Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87B92E49D8311F090656F87DAE4EC9C.roa
File: B87B92E49D8311F090656F87DAE4EC9C.roa (raw, json)
Hash identifier: lezGa/dGZ528olZSMGyQ8ru+CfApDxJdo+QaAPbKcXM=
Subject key identifier: D8:C7:A7:CC:85:EA:6D:76:47:91:63:F2:CF:E9:62:70:8A:C1:FE:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87B92E49D8311F090656F87DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 22:29:11 +0000
ROA not before: Mon 29 Sep 2025 22:29:06 +0000
ROA not after: Wed 05 Nov 2025 22:29:06 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 Oct 2025 06:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106917 (0x1a1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 22:29:06 2025 GMT
Not After : Nov 5 22:29:06 2025 GMT
Subject: CN=68db0837-fbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:c2:43:eb:db:6c:b6:2b:97:97:89:35:fd:
46:26:47:34:1b:61:d0:9c:63:48:b3:7f:52:48:e4:
67:f1:8e:31:96:2f:cc:40:4c:ca:c8:a7:8d:34:9d:
27:d9:7d:cc:71:8d:78:db:f5:8a:3a:7c:d6:d0:d3:
2a:0c:76:5b:35:c4:41:e7:39:71:6f:34:68:58:d5:
fd:e6:63:6a:2f:5b:42:5b:6b:be:b3:03:37:66:a6:
ce:77:ca:03:b7:c2:23:0f:5c:ad:84:02:48:1a:c6:
08:30:72:de:49:15:f6:87:7a:05:e9:dd:ca:14:d5:
58:5c:fb:db:9b:2c:16:91:e1:3d:5a:89:33:4e:1b:
83:1b:d7:34:66:c9:e0:15:d3:7f:14:26:97:93:17:
58:78:48:dc:a9:e2:c9:8f:d3:04:0b:18:fe:ff:a9:
b7:45:0b:62:98:5d:27:75:76:17:80:77:78:a8:64:
5d:28:01:b3:1e:32:0f:66:6f:35:59:94:f1:8f:0e:
9b:f9:67:f0:0e:99:cd:72:89:8d:e0:82:42:d1:bd:
cf:0c:4e:3c:13:16:87:ef:29:33:eb:6b:8f:b5:49:
42:ad:14:07:05:42:d8:40:ae:30:d6:0d:be:36:bb:
9a:58:0e:e4:64:c0:89:81:4a:ef:2b:87:87:d1:98:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:A7:CC:85:EA:6D:76:47:91:63:F2:CF:E9:62:70:8A:C1:FE:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B87B92E49D8311F090656F87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
43:a5:f3:70:9a:8b:6d:58:6c:73:4a:c2:6c:1f:aa:11:9b:54:
da:88:d3:9a:93:37:f4:b8:fb:4a:d5:7f:14:b9:b6:d5:3f:ff:
3f:bc:56:ab:3f:8f:b8:86:76:ed:8e:03:6f:59:34:a9:e2:e3:
30:a9:f4:bd:27:3e:43:13:cf:8b:b0:67:91:4d:8f:d0:59:c4:
72:d2:c9:70:4b:36:b6:f7:66:1b:cf:e5:bb:82:fc:d8:65:60:
1d:96:19:4b:83:2d:35:56:13:b0:67:18:93:d4:e2:99:64:5f:
9c:88:cb:26:ed:38:d8:02:3c:3f:b3:65:de:77:44:6d:71:69:
57:83:79:96:3e:02:d5:ae:67:73:31:b0:58:08:6d:6d:46:59:
f1:7b:6b:54:fa:c2:2e:62:81:b4:d4:20:6d:bd:05:2a:54:ed:
9a:93:bc:78:dc:89:fc:92:44:00:be:ee:8d:24:0d:0d:b9:b1:
48:f5:b2:08:b5:a1:05:35:eb:3a:76:9b:03:34:79:66:a1:54:
ac:40:da:62:c9:66:0b:54:97:0f:a1:9e:ec:d4:94:d6:38:23:
3b:2e:84:b7:29:aa:88:19:d1:20:95:69:5c:b5:07:83:b9:ff:
56:d3:26:86:8d:27:f8:45:d8:28:db:aa:8e:72:e1:03:71:65:
26:16:6e:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaGlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MjIyOTA2WhcNMjUxMTA1MjIyOTA2WjAYMRYw
FAYDVQQDEw02OGRiMDgzNy1mYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2zrCQ+vbbLYrl5eJNf1GJkc0G2HQnGNIs39SSORn8Y4xli/MQEzKyKeN
NJ0n2X3McY142/WKOnzW0NMqDHZbNcRB5zlxbzRoWNX95mNqL1tCW2u+swM3ZqbO
d8oDt8IjD1ythAJIGsYIMHLeSRX2h3oF6d3KFNVYXPvbmywWkeE9WokzThuDG9c0
ZsngFdN/FCaXkxdYeEjcqeLJj9MECxj+/6m3RQtimF0ndXYXgHd4qGRdKAGzHjIP
Zm81WZTxjw6b+WfwDpnNcomN4IJC0b3PDE48ExaH7ykz62uPtUlCrRQHBULYQK4w
1g2+NruaWA7kZMCJgUrvK4eH0ZjMowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNjH
p8yF6m12R5Fj8s/pYnCKwf5eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CODdCOTJFNDlEODMxMUYwOTA2NTZGODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsYgMA0GCSqGSIb3DQEB
CwUAA4IBAQBDpfNwmottWGxzSsJsH6oRm1TaiNOakzf0uPtK1X8UubbVP/8/vFar
P4+4hnbtjgNvWTSp4uMwqfS9Jz5DE8+LsGeRTY/QWcRy0slwSza292Ybz+W7gvzY
ZWAdlhlLgy01VhOwZxiT1OKZZF+ciMsm7TjYAjw/s2Xed0RtcWlXg3mWPgLVrmdz
MbBYCG1tRlnxe2tU+sIuYoG01CBtvQUqVO2ak7x43In8kkQAvu6NJA0NubFI9bII
taEFNes6dpsDNHlmoVSsQNpiyWYLVJcPoZ7s1JTWOCM7LoS3KaqIGdEglWlctQeD
uf9W0yaGjSf4Rdgo26qOcuEDcWUmFm54
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:19 2025 by rpki-client