Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A10356E6781D11F0887281C7DAE4EC9C.roa
File: A10356E6781D11F0887281C7DAE4EC9C.roa (raw, json)
Hash identifier: aRKBNByW54BoJWZPF+3YsIMByAhISh5O+2Fg+bDNxA4=
Subject key identifier: 94:4B:EC:8E:CA:15:7E:23:ED:4C:D7:C4:18:06:B8:D4:62:57:C9:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019196
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A10356E6781D11F0887281C7DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 08:15:10 +0000
ROA not before: Wed 13 Aug 2025 08:15:04 +0000
ROA not after: Mon 15 Sep 2025 08:15:04 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102806 (0x19196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 08:15:04 2025 GMT
Not After : Sep 15 08:15:04 2025 GMT
Subject: CN=689c498e-70d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:db:b7:e5:5b:ae:39:fd:54:f8:22:aa:3c:
07:02:08:b3:a8:8b:91:d6:55:5e:22:62:4b:71:1a:
af:3d:ea:6c:2a:04:06:f1:3d:8e:08:0f:01:3b:98:
10:51:4f:e1:a1:e8:0e:42:1d:a4:bf:21:46:55:9f:
c1:ee:37:0a:c9:8e:25:b0:48:4a:b4:55:dc:9b:3d:
3f:c0:41:c5:10:20:54:f2:8a:53:25:54:6c:26:47:
16:f8:8c:ce:a4:f1:af:f9:dc:c3:35:e9:51:cf:ae:
d1:35:9d:05:01:a8:91:d9:b6:30:19:ec:e5:4b:c3:
57:44:b7:8b:06:82:14:54:ad:73:c1:5e:50:37:27:
70:f7:4c:66:ed:1f:45:cb:c0:ea:a0:1a:74:25:b5:
7b:2b:ae:76:25:86:fd:12:a7:9e:20:a0:0b:fc:9f:
0a:d5:d2:8f:fe:d9:97:e1:84:b8:ef:ed:c6:13:ca:
91:24:8a:2d:f0:06:a0:4b:5d:71:66:6f:91:01:ab:
f5:de:94:24:8c:c3:ed:f4:af:29:2c:49:83:5d:31:
77:f0:ad:4d:a8:fa:0a:97:fb:35:96:02:c8:28:ee:
c4:b1:32:f7:20:c4:2f:c5:1c:ec:5a:65:b6:14:23:
44:36:c3:ba:47:9d:45:b1:9f:d7:01:aa:9b:37:1f:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:EC:8E:CA:15:7E:23:ED:4C:D7:C4:18:06:B8:D4:62:57:C9:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A10356E6781D11F0887281C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e2:bf:5f:26:8c:39:63:b0:92:ca:b4:75:28:5a:fb:29:a3:
bc:ed:35:df:b6:65:99:3d:4f:87:58:83:fb:42:d3:a0:2a:33:
54:c9:31:89:16:94:34:ca:e0:17:61:01:ca:39:1f:30:32:54:
07:2a:a5:8c:0a:25:ad:3a:4c:5b:7e:fd:74:ae:c0:f2:45:20:
78:76:07:2e:fc:ea:6d:31:5d:6e:11:01:d3:9a:c3:a0:bb:d0:
d9:8a:d9:9e:36:d6:f5:9c:ed:c7:8f:b5:7e:60:4b:ef:66:4a:
4b:0d:7b:00:90:8f:1f:98:9a:77:64:e6:4b:dc:70:15:cb:89:
10:1b:90:fd:a4:1a:8a:e1:5d:ca:bc:86:f9:d5:04:6a:1f:c8:
e7:92:a7:73:f1:85:f6:1e:23:f4:2a:a6:ac:a8:b6:d7:e8:5a:
e8:64:a6:ca:b3:e8:f5:88:94:41:4c:01:13:14:fd:26:ce:07:
b7:51:4a:c5:5b:b4:0e:1e:9f:6c:8f:c5:31:6a:02:0e:23:54:
16:38:bc:70:70:5c:cc:4b:1c:15:18:d2:97:e8:19:8c:df:2e:
ec:2e:aa:3c:3b:84:15:85:cf:be:0f:b2:5e:d4:5a:4f:57:40:
15:25:ef:e5:c3:aa:52:12:d3:93:c8:1c:78:11:93:5e:a4:ec:
03:e9:97:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZGWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODEzMDgxNTA0WhcNMjUwOTE1MDgxNTA0WjAYMRYw
FAYDVQQDEw02ODljNDk4ZS03MGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArzLbt+Vbrjn9VPgiqjwHAgizqIuR1lVeImJLcRqvPepsKgQG8T2OCA8B
O5gQUU/hoegOQh2kvyFGVZ/B7jcKyY4lsEhKtFXcmz0/wEHFECBU8opTJVRsJkcW
+IzOpPGv+dzDNelRz67RNZ0FAaiR2bYwGezlS8NXRLeLBoIUVK1zwV5QNydw90xm
7R9Fy8DqoBp0JbV7K652JYb9EqeeIKAL/J8K1dKP/tmX4YS47+3GE8qRJIot8Aag
S11xZm+RAav13pQkjMPt9K8pLEmDXTF38K1NqPoKl/s1lgLIKO7EsTL3IMQvxRzs
WmW2FCNENsO6R51FsZ/XAaqbNx+cawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJRL
7I7KFX4j7UzXxBgGuNRiV8nwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMTAzNTZFNjc4MUQxMUYwODg3MjgxQzdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2MMA0GCSqGSIb3DQEB
CwUAA4IBAQBB4r9fJow5Y7CSyrR1KFr7KaO87TXftmWZPU+HWIP7QtOgKjNUyTGJ
FpQ0yuAXYQHKOR8wMlQHKqWMCiWtOkxbfv10rsDyRSB4dgcu/OptMV1uEQHTmsOg
u9DZitmeNtb1nO3Hj7V+YEvvZkpLDXsAkI8fmJp3ZOZL3HAVy4kQG5D9pBqK4V3K
vIb51QRqH8jnkqdz8YX2HiP0KqasqLbX6FroZKbKs+j1iJRBTAETFP0mzge3UUrF
W7QOHp9sj8UxagIOI1QWOLxwcFzMSxwVGNKX6BmM3y7sLqo8O4QVhc++D7Je1FpP
V0AVJe/lw6pSEtOTyBx4EZNepOwD6ZeL
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:54 2025 by rpki-client