Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA039B085A6A11F0A3CC91E9DAE4EC9C.roa
File: CA039B085A6A11F0A3CC91E9DAE4EC9C.roa (raw, json)
Hash identifier: thBY1Lj9jsM1HErU09vCPoR3KdOYpqRcNADyKCq2bEw=
Subject key identifier: 0A:FF:3C:EC:C4:6B:E2:F1:CB:C0:E5:E4:50:44:B5:21:CA:E9:71:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA039B085A6A11F0A3CC91E9DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 13:11:55 +0000
ROA not before: Sun 06 Jul 2025 13:11:51 +0000
ROA not after: Sat 09 Aug 2025 13:11:51 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.213.193.0/24 maxlen: 24
154.213.194.0/24 maxlen: 24
154.213.195.0/24 maxlen: 24
154.213.196.0/24 maxlen: 24
154.213.197.0/24 maxlen: 24
154.213.198.0/24 maxlen: 24
154.213.199.0/24 maxlen: 24
154.213.202.0/24 maxlen: 24
154.213.203.0/24 maxlen: 24
154.213.204.0/24 maxlen: 24
154.214.1.0/24 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101232 (0x18b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 13:11:51 2025 GMT
Not After : Aug 9 13:11:51 2025 GMT
Subject: CN=686a761b-1956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:b3:63:30:26:02:d5:6f:ba:c7:8b:51:02:
c8:18:00:ef:a8:6e:fb:ea:7e:14:e5:56:c0:40:55:
ca:4f:19:9f:13:c2:33:49:aa:30:2c:c2:c3:1b:36:
fd:ec:f7:ca:96:8d:f8:e0:5e:97:37:f6:4c:a2:84:
02:ee:13:87:26:c7:53:c6:e9:25:23:e8:60:9d:23:
8a:cd:0a:e6:c1:71:d0:d8:78:1b:a9:bb:fa:f2:7a:
2c:9e:96:e4:61:8f:2e:9a:83:67:b7:ef:12:a5:11:
b7:9c:db:da:a9:db:fc:65:01:93:d4:7d:6b:34:22:
b6:77:e3:e4:e9:f1:82:94:e3:5e:3f:f2:aa:7d:e2:
e4:12:f5:9d:5a:4f:9f:99:5a:81:e6:ad:39:7a:f4:
44:1a:11:24:69:04:7a:c0:c1:ff:57:2e:43:7d:68:
42:ee:43:40:90:38:5a:a3:97:45:81:e0:9c:23:e7:
d7:a1:54:19:c0:7d:1b:10:ea:3c:c1:08:0b:c6:2c:
b7:aa:93:57:39:ec:81:f6:18:ae:f8:1c:a0:27:c4:
02:0d:8b:f6:7a:8a:f8:37:c9:6e:47:77:1f:fd:4f:
38:bb:da:e7:56:7e:cb:e5:d8:8a:fc:83:9f:a1:eb:
c2:b0:4a:b9:e5:f2:27:4d:81:3e:d0:39:58:c0:fe:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:3C:EC:C4:6B:E2:F1:CB:C0:E5:E4:50:44:B5:21:CA:E9:71:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA039B085A6A11F0A3CC91E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.213.193.0-154.213.199.255
154.213.202.0-154.213.204.255
154.214.1.0/24
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:91:35:4c:d7:fc:0e:c8:33:91:17:79:47:e0:8c:08:33:
56:db:93:4d:a3:c3:da:6e:6a:91:0f:74:cd:5e:53:8d:58:a0:
16:73:07:89:ef:15:dc:2c:67:57:02:61:5e:b1:b5:69:75:66:
56:07:65:16:1b:de:9f:81:d1:33:ce:10:48:e1:76:92:47:6c:
98:c9:b8:94:af:cb:7c:97:a1:c1:52:05:1a:af:23:07:d2:fd:
6e:99:23:1a:9c:a7:bc:dd:fd:b4:5a:96:81:02:ca:20:c2:b6:
02:fb:2d:36:ab:24:b2:d2:c0:23:6d:28:2c:bc:c7:28:93:10:
65:ef:38:b0:53:6d:bb:de:11:b1:cc:f8:a7:ac:e8:66:9a:d3:
73:07:ba:54:e3:b5:22:66:5c:ab:de:e8:06:37:a0:82:b5:3a:
26:95:b6:6b:b9:fc:12:2d:b0:6d:a5:b2:54:3e:76:48:d9:79:
d3:a7:10:cf:9c:46:50:45:39:d7:ac:14:52:2f:4d:88:d0:4b:
60:f7:c2:04:aa:58:3e:0b:0e:48:82:2c:47:5a:fb:d7:77:f7:
db:9d:02:74:1f:43:66:ee:b1:c9:37:0f:a1:2d:a6:f7:b8:5c:
4e:77:bc:65:71:36:52:ee:d2:c8:76:cb:fa:89:d7:97:5b:fe:
45:20:4c:b4
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIDAYtwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA2MTMxMTUxWhcNMjUwODA5MTMxMTUxWjAYMRYw
FAYDVQQDEw02ODZhNzYxYi0xOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2fezYzAmAtVvuseLUQLIGADvqG776n4U5VbAQFXKTxmfE8IzSaowLMLD
Gzb97PfKlo344F6XN/ZMooQC7hOHJsdTxuklI+hgnSOKzQrmwXHQ2Hgbqbv68nos
npbkYY8umoNnt+8SpRG3nNvaqdv8ZQGT1H1rNCK2d+Pk6fGClONeP/KqfeLkEvWd
Wk+fmVqB5q05evREGhEkaQR6wMH/Vy5DfWhC7kNAkDhao5dFgeCcI+fXoVQZwH0b
EOo8wQgLxiy3qpNXOeyB9hiu+BygJ8QCDYv2eor4N8luR3cf/U84u9rnVn7L5diK
/IOfoevCsEq55fInTYE+0DlYwP6u7wIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFAr/
POzEa+Lxy8Dl5FBEtSHK6XEhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQTAzOUIwODVBNkExMUYwQTNDQzkxRTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQCmsGYAwQBmsGeAwQBmscO
AwQBmsdEAwQDmtWgMAwDBACa1cEDBAOa1cAwDAMEAZrVygMEAJrVzAMEAJrWAQME
AJrehDANBgkqhkiG9w0BAQsFAAOCAQEAnzuRNUzX/A7IM5EXeUfgjAgzVtuTTaPD
2m5qkQ90zV5TjVigFnMHie8V3CxnVwJhXrG1aXVmVgdlFhven4HRM84QSOF2kkds
mMm4lK/LfJehwVIFGq8jB9L9bpkjGpynvN39tFqWgQLKIMK2AvstNqskstLAI20o
LLzHKJMQZe84sFNtu94Rscz4p6zoZprTcwe6VOO1ImZcq97oBjeggrU6JpW2a7n8
Ei2wbaWyVD52SNl506cQz5xGUEU516wUUi9NiNBLYPfCBKpYPgsOSIIsR1r713f3
250CdB9DZu6xyTcPoS2m97hcTne8ZXE2Uu7SyHbL+onXl1v+RSBMtA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:48 2025 by rpki-client