Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4BAF8E5AB511F0B71825C8DAE4EC9C.roa
File: 7E4BAF8E5AB511F0B71825C8DAE4EC9C.roa (raw, json)
Hash identifier: H6wGsenhIuKUSB3prLdbIO6lJCFNxoe76kbGCcCibTI=
Subject key identifier: 54:DC:74:7D:3F:DD:3F:78:FB:BD:40:74:50:07:8D:45:96:57:AA:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4BAF8E5AB511F0B71825C8DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 22:06:41 +0000
ROA not before: Sun 06 Jul 2025 22:06:36 +0000
ROA not after: Wed 03 Sep 2025 22:06:36 +0000
asID: 18229
IP address blocks: 154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
154.210.155.0/24 maxlen: 24
154.210.156.0/24 maxlen: 24
154.210.159.0/24 maxlen: 24
154.210.186.0/24 maxlen: 24
154.210.187.0/24 maxlen: 24
154.210.188.0/24 maxlen: 24
154.210.189.0/24 maxlen: 24
154.210.214.0/24 maxlen: 24
154.210.216.0/24 maxlen: 24
154.210.217.0/24 maxlen: 24
154.210.218.0/24 maxlen: 24
154.210.219.0/24 maxlen: 24
154.210.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101322 (0x18bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 22:06:36 2025 GMT
Not After : Sep 3 22:06:36 2025 GMT
Subject: CN=686af371-5ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:73:66:58:ac:30:f0:76:a4:42:89:6e:1b:
22:b1:3a:92:6a:70:0b:c7:1e:13:47:c2:e0:95:70:
d4:3c:e7:6e:ae:d5:21:ac:b6:0a:3b:a4:6b:da:24:
28:d4:c1:98:96:a4:3c:c4:d5:70:1e:f1:a5:58:9f:
98:e8:f9:17:c8:8c:ae:64:a1:a0:ac:ca:e3:68:b7:
64:63:65:36:dc:bd:1a:d1:53:05:fd:6a:4a:0b:7a:
df:fd:bb:31:d0:36:dd:1b:83:97:89:09:32:48:12:
98:65:5d:d0:40:88:b5:cd:9c:71:fd:d0:b1:f5:b3:
36:e6:25:0a:74:26:2f:7e:4f:65:c6:6f:7b:58:dd:
e6:94:8b:fd:31:8c:63:90:ed:93:ee:10:0d:6a:46:
ba:5b:03:b3:ea:d6:36:2e:9a:04:e8:bf:45:7d:7e:
e2:0b:96:3d:88:83:80:5d:f8:32:30:e2:3f:72:d7:
ad:90:14:cf:22:82:57:f3:89:44:0e:d4:ab:00:05:
81:03:76:f7:b4:f9:70:59:9c:2b:5a:83:50:ff:a7:
56:bd:a0:70:26:82:f7:5d:29:59:39:d7:79:c3:0a:
01:db:27:3d:92:e9:aa:fa:35:d8:c9:fb:9e:21:52:
ab:ef:0d:f2:b1:4a:ce:14:c7:66:e7:5f:b2:39:88:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:74:7D:3F:DD:3F:78:FB:BD:40:74:50:07:8D:45:96:57:AA:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E4BAF8E5AB511F0B71825C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0/23
154.210.150.0-154.210.156.255
154.210.159.0/24
154.210.186.0-154.210.189.255
154.210.214.0/24
154.210.216.0/22
154.210.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fd:b2:ec:87:6f:63:70:be:c2:47:90:3d:b8:ba:49:fa:01:
b9:23:39:e9:36:01:d1:43:8f:b1:4b:25:e3:66:9d:10:1a:eb:
f5:06:3f:42:a2:6c:b8:75:f8:aa:ad:aa:64:50:68:ec:c1:4a:
66:49:99:c3:a9:1c:97:0a:16:b8:8f:6c:2b:5f:ca:4b:cd:98:
25:39:c8:25:37:05:af:50:2a:61:36:a4:88:d5:85:f7:1c:7a:
d5:f8:9f:c6:3b:0d:34:93:78:86:80:04:97:1c:c2:c7:c4:a3:
5a:79:cf:fb:05:4e:82:a5:92:1b:01:96:c1:64:f9:8a:0c:40:
fe:81:65:64:2c:79:84:9e:78:b2:1b:b7:1f:6b:e7:a6:5e:d9:
bb:ef:6b:59:22:cd:9a:6b:3e:a6:5f:82:db:a2:af:18:e9:37:
64:4e:5b:d9:ca:39:17:27:44:82:be:74:21:af:42:db:73:48:
25:3d:ec:c4:28:11:2f:bf:04:bf:61:e3:7e:2d:8b:74:81:1e:
b9:54:28:c6:a7:3b:ce:93:8e:ff:58:fe:04:ea:f9:85:f9:66:
49:40:84:79:b8:5e:73:6c:71:a9:f9:49:1d:93:72:07:e6:bd:
da:67:6b:74:2d:40:df:2e:30:2a:b3:05:4a:1c:ef:83:14:fa:
78:22:3f:a3
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAYvKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA2MjIwNjM2WhcNMjUwOTAzMjIwNjM2WjAYMRYw
FAYDVQQDEw02ODZhZjM3MS01ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvIJzZlisMPB2pEKJbhsisTqSanALxx4TR8LglXDUPOdurtUhrLYKO6Rr
2iQo1MGYlqQ8xNVwHvGlWJ+Y6PkXyIyuZKGgrMrjaLdkY2U23L0a0VMF/WpKC3rf
/bsx0DbdG4OXiQkySBKYZV3QQIi1zZxx/dCx9bM25iUKdCYvfk9lxm97WN3mlIv9
MYxjkO2T7hANaka6WwOz6tY2LpoE6L9FfX7iC5Y9iIOAXfgyMOI/ctetkBTPIoJX
84lEDtSrAAWBA3b3tPlwWZwrWoNQ/6dWvaBwJoL3XSlZOdd5wwoB2yc9kumq+jXY
yfueIVKr7w3ysUrOFMdm51+yOYi5PwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFFTc
dH0/3T94+71AdFAHjUWWV6rkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTRCQUY4RTVBQjUxMUYwQjcxODI1QzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBmtKAMAwDBAGa0pYDBACa
0pwDBACa0p8wDAMEAZrSugMEAZrSvAMEAJrS1gMEAprS2AMEAJrS3TANBgkqhkiG
9w0BAQsFAAOCAQEASv2y7IdvY3C+wkeQPbi6SfoBuSM56TYB0UOPsUsl42adEBrr
9QY/QqJsuHX4qq2qZFBo7MFKZkmZw6kclwoWuI9sK1/KS82YJTnIJTcFr1AqYTak
iNWF9xx61fifxjsNNJN4hoAElxzCx8SjWnnP+wVOgqWSGwGWwWT5igxA/oFlZCx5
hJ54shu3H2vnpl7Zu+9rWSLNmms+pl+C26KvGOk3ZE5b2co5FydEgr50Ia9C23NI
JT3sxCgRL78Ev2Hjfi2LdIEeuVQoxqc7zpOO/1j+BOr5hflmSUCEebhec2xxqflJ
HZNyB+a92mdrdC1A3y4wKrMFShzvgxT6eCI/ow==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:49 2025 by rpki-client