Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18E3B2279A511F09447B7C3DAE4EC9C.roa
File: C18E3B2279A511F09447B7C3DAE4EC9C.roa (raw, json)
Hash identifier: OZzH+VYLj0ut7Z/Rmvx3JbTsRWwyHYnBnEcYz+LwaSk=
Subject key identifier: B4:E5:3C:BD:DF:17:9F:F3:C6:E3:CB:1A:A4:7E:36:DC:61:90:C9:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0191B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18E3B2279A511F09447B7C3DAE4EC9C.roa
Signing time: Fri 15 Aug 2025 07:02:08 +0000
ROA not before: Fri 15 Aug 2025 07:02:03 +0000
ROA not after: Thu 06 Aug 2026 07:02:03 +0000
asID: 137990
IP address blocks: 154.197.28.0/23 maxlen: 24
154.197.28.0/24 maxlen: 24
154.197.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102833 (0x191b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 15 07:02:03 2025 GMT
Not After : Aug 6 07:02:03 2026 GMT
Subject: CN=689edb6f-5bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:52:83:a2:64:07:a0:77:dd:e8:46:de:e3:
e7:7c:5d:08:1d:61:e1:06:c2:ba:77:c5:74:f6:7f:
a7:4a:f3:c1:8f:5f:56:2b:7a:1a:42:d8:66:29:a2:
a9:20:25:6e:88:cc:2c:9a:20:38:fa:df:c9:e7:ba:
3e:fc:92:b2:00:99:e8:3a:33:4a:c1:a8:f2:c3:15:
55:92:ed:d7:da:65:c5:3f:f8:d0:cd:ac:95:64:c3:
11:fc:82:f5:3a:b6:cf:6b:ad:66:43:df:5b:0f:a8:
60:41:17:43:6c:d3:7c:88:fe:ee:b8:85:ca:df:9f:
39:20:15:47:e3:87:74:92:e2:ee:56:cb:41:6c:7a:
03:f2:76:a3:06:3f:b0:a0:28:67:b9:62:5f:fe:5e:
c1:7f:c0:b5:82:b4:ec:97:f2:dc:0c:ca:18:29:cd:
cd:db:15:e4:55:11:31:64:0a:30:b9:8e:c8:9b:ab:
5b:14:b7:2c:77:92:a9:d5:91:38:2d:eb:63:1b:fe:
2c:d8:1b:9a:44:77:b4:6e:18:56:26:1e:66:43:f1:
c0:44:e0:6f:c4:e8:46:f6:e4:ff:9c:f5:23:fb:d9:
2a:b9:93:33:19:13:1f:f0:9f:4b:f8:be:5b:39:83:
02:cd:e0:82:d5:a1:12:34:73:ef:f5:d2:98:0b:6f:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:3C:BD:DF:17:9F:F3:C6:E3:CB:1A:A4:7E:36:DC:61:90:C9:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C18E3B2279A511F09447B7C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.28.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:3d:33:38:69:d7:2c:ad:b5:bf:3b:03:9b:83:52:c0:18:91:
28:5a:c2:20:3c:7d:98:02:d5:e7:cb:5a:02:fb:5b:7f:9e:92:
fb:a5:5b:83:fa:3a:6c:49:c5:ca:b6:1d:23:97:b5:2a:e0:23:
fc:93:c3:e9:7f:32:1a:a6:a3:87:39:cb:0d:ff:35:98:14:34:
c0:25:24:74:31:3a:30:dd:db:8b:40:e9:12:3b:15:a4:44:66:
93:c4:dc:dc:5c:53:28:c0:d1:5b:d3:9c:8b:b6:7e:2c:f6:48:
ce:69:ea:28:50:cc:0a:3d:0a:d6:03:f1:ab:87:b6:65:80:27:
b1:1c:db:83:36:39:6c:ca:81:7d:a7:aa:b6:70:35:70:25:62:
97:41:02:bc:f6:1d:e6:2b:03:0d:6f:d9:d9:23:74:3c:e4:8a:
4f:da:79:22:4d:fe:55:1b:dd:06:a6:f1:73:42:27:1d:49:6c:
0a:17:03:e6:07:5b:b4:66:c0:78:c3:14:8f:6c:e5:d8:f9:9c:
02:20:ad:cd:eb:3c:2d:90:d0:97:c6:37:dd:5f:8b:d7:99:43:
62:33:3d:48:4d:23:bb:1e:66:f6:0d:c6:5c:c7:85:af:6c:73:
9a:53:32:d0:1f:df:f1:69:92:81:ac:33:27:65:44:c2:98:37:
86:e9:49:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZGxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODE1MDcwMjAzWhcNMjYwODA2MDcwMjAzWjAYMRYw
FAYDVQQDEw02ODllZGI2Zi01YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs2xSg6JkB6B33ehG3uPnfF0IHWHhBsK6d8V09n+nSvPBj19WK3oaQthm
KaKpICVuiMwsmiA4+t/J57o+/JKyAJnoOjNKwajywxVVku3X2mXFP/jQzayVZMMR
/IL1OrbPa61mQ99bD6hgQRdDbNN8iP7uuIXK3585IBVH44d0kuLuVstBbHoD8naj
Bj+woChnuWJf/l7Bf8C1grTsl/LcDMoYKc3N2xXkVRExZAowuY7Im6tbFLcsd5Kp
1ZE4LetjG/4s2BuaRHe0bhhWJh5mQ/HAROBvxOhG9uT/nPUj+9kquZMzGRMf8J9L
+L5bOYMCzeCC1aESNHPv9dKYC29mdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLTl
PL3fF5/zxuPLGqR+NtxhkMkNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMThFM0IyMjc5QTUxMUYwOTQ0N0I3QzNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsUcMA0GCSqGSIb3DQEB
CwUAA4IBAQBvPTM4adcsrbW/OwObg1LAGJEoWsIgPH2YAtXny1oC+1t/npL7pVuD
+jpsScXKth0jl7Uq4CP8k8PpfzIapqOHOcsN/zWYFDTAJSR0MTow3duLQOkSOxWk
RGaTxNzcXFMowNFb05yLtn4s9kjOaeooUMwKPQrWA/Grh7ZlgCexHNuDNjlsyoF9
p6q2cDVwJWKXQQK89h3mKwMNb9nZI3Q85IpP2nkiTf5VG90GpvFzQicdSWwKFwPm
B1u0ZsB4wxSPbOXY+ZwCIK3N6zwtkNCXxjfdX4vXmUNiMz1ITSO7Hmb2DcZcx4Wv
bHOaUzLQH9/xaZKBrDMnZUTCmDeG6UkI
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:51 2025 by rpki-client