Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1AC7646542211F0A9ADA38CDAE4EC9C.roa
File: A1AC7646542211F0A9ADA38CDAE4EC9C.roa (raw, json)
Hash identifier: oJuz+cIcUDDMMhkZ8Dd8Rwuy7Lkl5pEI3u7eqfXRFQg=
Subject key identifier: 47:BB:F7:C7:84:E3:E6:DC:5D:E1:76:F5:09:69:1F:D9:DB:EF:6D:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018957
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1AC7646542211F0A9ADA38CDAE4EC9C.roa
Signing time: Sat 28 Jun 2025 13:20:17 +0000
ROA not before: Sat 28 Jun 2025 13:20:12 +0000
ROA not after: Tue 29 Jul 2025 13:20:12 +0000
asID: 214143
IP address blocks: 154.197.25.0/24 maxlen: 24
154.197.90.0/24 maxlen: 24
154.197.127.0/24 maxlen: 24
154.200.72.0/21 maxlen: 24
154.200.109.0/24 maxlen: 24
154.203.240.0/24 maxlen: 24
154.205.248.0/22 maxlen: 24
154.206.4.0/22 maxlen: 24
154.208.72.0/22 maxlen: 24
154.223.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100695 (0x18957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 13:20:12 2025 GMT
Not After : Jul 29 13:20:12 2025 GMT
Subject: CN=685fec11-d967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:7c:db:ea:df:9e:1a:5e:ae:e6:c3:04:71:
a3:18:d1:b2:b9:d9:ae:9a:e1:ef:0a:43:b0:4d:f1:
fd:a3:f6:17:5a:a9:69:3b:45:39:db:50:55:fd:e7:
0f:ad:96:3a:c0:f6:54:2e:1c:fb:39:fd:ca:67:f0:
17:ca:76:85:5a:3e:d3:df:95:6b:92:c3:9a:f4:0f:
73:98:18:87:9c:05:53:83:6d:f8:cb:42:42:66:10:
1a:88:0f:fe:b5:14:f0:b4:dd:b1:ab:d1:56:0b:54:
e3:af:08:e3:d5:e0:6d:3a:7a:d7:70:3f:47:ff:a7:
1a:81:57:88:a7:93:21:47:55:cb:6e:88:56:37:88:
4e:de:68:3c:c8:e5:11:4a:0e:d9:f5:63:f4:b0:80:
48:a3:8a:a9:a1:3f:97:12:90:38:fb:e9:31:7d:59:
e0:b5:e4:86:dc:61:b6:18:78:e8:55:81:05:de:e4:
e7:ab:cc:4f:37:a9:7a:fb:4c:d7:c4:27:61:88:fa:
95:d2:24:00:54:03:b4:01:0e:8a:f1:8b:7e:80:af:
af:4f:03:38:a2:24:58:ef:51:2d:6b:ce:4d:f3:ee:
66:15:d7:e2:c8:50:2c:47:76:da:1d:43:c1:cc:6f:
3a:8b:4f:f8:d2:ac:92:4a:13:5f:77:3e:b3:47:ff:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:F7:C7:84:E3:E6:DC:5D:E1:76:F5:09:69:1F:D9:DB:EF:6D:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1AC7646542211F0A9ADA38CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.25.0/24
154.197.90.0/24
154.197.127.0/24
154.200.72.0/21
154.200.109.0/24
154.203.240.0/24
154.205.248.0/22
154.206.4.0/22
154.208.72.0/22
154.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:11:f1:8d:b4:c0:f4:c1:7a:f5:2f:01:fb:c0:dc:4c:b4:a2:
63:80:cd:9e:9d:20:08:c7:63:f4:30:9d:d1:1f:e7:cd:23:ac:
6d:f1:56:b8:ae:d4:d1:36:b5:c3:04:89:db:63:ff:56:65:43:
be:bc:9a:c3:b2:6e:4a:95:88:a1:e4:73:9a:30:8b:81:74:f5:
4a:9f:3f:61:03:58:e1:06:48:35:ed:d6:f8:fa:4d:9d:db:6c:
84:b7:48:62:2c:8f:38:59:fb:7e:7f:b8:d7:3f:dd:bd:5e:5c:
a3:ac:f0:4a:b8:43:94:d8:0b:c8:30:da:b5:cf:ce:3e:59:6e:
28:bc:63:cd:f1:9b:ff:99:d8:d8:cf:06:34:2f:1c:99:44:82:
18:21:4b:b2:9f:df:1c:8f:90:c3:f8:38:83:73:01:03:12:9b:
f1:a0:29:42:89:f9:0f:d4:89:25:4f:b3:d9:95:0d:20:60:2e:
56:ad:1d:b8:c4:df:ac:5a:61:09:c0:b9:14:7b:6a:bb:69:56:
00:78:89:e3:b5:fe:92:1b:20:89:ef:01:ae:7c:64:7e:f1:a2:
06:fe:da:5c:4c:7d:7e:1e:4f:11:5d:71:0d:c3:45:af:2e:89:
96:2c:98:e2:9e:a8:69:02:c0:55:27:fe:71:a0:64:de:aa:fb:
e5:46:de:41
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAYlXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjI4MTMyMDEyWhcNMjUwNzI5MTMyMDEyWjAYMRYw
FAYDVQQDEw02ODVmZWMxMS1kOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwSB82+rfnhperubDBHGjGNGyudmumuHvCkOwTfH9o/YXWqlpO0U521BV
/ecPrZY6wPZULhz7Of3KZ/AXynaFWj7T35VrksOa9A9zmBiHnAVTg234y0JCZhAa
iA/+tRTwtN2xq9FWC1Tjrwjj1eBtOnrXcD9H/6cagVeIp5MhR1XLbohWN4hO3mg8
yOURSg7Z9WP0sIBIo4qpoT+XEpA4++kxfVngteSG3GG2GHjoVYEF3uTnq8xPN6l6
+0zXxCdhiPqV0iQAVAO0AQ6K8Yt+gK+vTwM4oiRY71Eta85N8+5mFdfiyFAsR3ba
HUPBzG86i0/40qySShNfdz6zR/8XaQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFEe7
98eE4+bcXeF29QlpH9nb721ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMUFDNzY0NjU0MjIxMUYwQTlBREEzOENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmsUZAwQAmsVaAwQAmsV/
AwQDmshIAwQAmshtAwQAmsvwAwQCms34AwQCms4EAwQCmtBIAwQDmt/oMA0GCSqG
SIb3DQEBCwUAA4IBAQChEfGNtMD0wXr1LwH7wNxMtKJjgM2enSAIx2P0MJ3RH+fN
I6xt8Va4rtTRNrXDBInbY/9WZUO+vJrDsm5KlYih5HOaMIuBdPVKnz9hA1jhBkg1
7db4+k2d22yEt0hiLI84Wft+f7jXP929XlyjrPBKuEOU2AvIMNq1z84+WW4ovGPN
8Zv/mdjYzwY0LxyZRIIYIUuyn98cj5DD+DiDcwEDEpvxoClCifkP1IklT7PZlQ0g
YC5WrR24xN+sWmEJwLkUe2q7aVYAeInjtf6SGyCJ7wGufGR+8aIG/tpcTH1+Hk8R
XXENw0WvLomWLJjinqhpAsBVJ/5xoGTeqvvlRt5B
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:51:03 2025 by rpki-client