Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2329BF70689211F087AE377FDAE4EC9C.roa
File: 2329BF70689211F087AE377FDAE4EC9C.roa (raw, json)
Hash identifier: 1ds/jBxm4henLfcO4jbcMQfhTKN4Oc744mYaOiHvCe4=
Subject key identifier: B1:9F:66:E6:95:51:DC:5C:96:65:57:92:72:63:22:9D:EE:1C:96:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018F82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2329BF70689211F087AE377FDAE4EC9C.roa
Signing time: Thu 24 Jul 2025 13:28:52 +0000
ROA not before: Thu 24 Jul 2025 13:28:46 +0000
ROA not after: Fri 05 Sep 2025 13:28:46 +0000
asID: 49505
IP address blocks: 154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102274 (0x18f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 13:28:46 2025 GMT
Not After : Sep 5 13:28:46 2025 GMT
Subject: CN=68823514-c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:00:cc:fc:73:e6:cc:b4:67:6a:65:ab:f7:
76:aa:d3:34:9b:45:e2:cc:21:34:14:21:07:74:4c:
4c:75:ef:4b:77:8e:1b:04:9a:ab:99:20:d2:a8:83:
8d:b4:47:df:6c:43:41:57:2f:8e:54:2a:69:53:ff:
5f:24:62:6f:3e:11:f0:53:0d:cf:e5:ea:09:93:54:
61:8f:18:0d:8b:f7:d7:e5:ff:ee:da:79:37:5d:66:
e7:e7:93:33:21:31:07:f2:7a:be:5c:9f:24:bb:36:
4b:c8:29:97:ff:55:3c:5b:f1:59:6f:f1:b1:36:0d:
39:ae:01:05:fe:c1:31:32:9d:8b:68:6f:d7:bd:22:
67:ed:cc:8e:fe:80:58:b7:01:4e:62:81:eb:02:04:
ac:26:57:86:b1:af:e6:b2:18:bd:79:78:81:df:d3:
4d:05:2e:e8:19:ad:cb:60:01:3f:d2:04:91:f3:25:
08:f6:dd:a0:87:bc:7b:8d:06:fc:e3:2d:85:eb:f2:
6f:f5:00:c3:55:41:e2:7d:c0:0d:31:45:98:a6:80:
c3:e1:bf:6f:16:d4:90:c9:fb:aa:c8:3c:1c:ae:2d:
62:d9:aa:fb:42:a7:ab:10:6e:49:8e:4d:96:d7:42:
16:75:1b:97:41:2a:65:0b:04:b0:67:6b:31:1a:b4:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9F:66:E6:95:51:DC:5C:96:65:57:92:72:63:22:9D:EE:1C:96:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2329BF70689211F087AE377FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.215.0-154.209.220.255
154.212.30.0/24
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:30:43:7a:6e:08:21:77:89:9c:70:ca:22:d9:3e:7d:fe:da:
1c:05:10:b2:95:22:a6:09:a6:1e:40:3f:a6:79:e6:ab:36:c1:
5e:46:4e:a2:24:47:40:23:eb:03:56:8c:f3:b1:66:3c:50:a8:
f4:23:41:29:80:52:6d:d8:e6:9d:f7:3a:f4:3b:b3:12:3d:e1:
69:7a:00:a2:5d:42:d9:54:3b:a4:7f:34:e4:21:f0:d7:7b:a5:
ab:83:82:90:4b:c9:c4:a1:71:ee:fa:3c:48:b8:71:b0:96:1a:
21:ea:18:7a:55:30:99:19:e9:a6:2a:69:42:3c:53:19:8c:7d:
dc:4a:37:36:0e:29:d4:c3:40:59:1b:a9:43:17:e7:83:d9:87:
b1:ab:cf:ea:ef:b4:66:8b:61:51:3b:a5:5e:bd:ac:5c:51:98:
37:00:ed:fc:e2:71:ca:59:3e:fb:ec:bf:e6:2b:68:9a:71:55:
77:f5:fc:70:8e:8a:2d:8d:c8:77:58:32:43:dd:77:32:b0:fc:
5d:bd:0a:8a:84:36:8c:df:c0:91:75:6b:50:27:5a:f2:92:84:
6c:de:27:8f:4f:e9:bb:23:0f:22:85:6d:3a:de:d5:ea:c3:5e:
a3:93:b4:0f:02:0c:cd:3a:86:1d:22:bf:9d:62:b8:01:b0:a5:
83:22:54:c0
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAY+CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzI0MTMyODQ2WhcNMjUwOTA1MTMyODQ2WjAYMRYw
FAYDVQQDEw02ODgyMzUxNC1jN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0ioAzPxz5sy0Z2plq/d2qtM0m0XizCE0FCEHdExMde9Ld44bBJqrmSDS
qIONtEffbENBVy+OVCppU/9fJGJvPhHwUw3P5eoJk1RhjxgNi/fX5f/u2nk3XWbn
55MzITEH8nq+XJ8kuzZLyCmX/1U8W/FZb/GxNg05rgEF/sExMp2LaG/XvSJn7cyO
/oBYtwFOYoHrAgSsJleGsa/mshi9eXiB39NNBS7oGa3LYAE/0gSR8yUI9t2gh7x7
jQb84y2F6/Jv9QDDVUHifcANMUWYpoDD4b9vFtSQyfuqyDwcri1i2ar7QqerEG5J
jk2W10IWdRuXQSplCwSwZ2sxGrSSxwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFLGf
ZuaVUdxclmVXknJjIp3uHJYMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzI5QkY3MDY4OTIxMUYwODdBRTM3N0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACa0dcDBACa0dwDBACa
1B4DBACa1QAwDQYJKoZIhvcNAQELBQADggEBAMQwQ3puCCF3iZxwyiLZPn3+2hwF
ELKVIqYJph5AP6Z55qs2wV5GTqIkR0Aj6wNWjPOxZjxQqPQjQSmAUm3Y5p33OvQ7
sxI94Wl6AKJdQtlUO6R/NOQh8Nd7pauDgpBLycShce76PEi4cbCWGiHqGHpVMJkZ
6aYqaUI8UxmMfdxKNzYOKdTDQFkbqUMX54PZh7Grz+rvtGaLYVE7pV69rFxRmDcA
7fziccpZPvvsv+YraJpxVXf1/HCOii2NyHdYMkPddzKw/F29CoqENozfwJF1a1An
WvKShGzeJ49P6bsjDyKFbTre1erDXqOTtA8CDM06hh0iv51iuAGwpYMiVMA=
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:25:02 2025 by rpki-client