Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB85310C736B11F096D9A9ACDAE4EC9C.roa
File: CB85310C736B11F096D9A9ACDAE4EC9C.roa (raw, json)
Hash identifier: FNoOrK5r8sRY2XCH6OVYbeF4AfsWs6OpMEsSN4gUcIw=
Subject key identifier: 3A:73:73:D5:D9:01:17:43:1C:7B:E3:72:DF:F2:4F:BE:58:19:EA:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0190E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB85310C736B11F096D9A9ACDAE4EC9C.roa
Signing time: Thu 07 Aug 2025 08:52:06 +0000
ROA not before: Thu 07 Aug 2025 08:52:02 +0000
ROA not after: Tue 16 Sep 2025 08:52:02 +0000
asID: 203020
IP address blocks: 154.203.32.0/21 maxlen: 24
154.203.40.0/22 maxlen: 24
154.203.44.0/22 maxlen: 24
154.203.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102632 (0x190e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 08:52:02 2025 GMT
Not After : Sep 16 08:52:02 2025 GMT
Subject: CN=68946936-4c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:63:6b:e5:e0:97:45:22:21:32:14:e1:0c:
90:d6:da:f6:0d:41:83:a7:fd:e1:58:f3:98:cc:85:
f1:1c:d4:19:a7:72:11:13:45:5e:fd:09:53:88:88:
c9:72:d5:7a:ec:a1:e5:d4:89:eb:d0:23:aa:b4:18:
aa:ae:3e:48:c8:27:96:55:b7:a5:fb:1f:b5:cc:8c:
44:38:c1:21:47:75:71:eb:15:fb:a0:24:e4:4a:b9:
fc:30:6c:ac:66:2e:42:14:2e:26:39:81:3a:20:06:
00:93:01:43:86:ea:b7:80:0d:b5:2c:d4:50:50:9c:
6a:0b:df:ea:a9:b5:0e:ae:7d:25:0a:c4:70:c2:90:
5a:b7:a3:4b:40:f4:b7:5b:28:f6:5b:be:d5:d5:39:
21:49:ea:b9:f4:9b:b2:1c:98:67:8f:46:92:42:f0:
14:ce:9f:71:05:1d:3b:d8:70:25:5c:88:47:a3:b8:
fc:64:ba:47:20:95:3d:76:8d:5e:eb:95:ca:5f:cc:
04:df:b8:f4:d0:8f:01:00:05:32:f9:de:b5:5a:71:
e7:2f:68:b6:ac:dc:d5:61:45:47:c8:fe:5d:a5:bb:
79:f6:69:50:56:0f:43:cc:f4:13:c8:67:50:e0:f3:
9c:56:50:9b:18:e5:c6:24:d3:cf:93:6a:24:c9:56:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:73:D5:D9:01:17:43:1C:7B:E3:72:DF:F2:4F:BE:58:19:EA:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB85310C736B11F096D9A9ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.32.0-154.203.49.255
Signature Algorithm: sha256WithRSAEncryption
ac:af:cf:fd:15:32:38:de:d4:37:0b:72:49:7b:90:00:79:ce:
89:f1:06:aa:f4:70:cc:6c:69:11:a2:fc:6b:55:83:d0:10:95:
43:81:e2:68:4e:1f:0d:7e:d1:cc:ab:47:f7:1e:dc:f0:06:03:
7a:f0:15:ff:bd:3b:5d:c7:c6:cc:2f:9d:5f:ba:8f:d5:43:b4:
a0:94:44:14:21:0d:23:94:72:1c:88:87:7e:06:70:18:49:e5:
5c:3e:d4:c5:76:11:f0:56:b2:ea:44:30:6e:33:d6:6e:7e:63:
69:91:5e:ef:50:49:30:ec:0b:08:44:90:db:e9:d0:07:a5:19:
01:ed:37:a5:a1:5a:25:48:aa:2f:2b:54:91:3c:4b:ed:79:15:
fb:b1:fa:66:39:5c:16:d3:14:28:84:8c:1c:0c:43:d1:d2:32:
3b:78:cd:b5:e0:21:df:33:b2:2a:2d:b4:e5:d3:e0:6f:47:63:
fb:c4:e6:e7:2f:d0:b5:a4:5c:92:fe:58:40:07:d6:2d:00:c5:
a6:c2:e8:b1:9c:b3:6f:17:da:80:5b:99:80:93:25:e4:de:5d:
a2:5e:76:7d:c8:e7:b1:b6:73:ee:c6:0b:7f:ae:43:19:39:47:
28:3e:19:9b:af:cf:51:cd:4c:9b:4c:b8:ae:fb:e7:48:59:ad:
a8:9d:e9:94
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAZDoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA3MDg1MjAyWhcNMjUwOTE2MDg1MjAyWjAYMRYw
FAYDVQQDEw02ODk0NjkzNi00YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6U1ja+Xgl0UiITIU4QyQ1tr2DUGDp/3hWPOYzIXxHNQZp3IRE0Ve/QlT
iIjJctV67KHl1Inr0COqtBiqrj5IyCeWVbel+x+1zIxEOMEhR3Vx6xX7oCTkSrn8
MGysZi5CFC4mOYE6IAYAkwFDhuq3gA21LNRQUJxqC9/qqbUOrn0lCsRwwpBat6NL
QPS3Wyj2W77V1TkhSeq59JuyHJhnj0aSQvAUzp9xBR072HAlXIhHo7j8ZLpHIJU9
do1e65XKX8wE37j00I8BAAUy+d61WnHnL2i2rNzVYUVHyP5dpbt59mlQVg9DzPQT
yGdQ4POcVlCbGOXGJNPPk2okyVYWvQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDpz
c9XZARdDHHvjct/yT75YGepkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjg1MzEwQzczNkIxMUYwOTZEOUE5QUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWayyADBAGayzAwDQYJ
KoZIhvcNAQELBQADggEBAKyvz/0VMjje1DcLckl7kAB5zonxBqr0cMxsaRGi/GtV
g9AQlUOB4mhOHw1+0cyrR/ce3PAGA3rwFf+9O13HxswvnV+6j9VDtKCURBQhDSOU
chyIh34GcBhJ5Vw+1MV2EfBWsupEMG4z1m5+Y2mRXu9QSTDsCwhEkNvp0AelGQHt
N6WhWiVIqi8rVJE8S+15Ffux+mY5XBbTFCiEjBwMQ9HSMjt4zbXgId8zsiottOXT
4G9HY/vE5ucv0LWkXJL+WEAH1i0AxabC6LGcs28X2oBbmYCTJeTeXaJedn3I57G2
c+7GC3+uQxk5Ryg+GZuvz1HNTJtMuK7750hZraid6ZQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:40 2025 by rpki-client