Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A4340E5CA411F085D888EDDAE4EC9C.roa
File: 03A4340E5CA411F085D888EDDAE4EC9C.roa (raw, json)
Hash identifier: 8+neggvdb8X2xU2XFEiE5+0dT1u5vzlCINrAKzgrhRw=
Subject key identifier: C1:B4:B8:4A:1B:78:B9:5C:2D:FB:0A:09:39:E8:36:D4:23:69:F7:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018C9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A4340E5CA411F085D888EDDAE4EC9C.roa
Signing time: Wed 09 Jul 2025 09:06:36 +0000
ROA not before: Wed 09 Jul 2025 09:06:31 +0000
ROA not after: Thu 14 Aug 2025 09:06:31 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.102.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101530 (0x18c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 09:06:31 2025 GMT
Not After : Aug 14 09:06:31 2025 GMT
Subject: CN=686e311c-0f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:35:fb:af:65:b2:ef:67:f9:8e:4a:32:ce:
bc:30:83:40:80:cc:58:8a:dd:49:71:3d:d5:c4:8d:
32:09:14:b8:7f:c6:7d:82:a0:dd:5d:fe:c9:20:78:
d5:b7:e1:25:a7:82:2e:ed:9d:40:58:f1:14:5e:f6:
8d:79:2a:0a:d5:5f:9b:5d:e8:1d:f3:62:51:83:c6:
a5:67:3a:49:49:b5:0a:81:32:30:07:bb:61:39:fd:
4e:df:f9:76:18:33:da:91:b4:56:f1:41:3a:9b:64:
37:81:da:33:b1:fe:9c:71:0d:82:1b:d7:50:06:c5:
09:cf:53:b9:22:bf:56:7d:1e:5a:86:44:63:1f:23:
6c:f3:0f:70:60:0d:ae:ed:39:70:71:27:59:3c:a5:
a2:39:71:a8:8d:94:65:43:7d:95:80:61:eb:28:1f:
d8:68:d1:13:2e:92:8d:21:be:2e:f5:f1:ed:2e:b3:
ad:d1:1e:be:55:47:50:16:a4:d2:3f:a4:c6:d0:37:
99:28:6f:52:51:8b:3e:30:73:59:6b:be:5b:ae:a3:
7b:8d:3a:0a:0c:1e:02:08:b9:dd:e5:90:f4:8d:42:
7d:14:4b:4a:6d:3a:ab:7a:70:e6:c1:eb:11:8a:70:
22:71:92:77:cb:66:9d:83:80:6c:0d:78:e0:66:03:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:B8:4A:1B:78:B9:5C:2D:FB:0A:09:39:E8:36:D4:23:69:F7:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A4340E5CA411F085D888EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.102.0/24
154.197.116.0/24
154.197.124.0/24
154.212.139.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:63:93:3e:a2:ad:b1:23:cd:44:5c:3d:99:36:e9:02:11:44:
60:12:16:c5:18:bd:18:40:da:d0:ad:3d:b6:4f:fd:e0:ed:a8:
f7:b7:ab:d9:56:8e:e0:70:e0:b8:2a:4d:2a:c1:5a:b3:40:37:
57:bb:4c:06:82:a2:f2:d1:8f:37:67:1b:bc:03:7c:1a:61:0c:
9b:e6:00:c9:98:f6:77:84:9a:dc:62:b0:0c:5b:c2:13:88:9d:
51:a0:3b:d5:75:b9:b3:b6:d2:c7:fd:90:c6:27:65:2b:0c:a8:
c8:97:c6:bc:4d:a2:4a:71:2d:d8:3e:c8:3a:fd:1d:5a:e5:97:
41:90:00:4c:55:cb:17:53:33:8f:18:a7:6a:97:9d:0f:1c:7a:
0b:ff:40:49:27:38:27:97:fe:7e:28:33:00:75:37:9f:d6:5c:
b8:cf:01:9c:83:bd:e1:b4:39:8c:00:3c:cb:c5:61:35:c1:9e:
53:fc:92:33:6e:02:7b:af:09:b4:c2:e9:a2:3f:69:0c:c2:e1:
18:c4:a7:0c:77:de:a8:4b:08:29:b2:56:15:7c:3a:e8:ba:18:
d1:d1:46:3a:5a:d0:bf:64:75:f5:3e:3c:40:f3:4c:c1:09:2d:
7c:ce:9e:b7:00:2c:87:42:e5:72:0f:bc:d9:ae:54:ba:55:c3:
ca:e3:13:dc
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAYyaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA5MDkwNjMxWhcNMjUwODE0MDkwNjMxWjAYMRYw
FAYDVQQDEw02ODZlMzExYy0wZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3sk1+69lsu9n+Y5KMs68MINAgMxYit1JcT3VxI0yCRS4f8Z9gqDdXf7J
IHjVt+Elp4Iu7Z1AWPEUXvaNeSoK1V+bXegd82JRg8alZzpJSbUKgTIwB7thOf1O
3/l2GDPakbRW8UE6m2Q3gdozsf6ccQ2CG9dQBsUJz1O5Ir9WfR5ahkRjHyNs8w9w
YA2u7TlwcSdZPKWiOXGojZRlQ32VgGHrKB/YaNETLpKNIb4u9fHtLrOt0R6+VUdQ
FqTSP6TG0DeZKG9SUYs+MHNZa75brqN7jToKDB4CCLnd5ZD0jUJ9FEtKbTqrenDm
wesRinAicZJ3y2adg4BsDXjgZgPyTQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFMG0
uEobeLlcLfsKCTnoNtQjafd2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wM0E0MzQwRTVDQTQxMUYwODVEODg4RUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAmsVFAwQAmsVmAwQAmsV0
AwQAmsV8AwQAmtSLAwQAmtcOMA0GCSqGSIb3DQEBCwUAA4IBAQDIY5M+oq2xI81E
XD2ZNukCEURgEhbFGL0YQNrQrT22T/3g7aj3t6vZVo7gcOC4Kk0qwVqzQDdXu0wG
gqLy0Y83Zxu8A3waYQyb5gDJmPZ3hJrcYrAMW8ITiJ1RoDvVdbmzttLH/ZDGJ2Ur
DKjIl8a8TaJKcS3YPsg6/R1a5ZdBkABMVcsXUzOPGKdql50PHHoL/0BJJzgnl/5+
KDMAdTef1ly4zwGcg73htDmMADzLxWE1wZ5T/JIzbgJ7rwm0wumiP2kMwuEYxKcM
d96oSwgpslYVfDrouhjR0UY6WtC/ZHX1PjxA80zBCS18zp63ACyHQuVyD7zZrlS6
VcPK4xPc
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:18 2025 by rpki-client