Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9E19BC608711F09D36B390DAE4EC9C.roa
File: 5C9E19BC608711F09D36B390DAE4EC9C.roa (raw, json)
Hash identifier: n48/OyMrKk9g0pd+iOfOWaW4GlqoabAULhcuumlrdmA=
Subject key identifier: FD:B4:77:2F:45:A0:0B:1A:28:BC:45:BB:7E:B2:4A:4E:95:76:50:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9E19BC608711F09D36B390DAE4EC9C.roa
Signing time: Mon 14 Jul 2025 07:51:34 +0000
ROA not before: Mon 14 Jul 2025 07:51:29 +0000
ROA not after: Mon 18 Aug 2025 07:51:29 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101791 (0x18d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:51:29 2025 GMT
Not After : Aug 18 07:51:29 2025 GMT
Subject: CN=6874b706-eefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:d7:52:39:73:6e:2b:c2:aa:b4:3b:b0:8f:
f9:25:7a:f3:74:1f:09:69:73:cf:f6:86:35:27:6e:
fb:df:fa:14:59:a0:a1:3d:b2:d5:b9:31:39:39:e5:
55:da:52:ce:7b:50:69:72:06:ab:e7:01:9c:6c:1e:
2f:3b:85:60:b0:3c:5b:9c:9f:0c:5b:3e:27:40:8f:
79:8e:37:84:0b:9c:03:3d:60:4e:ce:9a:25:8f:06:
af:b0:f7:43:03:47:19:1c:0c:f7:2a:07:50:53:42:
8e:40:d6:db:65:23:c6:e1:77:ac:39:68:a3:f0:85:
69:bd:54:0a:d7:65:05:c1:74:1a:e0:d7:f8:cc:19:
18:ec:52:f0:2d:fd:6e:45:b9:48:eb:15:43:dc:4c:
f0:ec:b7:a8:89:07:09:75:e4:8c:c4:d7:02:22:4f:
06:aa:3e:8e:ce:9c:f2:5f:b8:cf:42:a2:b8:f7:30:
49:aa:22:ce:a5:71:f9:ce:30:eb:79:6a:66:fd:85:
1b:04:89:a9:42:7b:cf:3a:fa:38:48:a1:da:1f:b7:
bc:e5:eb:7e:45:62:dc:a9:a8:50:60:94:7f:9c:77:
ed:d8:b6:66:4e:c8:34:f9:e9:8c:d3:de:6b:7f:4b:
75:28:4e:41:05:74:35:c2:3c:d5:96:b2:45:57:b9:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B4:77:2F:45:A0:0B:1A:28:BC:45:BB:7E:B2:4A:4E:95:76:50:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9E19BC608711F09D36B390DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:53:02:b8:30:8b:4c:62:9c:dc:43:43:02:2a:58:42:19:a9:
00:d9:1e:df:ac:6b:8d:2a:3f:29:23:ec:07:4f:59:77:9a:f6:
73:61:b7:e4:1b:81:0b:4d:0c:bc:5e:e3:34:7e:f3:99:6b:7a:
4a:22:10:0d:c6:f5:24:dd:f2:e8:d7:8f:eb:4c:bf:cf:7b:99:
a6:05:7e:5b:89:fd:5a:ab:86:03:bd:8d:a4:79:32:34:cc:f6:
5f:e6:cc:81:d9:fe:6f:55:6f:9a:87:a7:30:5c:a8:25:3f:56:
48:f6:b3:6b:51:f9:bd:ae:53:ca:04:0d:bf:2f:86:c2:40:b8:
10:30:ff:5c:9f:56:17:c4:bb:9a:3a:55:4f:b7:07:dd:5c:fc:
e6:39:13:f2:4e:48:da:5e:1b:f0:88:6c:a6:17:c6:73:dc:5a:
58:1e:cf:97:19:dc:d7:f7:8a:ac:ab:40:52:22:f4:2d:6e:9c:
fe:28:2e:9a:ee:6a:03:ca:29:d1:88:ef:e8:a8:3e:26:e4:15:
08:fd:d9:84:91:37:69:7f:66:ba:2e:53:72:1b:e4:21:29:bd:
b5:b8:99:92:a2:ed:e2:76:24:4d:2e:60:8e:9f:da:15:d6:32:
96:5c:69:aa:49:f9:55:20:a1:e6:14:7a:75:de:9b:d7:ac:2b:
76:0e:94:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY2fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE0MDc1MTI5WhcNMjUwODE4MDc1MTI5WjAYMRYw
FAYDVQQDEw02ODc0YjcwNi1lZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqrzXUjlzbivCqrQ7sI/5JXrzdB8JaXPP9oY1J2773/oUWaChPbLVuTE5
OeVV2lLOe1Bpcgar5wGcbB4vO4VgsDxbnJ8MWz4nQI95jjeEC5wDPWBOzpoljwav
sPdDA0cZHAz3KgdQU0KOQNbbZSPG4XesOWij8IVpvVQK12UFwXQa4Nf4zBkY7FLw
Lf1uRblI6xVD3Ezw7LeoiQcJdeSMxNcCIk8Gqj6OzpzyX7jPQqK49zBJqiLOpXH5
zjDreWpm/YUbBImpQnvPOvo4SKHaH7e85et+RWLcqahQYJR/nHft2LZmTsg0+emM
095rf0t1KE5BBXQ1wjzVlrJFV7lCAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP20
dy9FoAsaKLxFu36ySk6VdlApMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QzlFMTlCQzYwODcxMUYwOUQzNkIzOTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsgeMA0GCSqGSIb3DQEB
CwUAA4IBAQAdUwK4MItMYpzcQ0MCKlhCGakA2R7frGuNKj8pI+wHT1l3mvZzYbfk
G4ELTQy8XuM0fvOZa3pKIhANxvUk3fLo14/rTL/Pe5mmBX5bif1aq4YDvY2keTI0
zPZf5syB2f5vVW+ah6cwXKglP1ZI9rNrUfm9rlPKBA2/L4bCQLgQMP9cn1YXxLua
OlVPtwfdXPzmORPyTkjaXhvwiGymF8Zz3FpYHs+XGdzX94qsq0BSIvQtbpz+KC6a
7moDyinRiO/oqD4m5BUI/dmEkTdpf2a6LlNyG+QhKb21uJmSou3idiRNLmCOn9oV
1jKWXGmqSflVIKHmFHp13pvXrCt2DpQV
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:26 2025 by rpki-client