Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9603D94243411F09E4FB9AADAE4EC9C.roa
File: C9603D94243411F09E4FB9AADAE4EC9C.roa (raw, json)
Hash identifier: 3d8EZkoJ807H7hLf0tVtpROhODXjOs64f6lQLpuQWw0=
Subject key identifier: 95:F6:C6:F2:78:FB:F9:95:53:D3:5A:70:40:ED:2B:6D:48:F9:D9:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9603D94243411F09E4FB9AADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:29:19 +0000
ROA not before: Mon 28 Apr 2025 13:29:14 +0000
ROA not after: Mon 23 Mar 2026 13:29:14 +0000
asID: 984
IP address blocks: 154.207.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97257 (0x17be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:29:14 2025 GMT
Not After : Mar 23 13:29:14 2026 GMT
Subject: CN=680f82af-8fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:d2:44:a7:0b:6d:5b:f0:3f:f7:10:af:a8:
39:3a:61:6f:60:71:43:da:40:2e:9c:fc:cf:a8:a9:
ee:80:14:3e:e4:22:93:57:3e:2b:a2:f8:8f:b9:b5:
fd:a9:31:e6:6f:dc:cb:40:b6:bc:b0:e8:55:b6:dd:
f6:65:9f:9b:e6:a9:c7:c7:12:09:95:4b:e3:ff:92:
12:76:f8:b0:ba:05:5a:d4:c5:81:75:a0:7c:12:25:
97:33:92:3f:0b:93:e9:a8:c7:ff:e6:3e:c2:24:ab:
56:89:2e:22:1f:83:24:48:33:29:cf:bc:f3:9b:c1:
4f:db:9a:22:13:ff:2d:26:63:db:1e:53:cb:f3:e4:
9f:4e:51:3b:a1:09:95:33:52:da:3f:5c:d0:38:a3:
49:f7:f9:61:a9:d3:3c:5f:6a:c6:e8:98:23:e6:9d:
e3:6c:e4:57:36:2b:a0:3a:86:8f:c2:29:d3:52:f1:
38:25:58:78:68:cb:9d:dc:58:23:aa:db:b3:a2:27:
81:3e:0e:71:67:e5:f4:ac:af:af:e2:37:2d:86:a9:
e6:0f:49:4e:1f:a5:c8:49:2f:6e:02:3f:27:3f:c1:
e8:a2:87:e4:87:24:45:b2:e0:3b:b0:dc:85:e8:36:
de:cc:b2:0f:9d:fb:88:3b:e7:6f:2d:fa:db:2b:15:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:C6:F2:78:FB:F9:95:53:D3:5A:70:40:ED:2B:6D:48:F9:D9:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9603D94243411F09E4FB9AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c6:eb:c1:b7:99:98:d3:9f:03:cc:7b:80:32:4d:cd:ac:a4:
3a:3f:ef:23:f0:fe:b2:93:bd:1f:57:4a:2f:c0:13:29:ed:80:
c9:b1:27:fe:92:e5:1a:d4:d3:de:1f:45:74:74:e5:14:92:af:
a1:40:a2:ea:7d:f4:de:e6:fb:95:91:20:13:b7:b2:08:3a:3a:
61:42:fd:c6:2c:87:db:a1:ce:29:bb:01:77:04:83:32:b0:f3:
9d:1b:db:96:84:f7:e6:05:ad:c7:ae:40:7d:ad:78:6a:12:a7:
ba:bb:d9:d8:1f:68:9e:b2:2e:a2:16:e8:b7:41:dd:fe:ec:ce:
fa:9b:48:34:64:87:bd:37:f4:18:1e:63:5a:77:5f:10:21:56:
9d:26:49:cc:65:84:ec:1c:75:a9:41:21:3e:6b:91:73:cc:79:
8a:df:a4:99:d4:cd:3d:9e:01:95:eb:b7:95:00:c2:67:86:12:
7b:c1:92:8a:28:87:dd:e5:68:86:dc:80:73:89:9c:3b:2b:15:
1d:9c:23:f1:47:7d:a7:54:91:37:4c:e9:3a:d6:d1:e8:e8:0a:
5f:da:67:44:b0:92:55:3d:77:f5:22:8e:1e:d0:e1:ae:eb:6e:
9c:8c:9b:3d:40:c7:a9:27:11:06:60:d9:37:9c:a7:d3:4b:66:
03:fc:08:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXvpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTMyOTE0WhcNMjYwMzIzMTMyOTE0WjAYMRYw
FAYDVQQDEw02ODBmODJhZi04ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs1vSRKcLbVvwP/cQr6g5OmFvYHFD2kAunPzPqKnugBQ+5CKTVz4roviP
ubX9qTHmb9zLQLa8sOhVtt32ZZ+b5qnHxxIJlUvj/5ISdviwugVa1MWBdaB8EiWX
M5I/C5PpqMf/5j7CJKtWiS4iH4MkSDMpz7zzm8FP25oiE/8tJmPbHlPL8+SfTlE7
oQmVM1LaP1zQOKNJ9/lhqdM8X2rG6Jgj5p3jbORXNiugOoaPwinTUvE4JVh4aMud
3FgjqtuzoieBPg5xZ+X0rK+v4jcthqnmD0lOH6XISS9uAj8nP8HooofkhyRFsuA7
sNyF6DbezLIPnfuIO+dvLfrbKxViwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJX2
xvJ4+/mVU9NacEDtK21I+dk7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOTYwM0Q5NDI0MzQxMUYwOUU0RkI5QUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms/qMA0GCSqGSIb3DQEB
CwUAA4IBAQDBxuvBt5mY058DzHuAMk3NrKQ6P+8j8P6yk70fV0ovwBMp7YDJsSf+
kuUa1NPeH0V0dOUUkq+hQKLqffTe5vuVkSATt7IIOjphQv3GLIfboc4puwF3BIMy
sPOdG9uWhPfmBa3HrkB9rXhqEqe6u9nYH2iesi6iFui3Qd3+7M76m0g0ZIe9N/QY
HmNad18QIVadJknMZYTsHHWpQSE+a5FzzHmK36SZ1M09ngGV67eVAMJnhhJ7wZKK
KIfd5WiG3IBziZw7KxUdnCPxR32nVJE3TOk61tHo6Apf2mdEsJJVPXf1Io4e0OGu
626cjJs9QMepJxEGYNk3nKfTS2YD/Aju
-----END CERTIFICATE-----
Generated at Fri May 9 07:12:22 2025 by rpki-client