Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AFCD8E58F211F0A0A9DED6DAE4EC9C.roa
File: A7AFCD8E58F211F0A0A9DED6DAE4EC9C.roa (raw, json)
Hash identifier: /26WrVoMH4UnFtctwJZIX17u5bQnQQ1zzirTUVUTjcI=
Subject key identifier: DE:69:A3:02:D1:11:C0:BE:CB:64:57:63:5A:7D:5F:F9:BD:B6:8F:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018A7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AFCD8E58F211F0A0A9DED6DAE4EC9C.roa
Signing time: Fri 04 Jul 2025 16:19:27 +0000
ROA not before: Fri 04 Jul 2025 16:19:22 +0000
ROA not after: Fri 17 Jul 2026 16:19:22 +0000
asID: 400619
IP address blocks: 154.193.192.0/18 maxlen: 24
154.202.117.0/24 maxlen: 24
154.202.118.0/23 maxlen: 24
154.202.120.0/21 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.210.2.0/24 maxlen: 24
154.211.4.0/22 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100990 (0x18a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 16:19:22 2025 GMT
Not After : Jul 17 16:19:22 2026 GMT
Subject: CN=6867ff0f-c936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:95:b0:ab:e4:be:3a:d8:4c:6d:c1:14:51:
ab:25:09:11:38:06:42:10:c7:a5:75:d8:14:e6:47:
99:04:19:0e:9b:06:02:b2:44:72:43:f2:f2:98:92:
bb:93:43:ee:b6:b2:b0:23:89:1f:64:cc:e0:6c:ae:
5f:0d:58:81:1e:ec:2d:3a:95:5a:e8:b5:3d:04:7b:
12:25:b9:51:d3:44:ec:66:15:2e:5a:d3:31:fa:54:
47:be:8a:83:76:cf:f0:48:56:21:2d:b2:44:dc:e6:
c6:f4:86:9e:1d:c8:8e:61:6a:ad:cf:40:5d:b6:01:
eb:8e:e7:70:99:0c:5e:7e:b7:9e:ab:65:27:9b:8b:
f9:29:b3:f2:28:3a:14:85:70:27:d3:08:e2:54:a0:
8d:31:b2:64:55:04:53:3e:d8:0b:07:9e:6c:bd:42:
ba:93:84:09:03:ed:45:00:e6:e8:a0:fa:6e:ff:98:
77:0b:16:75:90:28:f3:d9:f1:2d:4b:37:5d:40:ae:
63:46:e2:11:48:54:4b:68:d4:b7:54:a1:d9:7b:95:
6b:6b:d7:ce:df:3d:f8:28:07:7d:31:89:84:c8:12:
46:a7:74:1e:96:87:99:da:4f:e8:65:7d:95:9b:50:
7b:52:e8:69:4a:c8:cd:ed:d7:4c:81:a4:08:08:d8:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:A3:02:D1:11:C0:BE:CB:64:57:63:5A:7D:5F:F9:BD:B6:8F:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AFCD8E58F211F0A0A9DED6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.202.117.0-154.202.127.255
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
154.211.4.0/22
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
89:19:b8:39:ad:a9:2b:28:f6:39:a0:b5:e9:48:6b:76:d4:7c:
df:14:30:50:0a:3d:fe:4c:6a:c7:24:67:7a:36:9d:c5:59:c5:
8b:17:b0:6a:32:38:19:e6:cd:89:f1:25:6b:4e:1a:00:18:7b:
9d:5c:cf:37:c3:2b:5c:2c:48:96:f8:39:da:e8:3e:b5:e6:ad:
df:b5:af:3d:0c:d8:b5:8c:8a:e5:ae:fb:a7:48:53:d6:0a:f6:
7f:e8:c0:66:b2:e2:fe:f2:73:5c:02:60:a4:22:85:13:61:d6:
e7:04:5d:45:47:44:74:28:fa:f1:85:24:fe:c6:e8:57:6b:88:
2e:ed:54:81:d1:5b:16:5e:76:1f:45:df:00:df:bb:93:57:ef:
37:63:da:a9:eb:b1:91:54:a7:71:96:0e:9f:77:4f:36:95:81:
69:72:d4:ec:bd:80:69:a2:95:a0:4c:45:33:f2:83:db:0d:a6:
fb:5a:01:37:16:04:50:1f:6a:b7:73:b2:07:76:1c:fb:04:8c:
41:12:28:60:be:82:db:07:07:15:d3:d0:73:5a:45:45:c6:c5:
b0:2e:8f:03:f0:e1:97:d9:78:aa:75:a5:5c:ac:62:dd:42:80:
ed:f2:aa:1f:a9:e1:3f:17:21:81:7f:fa:ff:12:d3:66:97:53:
1d:bc:2c:05
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAYp+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA0MTYxOTIyWhcNMjYwNzE3MTYxOTIyWjAYMRYw
FAYDVQQDEw02ODY3ZmYwZi1jOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAui2VsKvkvjrYTG3BFFGrJQkROAZCEMelddgU5keZBBkOmwYCskRyQ/Ly
mJK7k0PutrKwI4kfZMzgbK5fDViBHuwtOpVa6LU9BHsSJblR00TsZhUuWtMx+lRH
voqDds/wSFYhLbJE3ObG9IaeHciOYWqtz0BdtgHrjudwmQxefreeq2Unm4v5KbPy
KDoUhXAn0wjiVKCNMbJkVQRTPtgLB55svUK6k4QJA+1FAObooPpu/5h3CxZ1kCjz
2fEtSzddQK5jRuIRSFRLaNS3VKHZe5Vra9fO3z34KAd9MYmEyBJGp3QeloeZ2k/o
ZX2Vm1B7UuhpSsjN7ddMgaQICNiORwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFN5p
owLREcC+y2RXY1p9X/m9to+9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BN0FGQ0Q4RTU4RjIxMUYwQTBBOURFRDZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAATA5AwQGmsHAMAwDBACaynUDBAea
ygADBAOazAgDBAaazIADBACa0gIDBAKa0wQwCwMEAZrZ6gMDAZrYMA0GCSqGSIb3
DQEBCwUAA4IBAQCJGbg5rakrKPY5oLXpSGt21HzfFDBQCj3+TGrHJGd6Np3FWcWL
F7BqMjgZ5s2J8SVrThoAGHudXM83wytcLEiW+Dna6D615q3fta89DNi1jIrlrvun
SFPWCvZ/6MBmsuL+8nNcAmCkIoUTYdbnBF1FR0R0KPrxhST+xuhXa4gu7VSB0VsW
XnYfRd8A37uTV+83Y9qp67GRVKdxlg6fd082lYFpctTsvYBpopWgTEUz8oPbDab7
WgE3FgRQH2q3c7IHdhz7BIxBEihgvoLbBwcV09BzWkVFxsWwLo8D8OGX2XiqdaVc
rGLdQoDt8qofqeE/FyGBf/r/EtNml1MdvCwF
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:54:21 2025 by rpki-client