Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE683E848B4511F0B39B50B6DAE4EC9C.roa
File: EE683E848B4511F0B39B50B6DAE4EC9C.roa (raw, json)
Hash identifier: WbSwdtChybsJHeSIl1kAMRMGVzntZ1B09gWKCdW1JGU=
Subject key identifier: A5:E8:06:00:71:E5:3A:00:45:34:2C:E9:E1:04:78:12:5D:DA:50:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE683E848B4511F0B39B50B6DAE4EC9C.roa
Signing time: Sat 06 Sep 2025 17:21:32 +0000
ROA not before: Sat 06 Sep 2025 17:21:26 +0000
ROA not after: Fri 05 Dec 2025 17:21:26 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
154.206.18.0/24 maxlen: 24
154.206.21.0/24 maxlen: 24
154.206.24.0/24 maxlen: 24
154.206.25.0/24 maxlen: 24
154.206.26.0/24 maxlen: 24
154.206.27.0/24 maxlen: 24
154.206.28.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.206.30.0/24 maxlen: 24
154.206.31.0/24 maxlen: 24
154.209.252.0/24 maxlen: 24
154.209.253.0/24 maxlen: 24
154.209.254.0/24 maxlen: 24
154.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Sep 2025 00:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106084 (0x19e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 17:21:26 2025 GMT
Not After : Dec 5 17:21:26 2025 GMT
Subject: CN=68bc6d9c-1b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:49:a4:c5:c2:b8:88:17:62:a4:01:cf:36:
25:23:db:1e:e9:54:d3:6a:7f:3c:d8:f1:73:56:8b:
0a:03:16:41:0a:01:58:d0:4e:a5:b7:bd:9e:aa:f3:
f9:bb:bd:0b:09:41:eb:24:10:b2:8a:af:b5:3a:e4:
7c:65:94:79:8c:36:91:e4:c0:60:97:10:c1:9b:83:
36:ac:fd:56:45:8b:f7:f5:40:2e:90:16:e7:2e:02:
1e:5b:29:ac:8e:97:2f:e3:70:47:55:be:0d:b1:2c:
47:e7:cb:0e:da:93:49:f4:8b:f3:51:24:e9:8f:e4:
bd:a3:31:44:31:a9:09:7b:9f:ff:ab:b4:f8:b1:6f:
8e:d8:ba:4d:65:42:4b:7a:e1:b6:ff:b9:c7:7a:a0:
cb:c1:ab:b9:f6:81:23:ff:d5:fe:33:36:a2:eb:10:
b0:cb:ac:9a:8a:6c:24:b5:d0:e2:c8:4e:c3:32:18:
04:78:c1:d6:40:e2:5e:cd:03:f5:a0:0f:14:1e:4d:
f5:3f:0e:a5:3d:8d:18:7d:03:18:6f:29:db:23:68:
aa:dd:63:3d:ec:b5:fb:6f:f0:41:7a:31:f1:97:32:
81:a3:c2:17:3a:ea:e6:6d:43:8d:e1:88:04:b7:96:
c2:55:23:f4:c0:04:54:d5:97:8e:cc:40:5c:5d:0e:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E8:06:00:71:E5:3A:00:45:34:2C:E9:E1:04:78:12:5D:DA:50:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE683E848B4511F0B39B50B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0-154.206.18.255
154.206.21.0/24
154.206.24.0/21
154.209.252.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:0c:57:e6:aa:e0:ef:e5:10:a3:32:fa:e9:48:f5:3f:be:13:
1e:32:a2:a9:9b:c5:18:6b:b1:df:05:cc:56:ef:3e:8c:ce:e9:
86:d9:ba:c7:0b:a5:f6:52:a5:ce:c7:97:e1:7c:5b:ef:13:f4:
c4:5c:18:88:a1:36:df:b7:60:d0:85:37:f5:0c:1d:ae:88:81:
5b:9f:56:32:d4:e9:d3:3a:4c:2e:48:61:bb:6a:e3:72:92:b5:
19:d6:1e:a6:b1:e0:e9:cb:38:a2:16:a0:8c:93:45:07:59:06:
19:f7:2f:b3:a4:03:d2:d1:ef:2e:dc:7a:21:be:08:1f:0e:fe:
e8:fe:f1:8e:d8:8c:0c:5c:27:a5:f6:09:d9:81:58:a5:ba:34:
28:31:5d:39:35:d2:fb:fd:c2:bf:87:14:03:ac:06:2c:c5:8e:
a9:e6:dd:18:07:8c:0c:bc:bf:1b:8c:02:df:33:35:d3:f7:f9:
e0:6c:84:3a:91:a4:bb:44:99:e8:48:f6:fb:35:f0:4e:e6:d3:
b4:32:16:5e:92:d9:36:74:41:7d:d1:d7:69:af:93:0a:15:4d:
33:1d:33:74:96:ff:d4:10:66:82:c1:bc:54:99:da:87:12:4e:
f6:50:53:64:88:7e:35:bf:b4:e0:4a:73:f2:bd:3f:d2:ef:60:
86:27:5d:d5
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAZ5kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA2MTcyMTI2WhcNMjUxMjA1MTcyMTI2WjAYMRYw
FAYDVQQDEw02OGJjNmQ5Yy0xYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxttJpMXCuIgXYqQBzzYlI9se6VTTan882PFzVosKAxZBCgFY0E6lt72e
qvP5u70LCUHrJBCyiq+1OuR8ZZR5jDaR5MBglxDBm4M2rP1WRYv39UAukBbnLgIe
Wymsjpcv43BHVb4NsSxH58sO2pNJ9IvzUSTpj+S9ozFEMakJe5//q7T4sW+O2LpN
ZUJLeuG2/7nHeqDLwau59oEj/9X+Mzai6xCwy6yaimwktdDiyE7DMhgEeMHWQOJe
zQP1oA8UHk31Pw6lPY0YfQMYbynbI2iq3WM97LX7b/BBejHxlzKBo8IXOurmbUON
4YgEt5bCVSP0wARU1ZeOzEBcXQ4EVQIDAQABo4ICvzCCArswHQYDVR0OBBYEFKXo
BgBx5ToARTQs6eEEeBJd2lAvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRTY4M0U4NDhCNDUxMUYwQjM5QjUwQjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACazhEDBACazhIDBACa
zhUDBAOazhgDBAKa0fwwDQYJKoZIhvcNAQELBQADggEBANQMV+aq4O/lEKMy+ulI
9T++Ex4yoqmbxRhrsd8FzFbvPozO6YbZuscLpfZSpc7Hl+F8W+8T9MRcGIihNt+3
YNCFN/UMHa6IgVufVjLU6dM6TC5IYbtq43KStRnWHqax4OnLOKIWoIyTRQdZBhn3
L7OkA9LR7y7ceiG+CB8O/uj+8Y7YjAxcJ6X2CdmBWKW6NCgxXTk10vv9wr+HFAOs
BizFjqnm3RgHjAy8vxuMAt8zNdP3+eBshDqRpLtEmehI9vs18E7m07QyFl6S2TZ0
QX3R12mvkwoVTTMdM3SW/9QQZoLBvFSZ2ocSTvZQU2SIfjW/tOBKc/K9P9LvYIYn
XdU=
-----END CERTIFICATE-----
Generated at Tue Sep 9 03:19:36 2025 by rpki-client