Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F553878513C11F0BB0FC5A7DAE4EC9C.roa
File: 7F553878513C11F0BB0FC5A7DAE4EC9C.roa (raw, json)
Hash identifier: FKvp35tGhdF+kb0w5t7E9K/SBrT6pypqpa2tzjzwRkQ=
Subject key identifier: AE:1C:51:DF:49:9E:1F:A7:46:25:B4:ED:F2:C8:34:F2:57:94:FE:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0188B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F553878513C11F0BB0FC5A7DAE4EC9C.roa
Signing time: Tue 24 Jun 2025 20:47:53 +0000
ROA not before: Tue 24 Jun 2025 20:47:48 +0000
ROA not after: Fri 15 Aug 2025 20:47:48 +0000
asID: 138915
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100536 (0x188b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 20:47:48 2025 GMT
Not After : Aug 15 20:47:48 2025 GMT
Subject: CN=685b0ef9-4043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:04:4d:cc:dc:38:18:65:96:46:7a:47:13:
84:74:45:08:7d:90:c9:4b:ef:6f:b1:92:d8:58:e4:
ec:63:46:a3:32:39:90:5b:a7:86:29:71:c5:ce:76:
01:e9:c3:96:f2:62:e6:b2:27:03:fc:a0:9d:08:66:
05:66:7c:5a:2a:8c:12:42:a8:2c:6c:18:3a:8a:60:
ee:d5:25:81:4c:26:a1:8c:ee:f6:c4:b2:3c:fa:5b:
38:a3:b1:4f:84:09:33:46:af:d5:41:6e:1f:d1:e4:
32:18:39:2f:9b:5b:29:a7:ba:d9:8a:1d:a0:48:97:
cb:b1:47:dc:e2:fc:62:aa:e0:de:ff:e8:52:0d:80:
14:58:b2:bf:7b:ba:41:66:76:db:0a:3c:c8:87:33:
29:4c:cd:b1:3b:36:ec:01:d6:8b:f9:66:08:b1:0a:
58:1f:a4:7d:84:27:01:0d:4e:bf:b6:12:21:fe:2c:
9f:6d:b0:08:b8:6c:c3:9a:07:21:7a:7e:c5:72:b5:
9b:a2:30:db:29:d4:15:31:97:d6:0d:86:bd:f4:cb:
e6:03:f2:6c:29:8c:fb:98:be:75:2f:67:78:d4:b0:
96:7a:f1:d4:c5:63:76:2f:a6:08:d2:98:63:f2:e2:
1d:10:ac:1d:18:44:29:07:ba:70:9d:13:54:e0:49:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:51:DF:49:9E:1F:A7:46:25:B4:ED:F2:C8:34:F2:57:94:FE:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F553878513C11F0BB0FC5A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.138.255
Signature Algorithm: sha256WithRSAEncryption
0d:4e:3b:71:41:7f:d7:b5:fb:27:0a:98:42:38:14:49:fd:da:
5a:a2:1a:1f:20:17:70:c6:76:1c:7b:13:63:d8:34:2f:be:80:
83:36:a0:f0:72:e6:32:12:e2:85:ab:1e:99:8e:16:84:20:0b:
fb:ec:2b:20:a7:6f:4a:ab:46:ce:84:87:4c:e3:d7:8d:fa:de:
1a:eb:ca:cf:85:79:78:ac:d8:1f:15:16:0e:cd:6b:81:46:51:
ba:10:6b:60:8c:eb:bc:b8:9c:de:67:bd:e9:0b:8e:39:12:0b:
59:4c:e4:57:be:82:13:a3:da:8c:30:d2:08:9e:08:3d:6e:2e:
28:94:b8:23:7a:a9:2c:e2:f7:4c:f4:71:ec:6e:65:c7:29:37:
03:56:39:40:4e:3c:40:35:e7:8e:2e:26:83:81:78:10:36:4c:
54:bb:fe:73:4f:99:b4:45:c7:94:02:8f:10:01:a9:62:5f:04:
a9:ba:ea:d7:40:d3:92:9b:16:d5:4a:aa:7c:a9:a2:16:8b:01:
1c:77:33:7c:ac:52:38:5a:bd:12:dc:1f:db:b8:6c:ec:5c:be:
42:26:4c:63:57:3a:f8:cb:28:cc:6d:c7:bd:eb:d4:10:4e:63:
89:92:20:9b:dd:a2:cd:9f:ba:ff:04:e7:79:be:0d:b1:c2:63:
20:4e:bb:90
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYi4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI0MjA0NzQ4WhcNMjUwODE1MjA0NzQ4WjAYMRYw
FAYDVQQDEw02ODViMGVmOS00MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7UIETczcOBhllkZ6RxOEdEUIfZDJS+9vsZLYWOTsY0ajMjmQW6eGKXHF
znYB6cOW8mLmsicD/KCdCGYFZnxaKowSQqgsbBg6imDu1SWBTCahjO72xLI8+ls4
o7FPhAkzRq/VQW4f0eQyGDkvm1spp7rZih2gSJfLsUfc4vxiquDe/+hSDYAUWLK/
e7pBZnbbCjzIhzMpTM2xOzbsAdaL+WYIsQpYH6R9hCcBDU6/thIh/iyfbbAIuGzD
mgchen7FcrWbojDbKdQVMZfWDYa99MvmA/JsKYz7mL51L2d41LCWevHUxWN2L6YI
0phj8uIdEKwdGEQpB7pwnRNU4EmsdQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFK4c
Ud9Jnh+nRiW07fLINPJXlP77MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RjU1Mzg3ODUxM0MxMUYwQkIwRkM1QTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeazYADBACazYowDQYJ
KoZIhvcNAQELBQADggEBAA1OO3FBf9e1+ycKmEI4FEn92lqiGh8gF3DGdhx7E2PY
NC++gIM2oPBy5jIS4oWrHpmOFoQgC/vsKyCnb0qrRs6Eh0zj14363hrrys+FeXis
2B8VFg7Na4FGUboQa2CM67y4nN5nvekLjjkSC1lM5Fe+ghOj2oww0gieCD1uLiiU
uCN6qSzi90z0cexuZccpNwNWOUBOPEA1544uJoOBeBA2TFS7/nNPmbRFx5QCjxAB
qWJfBKm66tdA05KbFtVKqnypohaLARx3M3ysUjhavRLcH9u4bOxcvkImTGNXOvjL
KMxtx73r1BBOY4mSIJvdos2fuv8E53m+DbHCYyBOu5A=
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:39:37 2025 by rpki-client