Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BDF3CA841611F094EF48F4DAE4EC9C.roa
File: B0BDF3CA841611F094EF48F4DAE4EC9C.roa (raw, json)
Hash identifier: 0l14ary7kVu2F3pNTl8Pq8aCI/jjmOYUJHL82EXe5FE=
Subject key identifier: E7:CE:9A:21:4D:1C:80:DF:00:A6:5A:E0:B4:36:7D:50:65:56:1A:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BDF3CA841611F094EF48F4DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 13:55:44 +0000
ROA not before: Thu 28 Aug 2025 13:55:37 +0000
ROA not after: Tue 30 Sep 2025 13:55:37 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.43.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104926 (0x199de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 13:55:37 2025 GMT
Not After : Sep 30 13:55:37 2025 GMT
Subject: CN=68b05fe0-a43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:e4:d3:0c:e9:a4:77:cd:35:09:7a:dc:25:
21:77:e0:62:c9:71:b0:0e:0c:77:6f:95:c8:89:9f:
66:7d:38:ea:6f:1b:9a:94:68:1a:fa:dc:a5:07:60:
54:62:cb:50:28:fb:72:98:26:1a:dd:7c:1d:53:ca:
7e:97:f8:56:d3:42:55:32:ae:43:14:11:85:82:68:
f6:c4:1b:90:0b:09:65:71:6c:69:83:60:3e:27:5b:
8f:6e:8c:fd:b7:ab:2f:0b:02:62:98:f2:0e:3a:3a:
08:cd:44:c1:2e:71:45:92:38:64:15:2e:38:ad:62:
8a:3d:0b:67:e5:d0:98:14:21:02:2a:ac:eb:6b:1b:
77:26:a9:74:08:48:82:d5:fe:02:91:7a:56:e1:d1:
57:2a:54:90:3a:04:03:a2:be:17:18:bc:4e:0e:d7:
80:49:88:c1:0a:54:82:76:e9:24:b6:08:ad:1f:ca:
28:92:60:0e:fa:2b:5b:ce:79:e8:ec:44:1a:e2:c7:
df:8e:eb:ef:ae:e2:98:f0:bd:20:a3:08:38:99:de:
be:a6:66:d3:a7:8e:0a:ab:8e:a7:55:13:c6:91:76:
e9:4c:99:39:45:ab:21:a6:de:ee:15:26:0a:42:6b:
ec:a6:7f:55:ae:c0:7f:d3:a8:65:a3:b0:bd:51:fe:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:9A:21:4D:1C:80:DF:00:A6:5A:E0:B4:36:7D:50:65:56:1A:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BDF3CA841611F094EF48F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.120.0/24
154.195.124.0/24
154.195.136.0-154.195.138.255
154.195.140.0/24
154.196.30.0/23
154.196.33.0/24
154.196.36.0/24
154.196.40.0-154.196.46.255
Signature Algorithm: sha256WithRSAEncryption
4e:42:e4:f1:bc:47:b6:b0:d3:1c:39:a5:e6:a5:96:80:20:18:
a0:ec:15:30:56:f8:38:c2:8e:0c:0c:4b:71:a3:7a:63:e4:70:
ff:12:e2:87:41:bf:4f:8c:36:e0:d6:78:aa:e6:9d:8f:90:5b:
98:d1:77:54:0a:f3:11:31:15:ae:ff:12:e2:94:15:1e:ab:28:
a9:23:22:62:2e:06:b3:fa:23:e4:e4:4d:0c:15:e3:49:ad:6f:
e6:96:05:9c:46:d4:e7:af:87:38:0f:8d:2a:f3:77:eb:15:e5:
42:2a:32:e4:50:91:0b:29:13:43:48:f7:82:f4:f0:6e:47:e6:
fa:60:9e:bb:b4:af:88:e8:cc:ea:a4:0f:55:e3:3a:39:49:b3:
ec:c4:26:de:05:c9:62:5d:c4:af:aa:54:97:6e:c9:07:69:44:
63:ba:9a:96:d4:27:bc:7a:1a:8f:92:0b:a5:20:b6:3a:1d:9f:
ac:6a:98:fc:a7:50:d5:fd:23:de:60:07:ac:50:da:cc:e1:ce:
b5:c5:db:c7:82:09:c0:1b:32:62:27:97:d1:38:2b:3a:2f:a1:
65:27:76:8f:60:c2:53:e9:08:d2:21:96:87:9a:02:e2:4b:8c:
18:b5:85:a5:3c:6b:2a:fa:55:d8:00:c0:97:ca:16:e7:ad:27:
99:a4:29:e8
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIDAZneMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI4MTM1NTM3WhcNMjUwOTMwMTM1NTM3WjAYMRYw
FAYDVQQDEw02OGIwNWZlMC1hNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1r7k0wzppHfNNQl63CUhd+BiyXGwDgx3b5XIiZ9mfTjqbxualGga+tyl
B2BUYstQKPtymCYa3XwdU8p+l/hW00JVMq5DFBGFgmj2xBuQCwllcWxpg2A+J1uP
boz9t6svCwJimPIOOjoIzUTBLnFFkjhkFS44rWKKPQtn5dCYFCECKqzraxt3Jql0
CEiC1f4CkXpW4dFXKlSQOgQDor4XGLxODteASYjBClSCdukktgitH8ookmAO+itb
znno7EQa4sffjuvvruKY8L0gowg4md6+pmbTp44Kq46nVRPGkXbpTJk5Rashpt7u
FSYKQmvspn9VrsB/06hlo7C9Uf52nwIDAQABo4IC8zCCAu8wHQYDVR0OBBYEFOfO
miFNHIDfAKZa4LQ2fVBlVhquMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMEJERjNDQTg0MTYxMUYwOTRFRjQ4RjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAmsNsMAwDBACaw28DBACa
w3ADBACaw3gDBACaw3wwDAMEA5rDiAMEAJrDigMEAJrDjAMEAZrEHgMEAJrEIQME
AJrEJDAMAwQDmsQoAwQAmsQuMA0GCSqGSIb3DQEBCwUAA4IBAQBOQuTxvEe2sNMc
OaXmpZaAIBig7BUwVvg4wo4MDEtxo3pj5HD/EuKHQb9PjDbg1niq5p2PkFuY0XdU
CvMRMRWu/xLilBUeqyipIyJiLgaz+iPk5E0MFeNJrW/mlgWcRtTnr4c4D40q83fr
FeVCKjLkUJELKRNDSPeC9PBuR+b6YJ67tK+I6MzqpA9V4zo5SbPsxCbeBcliXcSv
qlSXbskHaURjupqW1Ce8ehqPkgulILY6HZ+sapj8p1DV/SPeYAesUNrM4c61xdvH
ggnAGzJiJ5fROCs6L6FlJ3aPYMJT6QjSIZaHmgLiS4wYtYWlPGsq+lXYAMCXyhbn
rSeZpCno
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:47 2025 by rpki-client