Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D000FC259C511F09ADA15B4DAE4EC9C.roa
File: 1D000FC259C511F09ADA15B4DAE4EC9C.roa (raw, json)
Hash identifier: GaRyia/bDbNrYK0YfsCc28X1C8VMd+SDT93UuSc/1QQ=
Subject key identifier: D6:79:3B:EC:3A:F7:96:07:B2:D2:1B:B0:7A:B5:99:10:53:91:DD:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D000FC259C511F09ADA15B4DAE4EC9C.roa
Signing time: Sat 05 Jul 2025 17:25:58 +0000
ROA not before: Sat 05 Jul 2025 17:25:54 +0000
ROA not after: Wed 03 Sep 2025 17:25:54 +0000
asID: 150008
IP address blocks: 154.206.21.0/24 maxlen: 24
154.206.24.0/24 maxlen: 24
154.206.25.0/24 maxlen: 24
154.206.26.0/24 maxlen: 24
154.206.27.0/24 maxlen: 24
154.206.28.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.206.30.0/24 maxlen: 24
154.206.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101168 (0x18b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 17:25:54 2025 GMT
Not After : Sep 3 17:25:54 2025 GMT
Subject: CN=68696026-6fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:22:ce:9a:f0:38:a0:5b:36:c7:63:97:aa:
d5:4c:0e:0e:a8:a4:55:2d:f7:5a:19:16:92:8c:88:
13:80:07:fa:72:7b:1e:0b:fa:eb:f2:64:ba:d5:6b:
ed:0d:40:2d:a1:69:5a:e0:d1:cd:f6:12:38:e8:57:
bd:46:85:7d:92:82:3b:9e:28:e9:5b:bf:02:e7:7a:
b3:e1:a8:a9:d5:ea:7d:c5:80:91:f8:4d:83:be:73:
6e:ce:1c:6c:17:51:7b:67:78:c0:91:db:cc:74:f7:
a1:4d:87:5c:e9:60:33:3a:b1:52:b5:9d:78:6e:28:
27:44:a2:38:1e:d0:b6:60:e0:59:7d:4d:6d:15:ec:
c0:06:da:b1:e5:15:82:45:da:51:c1:14:e7:b5:53:
45:78:67:19:d2:ec:59:60:30:5e:c8:66:79:0d:90:
6e:44:46:32:ff:03:78:1e:f9:b9:0e:64:0e:6d:13:
99:11:a8:00:4c:5c:a4:f9:f6:42:0e:9a:a2:fd:ac:
da:61:6f:8c:95:63:71:01:34:7c:d9:83:d4:6c:1c:
a6:61:5d:22:20:c2:57:e4:30:52:5d:85:18:d7:df:
87:b4:3b:c7:b6:7e:ad:4f:16:16:e3:13:09:11:88:
7c:e9:0e:e6:5d:25:8e:98:e4:5e:d8:4f:a3:53:b9:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:79:3B:EC:3A:F7:96:07:B2:D2:1B:B0:7A:B5:99:10:53:91:DD:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D000FC259C511F09ADA15B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.21.0/24
154.206.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:64:b3:40:7e:15:bf:a6:02:e5:0e:e0:6c:53:59:27:86:7a:
f1:0b:8b:63:73:2b:aa:67:f9:bb:6a:1b:23:4b:ca:8a:82:f9:
42:1d:c9:27:bf:fe:b1:5b:e8:cc:ae:af:dc:35:e4:a6:ef:45:
39:5b:dc:ee:6b:17:9b:1e:ce:95:ac:fe:e4:91:50:63:89:77:
b3:68:c3:d5:91:67:ff:ff:aa:98:31:eb:e5:0e:6e:8d:4a:8b:
80:34:07:37:b8:2a:22:10:a9:d2:0b:a7:25:ce:14:e0:30:32:
ff:05:7c:30:35:e7:4d:96:00:bf:c7:33:73:6d:f1:b4:42:9a:
e8:de:3d:94:d0:73:52:e3:68:da:6b:76:34:4a:42:65:14:70:
47:15:05:2c:e6:fb:9d:35:29:ee:31:89:66:14:46:63:e8:84:
41:5f:6a:4d:f0:26:18:2d:7a:55:f7:44:35:fa:70:d9:ec:04:
6e:d8:9d:24:eb:9b:56:3d:d7:00:dd:48:cb:54:7f:3d:29:50:
09:e4:f7:b8:6a:ba:8b:db:c2:46:3b:af:c9:48:15:4c:77:0c:
2e:6b:4d:31:80:ac:a6:1a:50:85:a1:78:b5:87:10:3f:13:23:
77:2d:a7:ee:85:8e:f5:8c:6d:52:a9:9a:10:0a:9f:93:98:8a:
dd:b6:16:91
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYswMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTcyNTU0WhcNMjUwOTAzMTcyNTU0WjAYMRYw
FAYDVQQDEw02ODY5NjAyNi02ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqcgizprwOKBbNsdjl6rVTA4OqKRVLfdaGRaSjIgTgAf6cnseC/rr8mS6
1WvtDUAtoWla4NHN9hI46Fe9RoV9koI7nijpW78C53qz4aip1ep9xYCR+E2DvnNu
zhxsF1F7Z3jAkdvMdPehTYdc6WAzOrFStZ14bignRKI4HtC2YOBZfU1tFezABtqx
5RWCRdpRwRTntVNFeGcZ0uxZYDBeyGZ5DZBuREYy/wN4Hvm5DmQObROZEagATFyk
+fZCDpqi/azaYW+MlWNxATR82YPUbBymYV0iIMJX5DBSXYUY19+HtDvHtn6tTxYW
4xMJEYh86Q7mXSWOmORe2E+jU7mNzwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNZ5
O+w695YHstIbsHq1mRBTkd3CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDAwMEZDMjU5QzUxMUYwOUFEQTE1QjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAms4VAwQDms4YMA0GCSqG
SIb3DQEBCwUAA4IBAQA8ZLNAfhW/pgLlDuBsU1knhnrxC4tjcyuqZ/m7ahsjS8qK
gvlCHcknv/6xW+jMrq/cNeSm70U5W9zuaxebHs6VrP7kkVBjiXezaMPVkWf//6qY
MevlDm6NSouANAc3uCoiEKnSC6clzhTgMDL/BXwwNedNlgC/xzNzbfG0Qpro3j2U
0HNS42jaa3Y0SkJlFHBHFQUs5vudNSnuMYlmFEZj6IRBX2pN8CYYLXpV90Q1+nDZ
7ARu2J0k65tWPdcA3UjLVH89KVAJ5Pe4arqL28JGO6/JSBVMdwwua00xgKymGlCF
oXi1hxA/EyN3LafuhY71jG1SqZoQCp+TmIrdthaR
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:48 2025 by rpki-client