Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03AAF6BA827711F083A0F7CDDAE4EC9C.roa
File: 03AAF6BA827711F083A0F7CDDAE4EC9C.roa (raw, json)
Hash identifier: 0YQD/h4dR4EeQ2GdXI0yXogdyP8f4pcGCiXZAsBU5u8=
Subject key identifier: 1D:F1:B6:82:CC:A2:90:68:44:76:2B:DF:1A:37:85:46:C9:FE:0A:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03AAF6BA827711F083A0F7CDDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 12:20:13 +0000
ROA not before: Tue 26 Aug 2025 12:20:06 +0000
ROA not after: Thu 25 Sep 2025 12:20:06 +0000
asID: 40950
IP address blocks: 154.85.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Aug 2025 08:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104387 (0x197c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 12:20:06 2025 GMT
Not After : Sep 25 12:20:06 2025 GMT
Subject: CN=68ada67c-b48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:07:c1:98:8e:be:15:1a:a1:d8:f1:07:1b:
27:2c:af:5e:ab:4d:56:49:99:07:e5:50:fe:ab:2f:
b5:42:07:f0:21:74:cb:f9:47:2b:d9:2a:4a:45:e3:
b5:ac:17:0e:2a:cf:60:22:23:1a:42:e7:55:c7:0c:
dd:b7:08:b0:95:ed:fd:f3:1e:2d:99:0e:ab:d4:79:
59:63:aa:50:9e:16:04:20:97:55:01:ef:4d:e7:1e:
7f:dd:f9:4c:87:72:fa:b4:3f:ad:e9:28:1e:5b:2c:
a4:50:a5:0f:4f:a5:09:0a:75:20:d5:67:f0:f0:94:
8c:7d:46:97:50:d2:c9:29:e8:06:cc:41:f7:88:6f:
af:08:49:aa:96:29:e5:b4:0c:b4:f3:ba:6d:28:04:
a9:7b:82:76:ce:9a:e2:c0:6f:24:7d:90:1f:08:e2:
92:6d:d6:b0:ee:8a:eb:07:24:dc:ec:84:b4:ab:b2:
5f:19:b5:42:0e:b6:a8:ea:92:65:73:49:1c:4b:ef:
a8:1d:50:bd:53:f6:aa:77:f5:6a:b5:b2:de:cd:94:
d9:fa:9a:78:86:70:72:c1:dc:d5:b4:a2:b0:19:b0:
5c:b7:2c:b8:f1:8c:5b:85:d0:1e:85:5c:b4:9a:8a:
e0:57:2b:52:34:90:27:59:82:ab:73:0e:eb:4d:65:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:B6:82:CC:A2:90:68:44:76:2B:DF:1A:37:85:46:C9:FE:0A:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03AAF6BA827711F083A0F7CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:79:c4:e6:d1:64:9b:48:04:cd:3c:a9:96:25:46:26:d7:b2:
86:65:9b:6b:1d:0c:a6:91:e8:49:4a:42:4e:66:a9:bc:ff:59:
ce:74:e8:7f:d9:52:de:2b:ba:2d:40:fc:e6:08:fd:a6:04:a8:
2b:d6:d6:68:d2:11:e1:cf:b9:16:45:3a:48:73:45:41:8b:90:
b3:54:30:d2:da:96:2d:29:5d:cf:2a:c0:32:9a:6d:54:34:df:
9b:4e:9e:7f:83:47:90:e8:0c:29:1d:80:6d:34:33:3f:ff:7c:
f9:cd:d0:b2:0d:ab:9d:68:9c:05:b5:34:b7:b4:ed:1d:0a:53:
b8:2b:87:df:a3:b5:c8:c9:f4:f4:64:ce:37:99:c2:2c:a3:c5:
58:cd:25:69:ba:d5:0d:e6:e2:4d:13:d2:7e:b0:81:53:79:69:
2f:0e:12:0a:8f:73:ba:9b:c5:9c:fe:a0:02:eb:6c:c4:26:89:
31:1d:c5:ee:fa:c2:68:da:ab:11:b8:46:76:02:58:3e:74:37:
c8:1d:3d:df:6f:1d:e8:68:ef:62:00:e0:f0:45:69:c6:8a:ce:
22:ae:32:1a:93:60:e1:02:de:76:e3:6e:52:11:e0:42:6e:ea:
58:11:3b:71:e7:88:08:e3:83:55:24:76:90:e3:71:cb:aa:7d:
d2:82:39:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZfDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI2MTIyMDA2WhcNMjUwOTI1MTIyMDA2WjAYMRYw
FAYDVQQDEw02OGFkYTY3Yy1iNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3QAHwZiOvhUaodjxBxsnLK9eq01WSZkH5VD+qy+1QgfwIXTL+Ucr2SpK
ReO1rBcOKs9gIiMaQudVxwzdtwiwle398x4tmQ6r1HlZY6pQnhYEIJdVAe9N5x5/
3flMh3L6tD+t6SgeWyykUKUPT6UJCnUg1Wfw8JSMfUaXUNLJKegGzEH3iG+vCEmq
linltAy087ptKASpe4J2zpriwG8kfZAfCOKSbdaw7orrByTc7IS0q7JfGbVCDrao
6pJlc0kcS++oHVC9U/aqd/VqtbLezZTZ+pp4hnBywdzVtKKwGbBctyy48YxbhdAe
hVy0morgVytSNJAnWYKrcw7rTWUuPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB3x
toLMopBoRHYr3xo3hUbJ/gqxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wM0FBRjZCQTgyNzcxMUYwODNBMEY3Q0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlV4MA0GCSqGSIb3DQEB
CwUAA4IBAQAOecTm0WSbSATNPKmWJUYm17KGZZtrHQymkehJSkJOZqm8/1nOdOh/
2VLeK7otQPzmCP2mBKgr1tZo0hHhz7kWRTpIc0VBi5CzVDDS2pYtKV3PKsAymm1U
NN+bTp5/g0eQ6AwpHYBtNDM//3z5zdCyDaudaJwFtTS3tO0dClO4K4ffo7XIyfT0
ZM43mcIso8VYzSVputUN5uJNE9J+sIFTeWkvDhIKj3O6m8Wc/qAC62zEJokxHcXu
+sJo2qsRuEZ2Alg+dDfIHT3fbx3oaO9iAODwRWnGis4irjIak2DhAt52425SEeBC
bupYETtx54gI44NVJHaQ43HLqn3SgjkP
-----END CERTIFICATE-----
Generated at Tue Aug 26 17:06:54 2025 by rpki-client