Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABBD0A24617E11F08BDAB5D4DAE4EC9C.roa
File: ABBD0A24617E11F08BDAB5D4DAE4EC9C.roa (raw, json)
Hash identifier: Ndfmu3O4IBCa2/1zNF9OnS17Hc/bPAaPhS39O97fZno=
Subject key identifier: 56:AC:30:67:41:7C:FA:97:0E:A8:F8:DA:7A:D6:2B:23:0A:7C:AF:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018DE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABBD0A24617E11F08BDAB5D4DAE4EC9C.roa
Signing time: Tue 15 Jul 2025 13:21:53 +0000
ROA not before: Tue 15 Jul 2025 13:21:48 +0000
ROA not after: Thu 22 Jan 2026 13:21:48 +0000
asID: 135419
IP address blocks: 154.209.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101858 (0x18de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 13:21:48 2025 GMT
Not After : Jan 22 13:21:48 2026 GMT
Subject: CN=687655f1-6066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:6a:c0:63:47:26:93:44:e0:9a:2c:5f:47:
95:34:43:42:ad:ef:8b:46:9c:81:38:cc:42:8a:9d:
2c:4c:01:86:3f:35:4f:b9:4f:e3:55:ee:1e:c3:dc:
66:e9:1e:85:17:a3:86:a7:98:30:97:52:64:44:89:
55:2e:da:ef:f8:31:28:d2:9a:7a:6a:64:8a:2c:c1:
f1:94:50:95:7f:3e:d0:21:53:54:fb:e4:50:2c:1e:
5c:4b:18:17:56:37:a0:e5:e2:23:5e:f5:36:29:4b:
f9:08:04:82:8d:30:c5:f3:27:95:ec:6d:72:8b:e9:
81:3a:47:ff:a0:3f:07:86:a4:67:a5:08:80:fc:dd:
2e:f1:72:3c:16:cf:43:c0:6c:52:d7:9d:0c:98:d4:
0e:25:b6:92:5c:10:a8:83:b2:14:a7:4e:f6:d3:ce:
65:58:56:14:0b:0a:1e:0f:7e:c2:eb:57:7d:0e:a8:
59:99:ae:7b:29:ca:6f:3e:81:d7:da:6a:8e:e2:f2:
aa:5e:d8:d2:70:65:73:55:b9:ac:86:87:a2:3c:62:
cc:64:b2:64:72:b0:f2:81:76:c6:ed:c7:5a:c1:32:
0b:97:86:aa:41:92:61:c4:c8:07:ab:bb:8b:d5:43:
64:92:5c:b4:45:ed:03:49:03:cf:bb:d2:60:6d:78:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:30:67:41:7C:FA:97:0E:A8:F8:DA:7A:D6:2B:23:0A:7C:AF:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABBD0A24617E11F08BDAB5D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4b:2e:8c:dc:6f:50:b3:e6:aa:e8:f5:10:24:37:19:df:9e:
4b:2f:43:a8:1f:12:db:33:e2:22:a0:e9:c4:26:6f:33:fe:b2:
ae:54:b1:0f:81:63:3e:5f:80:2b:3a:63:a5:bc:35:04:36:6e:
b5:f5:2f:94:2c:bc:26:90:09:67:f7:00:5d:90:e7:4d:fa:9d:
63:e3:27:33:32:d5:b4:89:f6:7c:1a:34:99:47:44:84:76:76:
5b:27:da:ca:75:ce:3b:2c:da:f5:42:6d:6f:27:ee:a2:bf:88:
9e:3d:9a:72:a5:4c:2c:1a:14:10:a2:65:d0:9c:e7:6f:b1:85:
11:82:35:a4:6e:04:d0:12:d6:4f:a6:cd:0e:76:6a:a4:dd:da:
d8:d8:e0:d3:8a:46:ff:5a:23:a7:e4:d5:fe:5b:55:61:71:0b:
2c:3b:06:d9:55:6c:e0:fb:bd:e8:65:ea:a7:d5:af:04:c0:ac:
fd:c4:dc:07:7b:f6:a7:f4:ac:f0:a7:42:dd:1b:69:0a:4d:12:
df:ff:fd:c2:a6:3c:9d:07:f4:03:be:28:8a:32:e1:a2:74:12:
36:d1:8a:17:1b:c8:0d:c8:f5:65:0e:93:d9:6c:36:3f:53:d3:
52:b0:41:de:81:f6:e9:61:59:31:01:a9:8d:fb:5e:48:e5:08:
ae:47:ed:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAY3iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE1MTMyMTQ4WhcNMjYwMTIyMTMyMTQ4WjAYMRYw
FAYDVQQDEw02ODc2NTVmMS02MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0dpqwGNHJpNE4JosX0eVNENCre+LRpyBOMxCip0sTAGGPzVPuU/jVe4e
w9xm6R6FF6OGp5gwl1JkRIlVLtrv+DEo0pp6amSKLMHxlFCVfz7QIVNU++RQLB5c
SxgXVjeg5eIjXvU2KUv5CASCjTDF8yeV7G1yi+mBOkf/oD8HhqRnpQiA/N0u8XI8
Fs9DwGxS150MmNQOJbaSXBCog7IUp072085lWFYUCwoeD37C61d9DqhZma57Kcpv
PoHX2mqO4vKqXtjScGVzVbmshoeiPGLMZLJkcrDygXbG7cdawTILl4aqQZJhxMgH
q7uL1UNkkly0Re0DSQPPu9JgbXherQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFas
MGdBfPqXDqj42nrWKyMKfK/PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQkJEMEEyNDYxN0UxMUYwOEJEQUI1RDREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGSMA0GCSqGSIb3DQEB
CwUAA4IBAQATSy6M3G9Qs+aq6PUQJDcZ355LL0OoHxLbM+IioOnEJm8z/rKuVLEP
gWM+X4ArOmOlvDUENm619S+ULLwmkAln9wBdkOdN+p1j4yczMtW0ifZ8GjSZR0SE
dnZbJ9rKdc47LNr1Qm1vJ+6iv4iePZpypUwsGhQQomXQnOdvsYURgjWkbgTQEtZP
ps0Odmqk3drY2ODTikb/WiOn5NX+W1VhcQssOwbZVWzg+73oZeqn1a8EwKz9xNwH
e/an9Kzwp0LdG2kKTRLf//3CpjydB/QDviiKMuGidBI20YoXG8gNyPVlDpPZbDY/
U9NSsEHegfbpYVkxAamN+15I5QiuR+3W
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:43 2025 by rpki-client