Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30AC91A088F811F0ACE3D3B7DAE4EC9C.roa
File: 30AC91A088F811F0ACE3D3B7DAE4EC9C.roa (raw, json)
Hash identifier: dPf2tFOlJo47W9kvz9kzdTXytKvR1LGbvXaiR575904=
Subject key identifier: 8C:76:4C:24:D7:F7:27:60:B1:38:6C:E3:F4:10:C3:D0:68:05:B8:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30AC91A088F811F0ACE3D3B7DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 19:00:00 +0000
ROA not before: Wed 03 Sep 2025 18:59:54 +0000
ROA not after: Wed 10 Sep 2025 18:59:54 +0000
asID: 135377
IP address blocks: 154.81.12.0/22 maxlen: 24
154.81.12.0/24 maxlen: 24
154.81.13.0/24 maxlen: 24
154.81.14.0/24 maxlen: 24
154.81.15.0/24 maxlen: 24
154.83.196.0/22 maxlen: 24
154.83.196.0/24 maxlen: 24
154.83.197.0/24 maxlen: 24
154.83.198.0/24 maxlen: 24
154.83.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105802 (0x19d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 18:59:54 2025 GMT
Not After : Sep 10 18:59:54 2025 GMT
Subject: CN=68b89030-cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:fb:a1:aa:cb:58:44:90:70:6d:28:56:4d:
41:5c:2b:a7:02:50:76:8f:50:e8:e1:54:32:cf:56:
b4:80:2a:9c:3a:3b:3a:0a:52:0d:4b:2c:7d:f3:52:
39:bb:aa:25:62:b5:70:06:c9:c7:00:b2:66:9c:73:
25:37:cd:00:32:fd:a4:4d:59:da:96:3c:cf:28:58:
b2:7b:12:b9:9c:9d:0f:ea:b3:76:f3:ac:ab:40:9e:
da:43:7a:f9:52:33:de:de:8f:96:f6:5c:76:9e:97:
4e:77:38:8e:e5:a4:86:33:b7:9e:82:68:0e:6c:c5:
47:75:3d:d1:0a:03:5a:57:0a:97:75:90:eb:6a:8a:
92:3d:56:d4:70:79:0c:86:df:8b:c2:cc:30:2e:95:
fd:1b:8c:85:d6:51:82:a6:00:ff:67:ea:3c:4f:ff:
70:d6:48:c5:89:80:d3:c5:37:c3:82:d0:05:1a:64:
0f:25:2a:83:4c:47:85:b9:7e:11:78:5c:d1:5d:9b:
ae:db:5d:bc:e5:27:8c:30:c6:97:0e:d0:e3:bd:db:
f3:d5:a2:96:52:50:6c:92:b6:6f:13:3e:a1:40:38:
8f:1e:12:d3:a0:42:71:6d:8b:e5:64:34:3e:dc:06:
7a:80:40:6e:79:10:62:fd:9a:04:21:39:36:df:8e:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:4C:24:D7:F7:27:60:B1:38:6C:E3:F4:10:C3:D0:68:05:B8:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30AC91A088F811F0ACE3D3B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.12.0/22
154.83.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:0a:d5:e8:84:22:29:72:00:8b:dc:62:51:5b:3b:44:e3:12:
66:41:a3:75:6f:f5:9b:5a:1f:21:ff:10:be:c6:65:c3:86:4b:
ba:52:08:9b:8b:ff:9f:1d:23:f6:95:d3:82:09:a1:56:90:2b:
ec:cb:3f:f2:7e:87:41:e8:c4:e2:1a:05:3e:2b:62:9f:88:03:
c8:3f:ed:8b:b8:1c:c9:e1:3e:c8:66:5d:38:b5:d8:56:6d:dd:
92:5f:bd:5d:a7:a0:ed:1d:ee:2a:9e:bf:5e:ea:1a:f0:7b:12:
46:d4:26:22:68:c9:08:2f:3a:cb:f7:09:bc:6e:b5:56:7d:b1:
40:48:1a:65:7f:5c:f3:78:a5:09:b0:97:46:70:ff:80:5d:9a:
29:be:5b:87:6d:ab:57:76:20:70:fd:f2:86:c2:65:2c:bd:c6:
0e:47:1e:9e:58:23:93:4d:c4:50:f9:8f:1f:23:65:b6:ad:43:
aa:3c:db:04:96:a5:e4:e2:74:4a:9f:3f:83:d2:71:35:4f:c1:
d1:4b:72:e4:8b:ae:a5:7b:1f:57:54:a4:3e:09:53:ae:28:2f:
21:0f:1d:91:0d:b6:cc:66:30:67:ee:a8:ee:12:39:e1:a2:52:
67:d6:6c:8a:bd:6c:f5:0a:c6:4b:ef:37:e8:44:4e:42:28:2b:
8d:55:9f:ec
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZ1KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMTg1OTU0WhcNMjUwOTEwMTg1OTU0WjAYMRYw
FAYDVQQDEw02OGI4OTAzMC1jZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzP/7oarLWESQcG0oVk1BXCunAlB2j1Do4VQyz1a0gCqcOjs6ClINSyx9
81I5u6olYrVwBsnHALJmnHMlN80AMv2kTVnaljzPKFiyexK5nJ0P6rN286yrQJ7a
Q3r5UjPe3o+W9lx2npdOdziO5aSGM7eegmgObMVHdT3RCgNaVwqXdZDraoqSPVbU
cHkMht+LwswwLpX9G4yF1lGCpgD/Z+o8T/9w1kjFiYDTxTfDgtAFGmQPJSqDTEeF
uX4ReFzRXZuu21285SeMMMaXDtDjvdvz1aKWUlBskrZvEz6hQDiPHhLToEJxbYvl
ZDQ+3AZ6gEBueRBi/ZoEITk2344kVwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIx2
TCTX9ydgsThs4/QQw9BoBbiVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMEFDOTFBMDg4RjgxMUYwQUNFM0QzQjdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmlEMAwQCmlPEMA0GCSqG
SIb3DQEBCwUAA4IBAQA6CtXohCIpcgCL3GJRWztE4xJmQaN1b/WbWh8h/xC+xmXD
hku6Ugibi/+fHSP2ldOCCaFWkCvsyz/yfodB6MTiGgU+K2KfiAPIP+2LuBzJ4T7I
Zl04tdhWbd2SX71dp6DtHe4qnr9e6hrwexJG1CYiaMkILzrL9wm8brVWfbFASBpl
f1zzeKUJsJdGcP+AXZopvluHbatXdiBw/fKGwmUsvcYORx6eWCOTTcRQ+Y8fI2W2
rUOqPNsElqXk4nRKnz+D0nE1T8HRS3Lki66lex9XVKQ+CVOuKC8hDx2RDbbMZjBn
7qjuEjnholJn1myKvWz1CsZL7zfoRE5CKCuNVZ/s
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:02:55 2025 by rpki-client