Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD764810801811F0A1B725F5DAE4EC9C.roa
File: DD764810801811F0A1B725F5DAE4EC9C.roa (raw, json)
Hash identifier: 05VGGAUuhSs60R8A6D0S6unnvuVU1ehTbE7otwgrdbA=
Subject key identifier: 0C:45:E6:F2:74:DC:7C:4B:3F:27:10:14:7D:CB:79:5F:09:95:F6:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0195AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD764810801811F0A1B725F5DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:01:14 +0000
ROA not before: Sat 23 Aug 2025 12:01:02 +0000
ROA not after: Sun 14 Sep 2025 12:01:02 +0000
asID: 154086
IP address blocks: 154.81.11.0/24 maxlen: 24
154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Aug 2025 00:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103855 (0x195af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 12:01:02 2025 GMT
Not After : Sep 14 12:01:02 2025 GMT
Subject: CN=68a9ad8a-82da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:72:78:23:1d:c5:bc:cc:e9:a9:3e:26:2c:
14:e1:a8:1b:86:0f:92:6c:06:7b:64:f2:cb:7c:cf:
99:02:b0:6b:0a:e4:44:10:4d:3f:b0:75:ad:eb:f6:
a3:30:99:1b:0f:8e:59:1e:32:f1:47:c0:05:14:ef:
0e:9d:eb:56:3f:ed:f3:7f:ae:fd:70:ed:c9:2a:72:
6a:67:12:a7:2e:48:b0:25:78:3e:af:9e:2d:df:53:
98:33:47:19:67:40:b7:23:4f:c6:10:06:ef:a4:75:
01:fa:c5:1c:21:e0:2c:39:ee:9c:ae:4c:15:86:e3:
10:9b:71:a4:43:9c:75:be:99:b3:56:d4:b7:f6:99:
2f:2f:d7:6e:01:88:f6:3f:aa:75:1f:7c:79:27:e8:
f7:0f:10:fa:c7:07:f5:1e:fe:69:30:63:a3:c2:d5:
15:c8:c4:9c:3e:fe:e3:56:b7:44:11:0c:0a:98:60:
4b:84:58:54:20:26:05:61:a0:93:99:92:79:56:36:
9c:0c:e3:e6:ae:8d:08:d7:ef:69:6c:2e:64:b9:66:
dd:51:e7:71:1f:49:f5:bd:10:30:a3:1f:0e:1a:48:
36:6c:a5:19:4e:e8:bc:af:23:e6:62:70:e4:c1:fa:
b4:3f:38:a5:78:ca:a8:4d:3d:bb:2d:ea:b8:0e:c3:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:E6:F2:74:DC:7C:4B:3F:27:10:14:7D:CB:79:5F:09:95:F6:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD764810801811F0A1B725F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:7b:ef:c3:cd:85:07:20:91:ed:48:ca:e3:c5:fc:df:6c:c6:
55:b9:6f:f1:a6:fa:35:94:a3:2d:db:29:2e:ff:22:0e:50:94:
d8:ea:3e:b3:fe:32:19:c7:92:d6:3e:02:40:5d:c9:64:d0:c3:
c5:77:4d:f0:f0:5d:2f:75:de:dd:3c:07:0e:d6:da:5a:13:89:
d2:4c:d1:75:d3:5f:8f:9c:19:75:e8:66:c8:48:61:d4:3a:17:
13:f5:dd:30:13:07:a8:92:86:28:02:19:d9:52:10:7b:df:0a:
ea:d7:4a:6e:21:fb:3c:64:c3:0d:76:2d:59:57:d9:ed:ec:39:
63:5a:b5:db:f1:84:26:52:e7:83:a3:4d:8e:96:2f:bf:92:90:
b7:e4:9d:9a:3e:51:1d:4f:9c:ce:6c:63:d7:49:33:30:49:69:
48:21:57:14:4f:bb:78:41:6a:05:26:2a:cd:6f:28:09:96:02:
d0:f3:43:e9:98:0d:ee:8c:ea:7a:39:d7:28:a6:5e:a9:cb:02:
c4:2d:32:06:16:66:19:79:bd:0c:e7:c8:e5:2f:f7:54:90:21:
e0:38:d0:8b:f9:a7:68:a8:97:08:5f:fb:10:ad:3d:a8:1a:50:
4d:a3:91:23:57:f2:f3:24:d4:e5:a8:e0:1a:f0:e4:41:35:3d:
7f:80:64:30
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZWvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIzMTIwMTAyWhcNMjUwOTE0MTIwMTAyWjAYMRYw
FAYDVQQDEw02OGE5YWQ4YS04MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSNyeCMdxbzM6ak+JiwU4agbhg+SbAZ7ZPLLfM+ZArBrCuREEE0/sHWt
6/ajMJkbD45ZHjLxR8AFFO8OnetWP+3zf679cO3JKnJqZxKnLkiwJXg+r54t31OY
M0cZZ0C3I0/GEAbvpHUB+sUcIeAsOe6crkwVhuMQm3GkQ5x1vpmzVtS39pkvL9du
AYj2P6p1H3x5J+j3DxD6xwf1Hv5pMGOjwtUVyMScPv7jVrdEEQwKmGBLhFhUICYF
YaCTmZJ5VjacDOPmro0I1+9pbC5kuWbdUedxH0n1vRAwox8OGkg2bKUZTui8ryPm
YnDkwfq0PzileMqoTT27Leq4DsMo+QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAxF
5vJ03HxLPycQFH3LeV8JlfYkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERDc2NDgxMDgwMTgxMUYwQTFCNzI1RjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlELAwQAmlIRMA0GCSqG
SIb3DQEBCwUAA4IBAQC8e+/DzYUHIJHtSMrjxfzfbMZVuW/xpvo1lKMt2yku/yIO
UJTY6j6z/jIZx5LWPgJAXclk0MPFd03w8F0vdd7dPAcO1tpaE4nSTNF101+PnBl1
6GbISGHUOhcT9d0wEweokoYoAhnZUhB73wrq10puIfs8ZMMNdi1ZV9nt7DljWrXb
8YQmUueDo02Oli+/kpC35J2aPlEdT5zObGPXSTMwSWlIIVcUT7t4QWoFJirNbygJ
lgLQ80PpmA3ujOp6Odcopl6pywLELTIGFmYZeb0M58jlL/dUkCHgONCL+adoqJcI
X/sQrT2oGlBNo5EjV/LzJNTlqOAa8ORBNT1/gGQw
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:32:49 2025 by rpki-client