Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF66AF187C1411F0AA0BB2A0DAE4EC9C.roa
File: EF66AF187C1411F0AA0BB2A0DAE4EC9C.roa (raw, json)
Hash identifier: VcT7o//tBtHj/g7AI0234fYxwG6xbPjhURdAhw1O+B0=
Subject key identifier: 22:64:66:00:8F:30:AD:D1:66:BF:F0:2A:E1:4E:2A:D5:0E:D4:AD:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019205
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF66AF187C1411F0AA0BB2A0DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 09:23:01 +0000
ROA not before: Mon 18 Aug 2025 09:22:56 +0000
ROA not after: Fri 19 Sep 2025 09:22:56 +0000
asID: 395793
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102917 (0x19205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 18 09:22:56 2025 GMT
Not After : Sep 19 09:22:56 2025 GMT
Subject: CN=68a2f0f5-20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:4e:41:bc:36:c3:db:48:bf:99:93:66:b0:
82:e5:e0:cb:e9:0b:c6:b1:53:af:ca:03:5c:99:89:
ef:ca:51:f3:0e:86:09:26:73:19:c8:94:d4:21:38:
db:28:1a:e5:5b:33:3e:b5:76:a1:9e:63:97:cd:54:
9b:5b:ad:80:8a:37:f0:cc:1a:5d:7c:48:1c:8d:17:
ce:1b:e1:15:ee:f1:56:83:e4:f9:1b:90:b7:e6:0d:
c9:a5:95:4a:50:77:ff:82:3c:64:5c:51:8b:7e:6a:
ba:95:0d:0b:d9:70:75:02:f6:04:a8:80:14:33:63:
65:34:14:57:67:6e:d8:1a:f0:71:4b:a1:fd:73:38:
c7:89:3f:03:af:6b:ad:c9:2a:5c:35:4a:e8:5e:b8:
29:54:0c:ca:41:de:2c:ee:9f:77:59:5c:fa:8e:04:
65:51:9b:ec:d5:ac:15:9c:39:b9:17:11:76:50:4a:
64:53:e8:60:00:b7:71:1d:e3:53:50:e5:b9:fa:da:
8a:c6:46:ad:eb:1d:0d:bb:87:fa:38:ac:6b:6a:4e:
fe:29:0f:f8:58:be:ab:87:6b:95:90:90:fe:72:ad:
32:b3:ee:2a:59:89:e3:b4:0c:c9:39:79:ff:52:cd:
74:b9:5c:c7:43:ea:19:5e:e6:70:80:fc:80:68:ff:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:66:00:8F:30:AD:D1:66:BF:F0:2A:E1:4E:2A:D5:0E:D4:AD:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF66AF187C1411F0AA0BB2A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:51:03:17:23:88:bd:18:6f:ab:15:1c:c8:59:0e:d7:f0:01:
a3:60:f5:be:d2:6e:fe:73:99:12:51:79:b7:71:70:66:fa:b0:
e3:92:5e:ad:8c:16:3d:a0:79:ac:bd:61:95:21:c8:2b:e2:25:
63:95:9c:53:f7:36:42:73:e5:c0:65:b6:b1:ba:4b:b9:29:83:
fa:c3:47:f1:e7:6e:44:08:c7:82:ec:a0:8e:92:42:19:a1:33:
73:01:25:bf:e5:a1:b5:c9:e6:ea:e6:e0:12:f9:fd:a7:4c:f6:
80:33:ed:e9:bb:e0:6d:68:7c:71:f2:e4:87:14:a9:45:e2:4f:
1f:f5:65:72:e1:02:17:b9:5d:02:52:1b:3c:16:2d:61:50:6e:
83:77:a8:bd:95:64:6a:28:83:bd:d1:53:60:6e:d3:3f:c7:60:
94:9f:dc:51:fc:be:f4:20:06:a4:0a:10:83:45:fd:17:67:23:
3c:0b:8e:dd:e3:1a:1c:65:a7:e8:a3:f5:60:99:a1:95:35:35:
24:8a:b7:86:14:5d:cc:48:88:d2:65:21:4e:d6:69:0f:46:5d:
e9:2e:86:9b:04:e6:65:2b:15:26:73:cb:df:65:54:59:56:61:
0b:e6:27:00:e9:a0:af:95:c3:18:69:fa:c7:fc:3e:bd:2a:46:
0a:c1:79:e0
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZIFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODE4MDkyMjU2WhcNMjUwOTE5MDkyMjU2WjAYMRYw
FAYDVQQDEw02OGEyZjBmNS0yMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwD5OQbw2w9tIv5mTZrCC5eDL6QvGsVOvygNcmYnvylHzDoYJJnMZyJTU
ITjbKBrlWzM+tXahnmOXzVSbW62AijfwzBpdfEgcjRfOG+EV7vFWg+T5G5C35g3J
pZVKUHf/gjxkXFGLfmq6lQ0L2XB1AvYEqIAUM2NlNBRXZ27YGvBxS6H9czjHiT8D
r2utySpcNUroXrgpVAzKQd4s7p93WVz6jgRlUZvs1awVnDm5FxF2UEpkU+hgALdx
HeNTUOW5+tqKxkat6x0Nu4f6OKxrak7+KQ/4WL6rh2uVkJD+cq0ys+4qWYnjtAzJ
OXn/Us10uVzHQ+oZXuZwgPyAaP8diwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCJk
ZgCPMK3RZr/wKuFOKtUO1K1XMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjY2QUYxODdDMTQxMUYwQUEwQkIyQTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlzNAwQAmlzPMA0GCSqG
SIb3DQEBCwUAA4IBAQCzUQMXI4i9GG+rFRzIWQ7X8AGjYPW+0m7+c5kSUXm3cXBm
+rDjkl6tjBY9oHmsvWGVIcgr4iVjlZxT9zZCc+XAZbaxuku5KYP6w0fx525ECMeC
7KCOkkIZoTNzASW/5aG1yebq5uAS+f2nTPaAM+3pu+BtaHxx8uSHFKlF4k8f9WVy
4QIXuV0CUhs8Fi1hUG6Dd6i9lWRqKIO90VNgbtM/x2CUn9xR/L70IAakChCDRf0X
ZyM8C47d4xocZafoo/VgmaGVNTUkireGFF3MSIjSZSFO1mkPRl3pLoabBOZlKxUm
c8vfZVRZVmEL5icA6aCvlcMYafrH/D69KkYKwXng
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:02 2025 by rpki-client