Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22870490870211F082FD1285DAE4EC9C.roa
File: 22870490870211F082FD1285DAE4EC9C.roa (raw, json)
Hash identifier: MVZGpQsn2fCe6sFspO7KK1sV1me4XEFncapxMS5674U=
Subject key identifier: 71:13:C5:36:44:58:14:92:93:61:70:56:DD:0C:0E:14:18:34:C1:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019B2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22870490870211F082FD1285DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 07:06:09 +0000
ROA not before: Mon 01 Sep 2025 07:06:04 +0000
ROA not after: Tue 30 Sep 2025 07:06:04 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105261 (0x19b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 1 07:06:04 2025 GMT
Not After : Sep 30 07:06:04 2025 GMT
Subject: CN=68b545e1-c1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:e9:e1:12:ad:95:61:a1:b9:17:15:fd:32:
58:16:c3:ad:d3:b9:e3:be:96:73:fa:91:1f:1e:bc:
ad:26:ee:c8:28:aa:88:6b:3c:ec:ab:dc:f6:cf:6e:
f3:7a:11:7e:f4:fb:8d:3a:6b:1a:65:75:5b:aa:d3:
0b:ae:ec:82:bf:62:25:e9:8a:05:7f:b6:d7:a2:ab:
f8:a7:4b:1d:34:67:4a:21:5e:96:b4:d6:ee:5d:2a:
ec:dd:31:a1:cd:3d:04:c3:58:83:4a:50:6a:39:4a:
55:f8:e1:23:78:18:c0:bd:88:e4:60:6e:ca:7a:9b:
23:4e:d1:bf:76:90:4a:77:44:48:d1:25:08:b5:84:
7c:29:fd:46:a6:d1:7d:5b:7b:86:1d:d5:62:1b:62:
a0:77:38:59:0b:00:ab:ef:ae:96:0b:41:f3:25:4a:
37:b6:69:48:17:9d:b9:b8:10:4e:6d:ee:40:00:e5:
79:56:42:cf:cb:50:dd:a4:41:e8:05:00:94:67:4b:
21:92:01:ad:c2:4e:43:e4:a0:c4:3e:bf:a1:a1:0d:
b0:e7:3b:8a:12:44:67:d0:9c:46:fc:70:1b:0c:63:
e7:5e:a5:05:73:99:d4:f5:d9:cf:61:58:a9:0e:c7:
51:6d:db:3f:5e:16:11:85:a7:29:5d:33:bb:a9:b1:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:C5:36:44:58:14:92:93:61:70:56:DD:0C:0E:14:18:34:C1:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22870490870211F082FD1285DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.199.4.0/24
154.200.1.0/24
154.200.37.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.129.0-154.200.130.255
154.200.154.0/24
154.200.156.0/22
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:60:c7:29:84:2b:0d:1d:21:33:67:b6:11:13:49:ea:98:95:
3d:dd:e5:aa:ed:4a:20:4a:51:1d:f9:e5:84:bf:a1:14:83:73:
ba:92:fc:99:02:30:7a:32:09:4d:37:f7:a6:ff:e7:33:e4:ca:
57:70:1a:a3:dd:67:7a:83:bb:00:1b:55:62:cc:1d:79:f3:9e:
2c:67:98:70:31:db:a5:0a:99:a4:f6:f1:24:57:46:6e:45:af:
e1:4e:85:9a:fa:86:38:99:80:b7:03:95:c5:5a:7c:0c:ec:68:
9b:1d:0d:dd:6f:18:c6:43:7a:21:48:23:8c:02:82:ce:cc:87:
e7:67:b5:05:ce:bc:b8:f6:6b:9b:da:bb:5a:aa:54:36:ff:7e:
33:12:8a:23:79:d1:e3:90:1d:35:22:9e:f0:e0:9a:b9:6b:61:
2c:36:55:38:7e:31:f1:a4:c8:db:a0:b9:66:e9:59:ed:e0:d2:
29:d6:84:81:55:03:6e:2d:1c:5d:69:b5:c3:62:e5:b2:23:93:
60:cf:9b:f5:14:1c:ed:d4:23:26:48:7d:d3:08:96:d6:da:39:
90:ab:56:f6:69:77:c1:80:f4:dd:c3:64:b2:7f:cf:93:70:bd:
ae:0a:1d:8d:9d:27:7c:a6:37:98:e5:9c:fe:1a:e5:c8:4d:fb:
1c:d6:8f:9b
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgIDAZstMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAxMDcwNjA0WhcNMjUwOTMwMDcwNjA0WjAYMRYw
FAYDVQQDEw02OGI1NDVlMS1jMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxbLp4RKtlWGhuRcV/TJYFsOt07njvpZz+pEfHrytJu7IKKqIazzsq9z2
z27zehF+9PuNOmsaZXVbqtMLruyCv2Il6YoFf7bXoqv4p0sdNGdKIV6WtNbuXSrs
3TGhzT0Ew1iDSlBqOUpV+OEjeBjAvYjkYG7KepsjTtG/dpBKd0RI0SUItYR8Kf1G
ptF9W3uGHdViG2KgdzhZCwCr766WC0HzJUo3tmlIF525uBBObe5AAOV5VkLPy1Dd
pEHoBQCUZ0shkgGtwk5D5KDEPr+hoQ2w5zuKEkRn0JxG/HAbDGPnXqUFc5nU9dnP
YVipDsdRbds/XhYRhacpXTO7qbEyPQIDAQABo4IDCjCCAwYwHQYDVR0OBBYEFHET
xTZEWBSSk2FwVt0MDhQYNMG8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjg3MDQ5MDg3MDIxMUYwODJGRDEyODVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAJrBAgMEAJrCwwMEAJrE
hgMEAJrEoAMEAJrHBAMEAJrIAQMEAJrIJQMEAJrILgMEAJrIMDAMAwQAmsg1AwQA
msg2AwQAmsg8MAwDBACayIEDBACayIIDBACayJoDBAKayJwDBACa09MwDQYJKoZI
hvcNAQELBQADggEBAMFgxymEKw0dITNnthETSeqYlT3d5artSiBKUR355YS/oRSD
c7qS/JkCMHoyCU0396b/5zPkyldwGqPdZ3qDuwAbVWLMHXnznixnmHAx26UKmaT2
8SRXRm5Fr+FOhZr6hjiZgLcDlcVafAzsaJsdDd1vGMZDeiFII4wCgs7Mh+dntQXO
vLj2a5vau1qqVDb/fjMSiiN50eOQHTUinvDgmrlrYSw2VTh+MfGkyNuguWbpWe3g
0inWhIFVA24tHF1ptcNi5bIjk2DPm/UUHO3UIyZIfdMIltbaOZCrVvZpd8GA9N3D
ZLJ/z5Nwva4KHY2dJ3ymN5jlnP4a5chN+xzWj5s=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:38 2025 by rpki-client