Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDF9E08859AD11F0A6DD589FDAE4EC9C.roa
File: FDF9E08859AD11F0A6DD589FDAE4EC9C.roa (raw, json)
Hash identifier: AI1ldcghL5cUZ7OUsTz6+tFSw0LoGFkx0TpFsgN6ngo=
Subject key identifier: E8:ED:02:B0:51:66:24:6E:F6:A7:A0:E7:34:87:C8:54:08:12:AC:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDF9E08859AD11F0A6DD589FDAE4EC9C.roa
Signing time: Sat 05 Jul 2025 14:40:28 +0000
ROA not before: Sat 05 Jul 2025 14:40:21 +0000
ROA not after: Sun 24 Aug 2025 14:40:21 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101130 (0x18b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 14:40:21 2025 GMT
Not After : Aug 24 14:40:21 2025 GMT
Subject: CN=6869395c-726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:12:47:b1:f6:d2:8f:5c:a6:06:24:94:34:
cb:6a:18:b6:71:c9:35:5b:4b:5b:76:df:d7:17:5f:
32:21:69:cd:1d:dd:ed:77:85:02:50:0a:1d:b6:ca:
b9:8b:0e:1e:37:91:f9:6e:8d:29:9c:12:84:af:c4:
ae:81:44:f9:fc:fb:f6:11:bc:85:3f:3b:08:d9:37:
84:64:26:04:6b:f6:fa:3a:31:94:de:0f:af:ea:1f:
b2:d9:c3:51:1c:a7:53:ca:3b:bc:96:61:d1:8e:8a:
fa:69:0c:c6:02:67:d4:2c:5e:6b:fb:f4:05:e9:d6:
5e:81:66:88:0d:31:9c:6b:50:a8:01:60:26:b7:97:
1b:b5:43:a1:5c:5a:c4:25:f3:91:5c:31:ef:a8:80:
a0:18:82:18:c8:c9:98:9a:d4:6e:0d:f5:d5:ad:a3:
9a:68:51:98:e9:09:9a:f8:da:68:4c:a4:c1:3c:2e:
17:39:33:61:a0:53:69:75:63:26:df:c5:87:68:50:
0d:62:0c:5f:a0:fa:c8:ca:2d:c9:eb:6b:6f:23:95:
dc:31:c3:3b:db:17:78:03:a0:0c:2f:e2:1d:c7:dc:
c3:20:59:1c:09:9a:60:13:2f:c7:b9:bb:5a:de:c2:
16:b5:ec:c4:72:97:6d:a8:5d:0f:c1:d8:59:b2:09:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:02:B0:51:66:24:6E:F6:A7:A0:E7:34:87:C8:54:08:12:AC:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDF9E08859AD11F0A6DD589FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
55:8f:10:3d:40:4e:39:d8:77:20:42:88:f4:b9:83:3a:13:1d:
cb:20:a9:73:5f:9c:6b:6e:4b:07:f7:cf:8c:e0:fd:aa:b5:f9:
92:66:be:4f:da:c8:7a:18:a5:c8:1f:cb:84:ab:c5:5c:8d:48:
24:7f:b2:4d:72:67:c7:55:0e:5f:3b:81:e6:ef:24:8a:32:2d:
94:33:80:c1:61:1d:49:b2:e3:d7:88:21:ca:fc:9c:c0:47:78:
ed:b6:d2:5b:98:a0:17:38:c0:19:04:99:76:6f:12:e1:64:bd:
84:e4:19:50:dd:cf:ad:6e:79:c8:93:23:d4:e8:54:fd:9e:a8:
f7:c2:77:ad:1d:c7:cf:88:df:45:ed:58:fe:9e:ac:e7:2f:20:
46:c8:8d:44:12:25:e6:6f:bb:84:f7:b6:5b:80:75:26:14:4c:
3a:57:2e:b7:ae:d4:28:71:6e:58:20:c2:42:9a:a4:86:b9:4d:
e5:b6:a1:73:41:b7:10:96:2a:84:bc:fd:a2:2a:06:cb:f1:a5:
a3:9a:42:1a:02:f7:01:ef:fe:ce:4e:39:d9:1e:fb:8b:73:bd:
ce:5e:05:01:ce:5b:89:67:1e:90:e1:f7:a5:92:84:3a:86:03:
43:ab:cd:26:90:b5:e1:12:8a:de:ee:4a:64:8d:a4:1c:09:3d:
86:a1:0a:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYsKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA1MTQ0MDIxWhcNMjUwODI0MTQ0MDIxWjAYMRYw
FAYDVQQDEw02ODY5Mzk1Yy03MjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq2YSR7H20o9cpgYklDTLahi2cck1W0tbdt/XF18yIWnNHd3td4UCUAod
tsq5iw4eN5H5bo0pnBKEr8SugUT5/Pv2EbyFPzsI2TeEZCYEa/b6OjGU3g+v6h+y
2cNRHKdTyju8lmHRjor6aQzGAmfULF5r+/QF6dZegWaIDTGca1CoAWAmt5cbtUOh
XFrEJfORXDHvqICgGIIYyMmYmtRuDfXVraOaaFGY6Qma+NpoTKTBPC4XOTNhoFNp
dWMm38WHaFANYgxfoPrIyi3J62tvI5XcMcM72xd4A6AML+Idx9zDIFkcCZpgEy/H
ubta3sIWtezEcpdtqF0PwdhZsgnntwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOjt
ArBRZiRu9qeg5zSHyFQIEqy7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GREY5RTA4ODU5QUQxMUYwQTZERDU4OUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlmQMA0GCSqGSIb3DQEB
CwUAA4IBAQBVjxA9QE452HcgQoj0uYM6Ex3LIKlzX5xrbksH98+M4P2qtfmSZr5P
2sh6GKXIH8uEq8VcjUgkf7JNcmfHVQ5fO4Hm7ySKMi2UM4DBYR1JsuPXiCHK/JzA
R3jtttJbmKAXOMAZBJl2bxLhZL2E5BlQ3c+tbnnIkyPU6FT9nqj3wnetHcfPiN9F
7Vj+nqznLyBGyI1EEiXmb7uE97ZbgHUmFEw6Vy63rtQocW5YIMJCmqSGuU3ltqFz
QbcQliqEvP2iKgbL8aWjmkIaAvcB7/7OTjnZHvuLc73OXgUBzluJZx6Q4felkoQ6
hgNDq80mkLXhEore7kpkjaQcCT2GoQps
-----END CERTIFICATE-----
Generated at Sun Jul 20 06:16:08 2025 by rpki-client