Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4BC86C65A7811F0870AE3C2DAE4EC9C.roa
File: A4BC86C65A7811F0870AE3C2DAE4EC9C.roa (raw, json)
Hash identifier: ajl48MtfpJdZQHrDH2P8YGID/bgj8uRZkolg/LPiWq4=
Subject key identifier: B0:23:26:88:C1:EC:14:73:85:1D:30:CB:C8:54:23:19:0C:33:64:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4BC86C65A7811F0870AE3C2DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 14:51:06 +0000
ROA not before: Sun 06 Jul 2025 14:51:01 +0000
ROA not after: Sun 02 Aug 2026 14:51:01 +0000
asID: 984
IP address blocks: 154.200.44.0/24 maxlen: 24
154.222.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101246 (0x18b7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 14:51:01 2025 GMT
Not After : Aug 2 14:51:01 2026 GMT
Subject: CN=686a8d5a-3710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:61:d6:c8:56:65:d3:d1:a6:d2:7b:d0:c9:
0b:6d:e0:cd:8c:33:61:a9:3a:74:ee:01:05:e1:ea:
0d:b8:be:f7:58:d2:b4:2b:8b:76:c4:4c:7f:93:ce:
df:cc:af:d0:f7:93:b9:8a:5c:d3:42:a7:b2:61:d8:
e3:da:6a:ae:70:2e:43:90:c1:ad:32:8a:8b:1d:fb:
32:3b:f8:26:b2:5a:24:14:ea:5c:27:09:97:4d:aa:
49:d8:e1:81:38:35:00:ad:7e:5e:fb:1c:a6:3f:47:
97:cf:58:42:fc:eb:66:d9:5d:3a:da:65:9b:9e:34:
ca:2c:d4:8e:13:ca:48:e1:35:64:b5:a2:4e:09:2c:
34:ec:e5:8c:d2:a9:9a:01:ce:2d:bf:24:6b:68:a5:
bc:c9:a2:26:5e:8b:a7:7c:ec:a9:b4:9a:9b:a6:6a:
77:b5:2a:0a:15:6c:88:e5:6c:f3:b2:4b:47:80:89:
0e:d6:2c:fc:e0:e8:b2:98:16:ff:eb:86:bc:68:a5:
f0:e1:f6:6d:41:5e:4d:7d:90:7f:87:c9:77:4f:03:
4d:10:bb:90:76:e0:69:04:32:14:46:a7:24:c9:08:
14:4f:cc:74:27:8d:ab:f9:24:ee:2b:eb:d3:68:dc:
30:ca:8b:d2:65:07:31:0c:e0:39:12:09:bd:2f:13:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:23:26:88:C1:EC:14:73:85:1D:30:CB:C8:54:23:19:0C:33:64:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4BC86C65A7811F0870AE3C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.44.0/24
154.222.32.0/24
Signature Algorithm: sha256WithRSAEncryption
52:96:d4:4a:e7:82:b3:44:50:58:13:7e:a3:bb:d8:c4:79:c0:
d7:57:b5:34:a7:ab:16:d7:57:d6:dc:a3:2e:ad:24:f3:55:fe:
4e:4c:73:ba:5f:98:a5:b7:bb:34:46:30:16:d4:95:8d:bb:06:
99:1b:a1:07:18:a4:35:38:4e:19:93:9c:e5:37:c8:ab:24:5b:
71:67:df:53:15:17:c6:65:b0:03:cc:09:69:6a:16:6e:f6:51:
a8:f6:05:85:b2:43:21:0e:85:d0:48:fa:41:bf:b0:ca:d6:bc:
2c:96:27:a1:fc:9f:65:1a:95:a9:78:0b:72:2c:b1:ba:e5:bf:
8a:84:86:c6:43:77:bf:90:86:7f:1b:1f:47:cb:21:19:ea:34:
81:be:f4:de:aa:f2:0e:2b:4e:7c:73:8b:8a:33:ef:78:70:4c:
75:6e:d4:44:9f:ef:8b:0d:1e:2e:26:d9:ea:2a:58:32:5d:98:
fd:ca:2d:fb:55:d1:10:fb:15:5e:55:2e:8b:f1:15:b9:ff:37:
e5:87:ae:0a:1b:c9:55:df:3c:42:94:1f:f0:2f:c1:18:b6:f4:
de:86:c3:48:d4:a4:de:de:42:d5:b2:20:0b:ac:08:3e:fd:b5:
15:30:2a:f8:be:24:1d:96:23:df:9d:3d:f3:48:c9:e8:e9:b6:
5e:61:7b:58
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYt+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA2MTQ1MTAxWhcNMjYwODAyMTQ1MTAxWjAYMRYw
FAYDVQQDEw02ODZhOGQ1YS0zNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5dBh1shWZdPRptJ70MkLbeDNjDNhqTp07gEF4eoNuL73WNK0K4t2xEx/
k87fzK/Q95O5ilzTQqeyYdjj2mqucC5DkMGtMoqLHfsyO/gmslokFOpcJwmXTapJ
2OGBODUArX5e+xymP0eXz1hC/Otm2V062mWbnjTKLNSOE8pI4TVktaJOCSw07OWM
0qmaAc4tvyRraKW8yaImXounfOyptJqbpmp3tSoKFWyI5WzzsktHgIkO1iz84Oiy
mBb/64a8aKXw4fZtQV5NfZB/h8l3TwNNELuQduBpBDIURqckyQgUT8x0J42r+STu
K+vTaNwwyovSZQcxDOA5Egm9LxP5QQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLAj
JojB7BRzhR0wy8hUIxkMM2RSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNEJDODZDNjVBNzgxMUYwODcwQUUzQzJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsgsAwQAmt4gMA0GCSqG
SIb3DQEBCwUAA4IBAQBSltRK54KzRFBYE36ju9jEecDXV7U0p6sW11fW3KMurSTz
Vf5OTHO6X5ilt7s0RjAW1JWNuwaZG6EHGKQ1OE4Zk5zlN8irJFtxZ99TFRfGZbAD
zAlpahZu9lGo9gWFskMhDoXQSPpBv7DK1rwslieh/J9lGpWpeAtyLLG65b+KhIbG
Q3e/kIZ/Gx9HyyEZ6jSBvvTeqvIOK058c4uKM+94cEx1btREn++LDR4uJtnqKlgy
XZj9yi37VdEQ+xVeVS6L8RW5/zflh64KG8lV3zxClB/wL8EYtvTehsNI1KTe3kLV
siALrAg+/bUVMCr4viQdliPfnT3zSMno6bZeYXtY
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:00 2025 by rpki-client