Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7BAB8AC842511F0B62B41D5DAE4EC9C.roa
File: B7BAB8AC842511F0B62B41D5DAE4EC9C.roa (raw, json)
Hash identifier: DKTPb1KRw8X73HBqPe9qWDmVJY9UYDoGzKmW+GrQl2c=
Subject key identifier: 39:5E:7F:B3:C2:40:CF:D1:83:4B:50:4B:42:98:2A:BC:26:43:09:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0199F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7BAB8AC842511F0B62B41D5DAE4EC9C.roa
Signing time: Thu 28 Aug 2025 15:43:18 +0000
ROA not before: Thu 28 Aug 2025 15:43:14 +0000
ROA not after: Mon 06 Oct 2025 15:43:14 +0000
asID: 49505
IP address blocks: 154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104950 (0x199f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 28 15:43:14 2025 GMT
Not After : Oct 6 15:43:14 2025 GMT
Subject: CN=68b07916-27da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:5d:7a:ef:ee:99:3e:cc:b1:f8:ee:0b:64:
e1:1f:f5:dd:89:0d:12:ba:41:78:7f:87:c7:46:c4:
4a:ba:29:87:59:b8:c3:a8:e5:da:a7:fa:f0:0f:33:
28:e3:c3:99:42:0b:9b:e7:05:5c:3e:04:7a:de:eb:
3e:21:95:0b:4e:6a:2e:67:6a:df:9b:04:49:71:3d:
01:a5:84:cb:df:59:27:b8:58:d4:6d:d2:55:08:db:
48:ef:37:e7:00:2e:ad:84:e9:48:8e:e0:9f:77:dd:
e8:af:0f:c6:8c:aa:22:f7:9f:8f:a3:31:1b:66:5a:
23:8c:85:f3:63:a3:d5:45:a2:61:68:5c:42:11:a6:
9b:91:24:6b:01:34:47:99:8a:e1:30:67:c7:24:36:
6e:ac:c1:d1:6b:61:3e:6b:22:d7:d7:80:95:07:41:
64:ba:be:40:99:a1:42:f8:12:3a:a8:95:f3:b9:4a:
9c:51:6b:94:b1:a9:71:11:7f:48:a9:6c:5c:7f:8c:
1d:37:63:bc:91:97:d9:f1:47:1e:93:77:81:f6:b3:
e6:5d:b2:7f:40:e5:64:ac:b1:35:20:50:8b:ef:7f:
b4:ff:0a:78:a3:be:3f:74:35:5c:6f:d7:23:01:ad:
39:85:e1:bc:87:11:3f:63:3a:d6:29:15:7b:7e:63:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:7F:B3:C2:40:CF:D1:83:4B:50:4B:42:98:2A:BC:26:43:09:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7BAB8AC842511F0B62B41D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.30.0/24
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:60:3e:0d:22:00:e4:68:31:23:50:43:43:3d:36:1a:49:43:
98:46:be:0b:11:64:e7:6f:1c:ed:70:51:7f:66:64:f4:ba:7a:
f9:5b:c4:55:d0:a2:7b:0a:f9:d9:ca:4b:d3:2a:7a:f3:ce:c5:
af:cf:f6:2b:f6:27:1c:23:58:20:b5:6d:ab:b8:c7:14:e8:5b:
a9:e7:da:1b:d7:55:c7:ef:b4:aa:d7:62:82:52:33:1f:7f:cd:
3a:3b:43:db:10:41:53:36:3f:ba:15:e1:cb:b5:68:90:2a:ed:
f1:b0:0d:5a:99:65:67:93:96:a1:b3:f8:60:c9:7d:3f:12:53:
6a:61:d7:76:12:61:52:4d:1a:43:c4:8f:01:2d:fc:31:24:af:
b8:d2:f3:89:d4:fd:11:4c:c6:11:61:30:48:2a:c0:fa:6f:23:
f1:dd:fb:78:0b:cb:c4:21:ca:98:07:be:b1:54:05:ae:34:28:
3f:b7:8a:78:8b:88:47:a4:b1:52:74:2c:34:b5:16:54:81:f0:
4b:0e:68:b0:5f:98:04:ef:b8:f5:d7:b9:5b:93:02:be:de:10:
5f:8f:54:1a:64:63:e5:08:c1:0f:56:0d:10:57:20:3a:81:23:
c1:88:27:ea:cd:78:72:81:4f:9a:43:06:38:fd:e9:bf:e5:f7:
93:fb:db:dd
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZn2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI4MTU0MzE0WhcNMjUxMDA2MTU0MzE0WjAYMRYw
FAYDVQQDEw02OGIwNzkxNi0yN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWVdeu/umT7MsfjuC2ThH/XdiQ0SukF4f4fHRsRKuimHWbjDqOXap/rw
DzMo48OZQgub5wVcPgR63us+IZULTmouZ2rfmwRJcT0BpYTL31knuFjUbdJVCNtI
7zfnAC6thOlIjuCfd93orw/GjKoi95+PozEbZlojjIXzY6PVRaJhaFxCEaabkSRr
ATRHmYrhMGfHJDZurMHRa2E+ayLX14CVB0Fkur5AmaFC+BI6qJXzuUqcUWuUsalx
EX9IqWxcf4wdN2O8kZfZ8Ucek3eB9rPmXbJ/QOVkrLE1IFCL73+0/wp4o74/dDVc
b9cjAa05heG8hxE/YzrWKRV7fmPJFQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDle
f7PCQM/Rg0tQS0KYKrwmQwnzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CN0JBQjhBQzg0MjUxMUYwQjYyQjQxRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmtQeAwQAmtUAMA0GCSqG
SIb3DQEBCwUAA4IBAQDEYD4NIgDkaDEjUENDPTYaSUOYRr4LEWTnbxztcFF/ZmT0
unr5W8RV0KJ7CvnZykvTKnrzzsWvz/Yr9iccI1ggtW2ruMcU6Fup59ob11XH77Sq
12KCUjMff806O0PbEEFTNj+6FeHLtWiQKu3xsA1amWVnk5ahs/hgyX0/ElNqYdd2
EmFSTRpDxI8BLfwxJK+40vOJ1P0RTMYRYTBIKsD6byPx3ft4C8vEIcqYB76xVAWu
NCg/t4p4i4hHpLFSdCw0tRZUgfBLDmiwX5gE77j117lbkwK+3hBfj1QaZGPlCMEP
Vg0QVyA6gSPBiCfqzXhygU+aQwY4/em/5feT+9vd
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:30:11 2025 by rpki-client