Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAA445A754511F0952E32B4DAE4EC9C.roa
File: BEAA445A754511F0952E32B4DAE4EC9C.roa (raw, json)
Hash identifier: sTjSH+k064gogzLsEQHy29l1RAcXeOtKehTh+0Kvca0=
Subject key identifier: 81:86:95:EF:42:AB:EA:C4:56:73:BA:00:BF:26:6B:E2:77:5E:E4:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019141
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAA445A754511F0952E32B4DAE4EC9C.roa
Signing time: Sat 09 Aug 2025 17:24:46 +0000
ROA not before: Sat 09 Aug 2025 17:24:41 +0000
ROA not after: Sun 13 Sep 2026 17:24:41 +0000
asID: 137263
IP address blocks: 154.81.10.0/24 maxlen: 24
154.86.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102721 (0x19141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 17:24:41 2025 GMT
Not After : Sep 13 17:24:41 2026 GMT
Subject: CN=6897845e-1bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:4a:d4:c4:dd:ad:1e:b5:a7:bb:1c:4f:5c:
20:43:ff:7c:7c:e8:ec:be:46:98:f1:d7:80:c8:76:
41:5c:a1:87:b6:49:0f:25:ef:4f:14:9d:40:6b:16:
b4:1e:93:df:45:01:1b:f3:ae:5b:08:ed:89:a8:50:
81:65:14:4f:08:b1:8f:f9:66:d0:cd:14:8a:0a:65:
06:db:49:b6:a6:f5:3c:87:d0:e9:ab:90:f5:1b:ef:
40:3a:94:e1:f7:ce:5b:52:5c:14:fd:e5:7d:34:02:
c8:66:08:d5:67:44:cb:09:70:f5:b9:00:a4:53:45:
6f:b3:08:65:d9:df:a2:22:62:27:70:ab:b4:12:81:
44:98:45:85:a3:46:32:d7:c2:04:59:50:15:a3:ff:
75:49:0c:ad:06:50:43:d8:48:e2:08:7d:aa:4c:9b:
28:86:16:aa:61:a6:de:de:25:12:66:ca:72:20:c6:
ea:2d:3b:9c:51:73:a6:e8:7e:6f:e6:07:04:90:20:
95:90:b0:c8:c0:aa:47:22:4b:bb:40:a5:39:b7:46:
54:4c:f5:79:1e:4a:84:84:88:0a:f9:87:86:d0:73:
9a:d6:c4:e6:05:81:b6:dd:14:a0:9b:85:8d:bf:40:
e3:af:b0:91:8c:b1:af:ba:15:3c:df:5b:72:fd:1b:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:95:EF:42:AB:EA:C4:56:73:BA:00:BF:26:6B:E2:77:5E:E4:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAA445A754511F0952E32B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.10.0/24
154.86.4.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f3:6a:b5:91:bc:55:f2:cd:4c:77:dd:f8:07:f0:fd:5f:a3:
a6:c4:5b:32:ba:65:4b:d7:0c:54:61:a7:ec:04:05:e4:ca:4b:
60:31:56:33:63:ed:92:9f:c7:d9:c8:ac:96:34:ba:c1:80:75:
9e:bd:cb:89:ed:ae:64:06:4f:c0:fc:ed:6a:b8:a7:d4:b7:c3:
b6:30:69:4f:78:df:ab:58:9c:3d:27:81:45:75:42:a2:a4:bc:
7c:10:ea:3a:11:a2:ce:fe:9f:6c:41:1f:15:cb:40:4a:f4:92:
9e:7c:f1:9f:1c:65:7e:f8:c5:60:a3:2a:0c:86:c1:a9:a6:7d:
24:e7:26:ba:64:27:e0:70:45:c4:45:a4:c9:1f:e3:b0:c9:d6:
6c:a4:98:06:41:3f:0a:32:b2:e0:16:47:4f:be:7b:0e:5f:4e:
e6:80:8e:d3:46:9c:08:cf:73:39:8c:98:14:a1:61:4f:70:ea:
85:f9:18:55:fc:38:70:50:ad:ee:13:50:e4:99:10:f8:ec:57:
fb:92:82:0f:bb:a6:8c:8b:c4:26:6e:f0:c8:9d:d0:d1:c4:9c:
7f:b0:81:d5:b8:42:7d:c9:56:6e:ec:4a:75:33:2c:31:54:aa:
1a:c5:89:c4:f1:69:10:8e:88:31:b1:fd:8a:af:6e:a5:a0:de:
b9:52:52:da
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZFBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA5MTcyNDQxWhcNMjYwOTEzMTcyNDQxWjAYMRYw
FAYDVQQDEw02ODk3ODQ1ZS0xYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr0JK1MTdrR61p7scT1wgQ/98fOjsvkaY8deAyHZBXKGHtkkPJe9PFJ1A
axa0HpPfRQEb865bCO2JqFCBZRRPCLGP+WbQzRSKCmUG20m2pvU8h9Dpq5D1G+9A
OpTh985bUlwU/eV9NALIZgjVZ0TLCXD1uQCkU0Vvswhl2d+iImIncKu0EoFEmEWF
o0Yy18IEWVAVo/91SQytBlBD2EjiCH2qTJsohhaqYabe3iUSZspyIMbqLTucUXOm
6H5v5gcEkCCVkLDIwKpHIku7QKU5t0ZUTPV5HkqEhIgK+YeG0HOa1sTmBYG23RSg
m4WNv0Djr7CRjLGvuhU831ty/Rt5VwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIGG
le9Cq+rEVnO6AL8ma+J3XuTMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRUFBNDQ1QTc1NDUxMUYwOTUyRTMyQjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlEKAwQBmlYEMA0GCSqG
SIb3DQEBCwUAA4IBAQAS82q1kbxV8s1Md934B/D9X6OmxFsyumVL1wxUYafsBAXk
yktgMVYzY+2Sn8fZyKyWNLrBgHWevcuJ7a5kBk/A/O1quKfUt8O2MGlPeN+rWJw9
J4FFdUKipLx8EOo6EaLO/p9sQR8Vy0BK9JKefPGfHGV++MVgoyoMhsGppn0k5ya6
ZCfgcEXERaTJH+OwydZspJgGQT8KMrLgFkdPvnsOX07mgI7TRpwIz3M5jJgUoWFP
cOqF+RhV/DhwUK3uE1DkmRD47Ff7koIPu6aMi8QmbvDIndDRxJx/sIHVuEJ9yVZu
7Ep1MywxVKoaxYnE8WkQjogxsf2Kr26loN65UlLa
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:10 2025 by rpki-client