Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/702B3A4A5E5311F0A232DCB1DAE4EC9C.roa
File: 702B3A4A5E5311F0A232DCB1DAE4EC9C.roa (raw, json)
Hash identifier: MAlVBjefYeyFHoEqIbzvnuQo20BDpYDj/E9MOA1CkOc=
Subject key identifier: A4:EB:91:99:2D:35:FD:0D:0D:11:23:EE:6A:0F:77:14:05:56:4B:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018D72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/702B3A4A5E5311F0A232DCB1DAE4EC9C.roa
Signing time: Fri 11 Jul 2025 12:34:51 +0000
ROA not before: Fri 11 Jul 2025 12:34:46 +0000
ROA not after: Thu 14 Aug 2025 12:34:46 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
154.201.35.0/24 maxlen: 24
154.202.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101746 (0x18d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 12:34:46 2025 GMT
Not After : Aug 14 12:34:46 2025 GMT
Subject: CN=687104eb-31b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:fd:a5:2f:a2:77:79:2d:95:2a:b4:21:69:
4e:8d:38:3c:fc:86:17:0f:64:71:ae:c2:1f:21:50:
71:61:39:31:53:6f:a9:f4:38:86:37:17:b4:f0:e1:
a6:eb:b8:47:f1:6c:fe:b9:b3:b3:fd:bf:d3:1b:79:
48:26:05:c8:24:db:e8:b8:b8:e6:22:14:b7:6a:47:
4b:d4:50:58:b2:e6:45:6e:5c:6d:86:27:f1:85:2f:
42:ce:0a:bb:8b:34:ff:d7:52:52:55:67:91:22:e0:
0b:2b:8b:c6:37:5d:e6:1a:f3:f6:82:57:e3:51:b3:
46:ec:43:d1:1e:3e:d0:57:8c:fe:ed:8a:c4:70:5b:
2e:a5:5f:19:6c:48:5e:33:8b:41:7c:70:65:6c:9d:
43:dd:81:a6:60:34:6e:f0:79:41:49:56:7f:dd:36:
ba:f2:db:7f:2e:da:2f:1d:3d:87:b3:d6:4f:62:80:
9e:f9:44:5a:80:87:0a:97:ae:1b:39:28:e9:c4:b6:
2a:b9:72:6d:2b:60:9a:a3:81:42:fd:dc:e6:2b:0f:
1d:8f:c2:f7:71:2c:ee:70:79:f6:32:b3:04:7d:21:
82:51:0b:ce:d8:59:f7:c6:77:fa:56:43:ae:83:aa:
69:29:ad:e8:8d:37:af:27:44:94:28:f3:04:52:ba:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:91:99:2D:35:FD:0D:0D:11:23:EE:6A:0F:77:14:05:56:4B:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/702B3A4A5E5311F0A232DCB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
154.201.35.0/24
154.202.64.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0c:32:02:5e:ac:33:a8:76:66:9b:2e:a5:8c:fa:a8:a3:a7:
e6:da:80:f9:3c:c8:63:d3:2f:bd:52:c4:f1:3d:16:3c:2e:c4:
2c:b2:d1:a8:2e:3c:bf:9f:51:ef:4e:83:3b:1f:7a:ee:68:91:
1e:5d:d2:45:62:98:aa:06:3b:bb:eb:95:2f:af:60:6e:e2:5e:
6f:7d:f3:bf:d3:ef:b2:ba:19:ae:8b:93:95:6d:09:31:df:0d:
6e:7f:84:a8:9f:79:4b:af:c4:c8:47:68:fe:81:08:9c:38:68:
7d:8b:ef:16:d1:90:72:3b:17:96:76:ed:c9:84:67:36:52:c3:
c4:f9:1b:bc:bc:a5:96:f0:46:18:33:3a:15:e6:b4:74:a7:87:
74:24:50:db:88:2a:67:5c:0a:d8:2c:71:cb:a5:d6:0d:d3:63:
ab:8d:bb:93:79:f1:0a:ca:4b:e7:27:47:b4:62:f4:be:7d:6e:
e0:a0:9f:43:20:0d:a9:fb:f1:1a:3c:55:d9:e3:a1:60:a7:68:
97:a0:10:cf:54:6e:e6:2c:39:e3:dc:af:cb:46:94:51:b6:28:
e1:c1:8d:5e:15:4d:f7:c3:30:e6:f0:e5:34:d6:ff:f4:c3:0e:
f5:06:76:dd:0c:4b:b5:6b:bb:b0:6b:e5:6b:1b:d8:22:80:eb:
3d:8d:31:39
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAY1yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzExMTIzNDQ2WhcNMjUwODE0MTIzNDQ2WjAYMRYw
FAYDVQQDEw02ODcxMDRlYi0zMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5hD9pS+id3ktlSq0IWlOjTg8/IYXD2RxrsIfIVBxYTkxU2+p9DiGNxe0
8OGm67hH8Wz+ubOz/b/TG3lIJgXIJNvouLjmIhS3akdL1FBYsuZFblxthifxhS9C
zgq7izT/11JSVWeRIuALK4vGN13mGvP2glfjUbNG7EPRHj7QV4z+7YrEcFsupV8Z
bEheM4tBfHBlbJ1D3YGmYDRu8HlBSVZ/3Ta68tt/LtovHT2Hs9ZPYoCe+URagIcK
l64bOSjpxLYquXJtK2Cao4FC/dzmKw8dj8L3cSzucHn2MrMEfSGCUQvO2Fn3xnf6
VkOug6ppKa3ojTevJ0SUKPMEUrqucQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKTr
kZktNf0NDREj7moPdxQFVkvTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MDJCM0E0QTVFNTMxMUYwQTIzMkRDQjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmskgAwQAmskjAwQAmspA
MA0GCSqGSIb3DQEBCwUAA4IBAQCEDDICXqwzqHZmmy6ljPqoo6fm2oD5PMhj0y+9
UsTxPRY8LsQsstGoLjy/n1HvToM7H3ruaJEeXdJFYpiqBju765Uvr2Bu4l5vffO/
0++yuhmui5OVbQkx3w1uf4Son3lLr8TIR2j+gQicOGh9i+8W0ZByOxeWdu3JhGc2
UsPE+Ru8vKWW8EYYMzoV5rR0p4d0JFDbiCpnXArYLHHLpdYN02OrjbuTefEKykvn
J0e0YvS+fW7goJ9DIA2p+/EaPFXZ46Fgp2iXoBDPVG7mLDnj3K/LRpRRtijhwY1e
FU33wzDm8OU01v/0ww71BnbdDEu1a7uwa+VrG9gigOs9jTE5
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:01:46 2025 by rpki-client