:c8:c1:a7:c6:aa:d6:c0:
9a:8a:e3:2a:7b:4c:bc:d0:e9:0a:7b:98:e6:91:ff:
17:71:27:1c:3f:fe:48:84:cc:33:f3:c7:b1:cc:af:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:33:6B:57:E7:18:E9:0D:B8:6B:83:E8:D5:B6:85:6D:32:83:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D896268736411F0BF605880DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.52.0-154.217.61.255
Signature Algorithm: sha256WithRSAEncryption
be:3d:de:59:2b:23:e4:01:35:35:9a:5b:eb:07:63:77:21:71:
4e:24:66:03:73:60:1b:30:07:a8:1b:c8:16:eb:9f:94:7f:4a:
ae:09:5b:21:a7:10:ff:bb:33:08:2f:bf:25:73:d3:6c:4a:ec:
58:76:e8:ff:b1:81:e7:dd:a4:82:c1:26:bd:9b:28:0e:e9:38:
4d:e3:08:60:e4:b7:30:41:1c:1b:1e:45:00:65:c1:3a:33:eb:
8f:63:dd:bb:5b:e0:5b:3c:55:02:27:65:43:5a:6a:63:85:d1:
86:69:c8:4e:f6:3e:45:f9:af:ba:98:c4:ce:0f:7b:e9:b6:47:
c7:a0:8a:ad:cd:c4:a0:9f:fb:51:4f:4b:ce:ff:8b:fb:24:e8:
ff:b8:12:02:7e:47:21:63:88:1b:11:76:b9:1e:4a:01:19:38:
86:52:eb:e4:da:13:bc:96:bb:aa:03:aa:0b:d8:81:8b:25:e3:
ed:9c:a5:8c:d4:d0:82:35:8a:28:4c:37:a3:9c:4d:ed:88:ad:
d3:3a:32:74:8b:4e:dc:d2:38:89:d6:dd:b4:69:81:51:95:29:
c0:c8:5a:5d:71:06:7a:27:e8:0c:b9:b6:1f:f0:ff:fe:5a:7c:
00:fc:fe:82:c7:c0:70:ae:33:29:d9:e9:9f:ba:d4:e8:67:05:
7c:da:f4:53
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAZDQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA3MDc1OTQ0WhcNMjUwOTEwMDc1OTQ0WjAYMRYw
FAYDVQQDEw02ODk0NWNmNS0zOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIOWlFGymnY67/n9EKkWfV4c03qL8lUapfKwTo8mYEHYOOT06TP1z2xz
sv89y55nVOW+O5TFF0O8l8GnTI0+QD3bpVY3nHlQoShQC8ddwzMzJKNyWVeCdgm0
w8wIs79MxcWtIXqzSkTzNh8jU9QEFGDQKmF2xSnd93YzOccz+vxnpR5tFrDpaoge
xW7rfk51qe6ZriL4iq4pB268G45Hu9tTjIqVtv7HhWTNlkvJgoN3rattoP0KrPvz
Mxht+3S4Gy9b/aR66rzbkH8SpNVsgP6Q4oxmBvN5gcjBp8aq1sCaiuMqe0y80OkK
e5jmkf8XcSccP/5IhMwz88exzK8C4wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFox
M2tX5xjpDbhrg+jVtoVtMoPTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDg5NjI2ODczNjQxMUYwQkY2MDU4ODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKa2TQDBAGa2TwwDQYJ
KoZIhvcNAQELBQADggEBAL493lkrI+QBNTWaW+sHY3chcU4kZgNzYBswB6gbyBbr
n5R/Sq4JWyGnEP+7MwgvvyVz02xK7Fh26P+xgefdpILBJr2bKA7pOE3jCGDktzBB
HBseRQBlwToz649j3btb4Fs8VQInZUNaamOF0YZpyE72PkX5r7qYxM4Pe+m2R8eg
iq3NxKCf+1FPS87/i/sk6P+4EgJ+RyFjiBsRdrkeSgEZOIZS6+TaE7yWu6oDqgvY
gYsl4+2cpYzU0II1iihMN6OcTe2IrdM6MnSLTtzSOInW3bRpgVGVKcDIWl1xBnon
6Ay5th/w//5afAD8/oLHwHCuMynZ6Z+61OhnBXza9FM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:38 2025 by rpki-client