Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE5768C9D4A11F0A9298B9ADAE4EC9C.roa
File: 1FE5768C9D4A11F0A9298B9ADAE4EC9C.roa (raw, json)
Hash identifier: LWzUH8wOPKZI06ETMs7zhNcDHF1i4/MRqAxQa05Bnlo=
Subject key identifier: 15:B3:EE:B0:8A:E2:91:BC:3F:8A:6B:58:CF:65:69:B5:DA:04:EC:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A14D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE5768C9D4A11F0A9298B9ADAE4EC9C.roa
Signing time: Mon 29 Sep 2025 15:36:54 +0000
ROA not before: Mon 29 Sep 2025 15:36:49 +0000
ROA not after: Sun 20 Sep 2026 15:36:49 +0000
asID: 21859
IP address blocks: 154.201.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106829 (0x1a14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 15:36:49 2025 GMT
Not After : Sep 20 15:36:49 2026 GMT
Subject: CN=68daa796-d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:80:b9:70:0e:cc:1c:3d:02:4c:ae:99:f5:
ef:7f:5a:de:1f:b1:8b:a1:c9:0d:eb:e9:f5:ae:9a:
b4:4e:83:88:0e:12:85:df:af:b3:fe:ad:29:81:54:
6f:92:70:bb:25:75:20:83:cf:33:60:63:6e:60:04:
f2:2b:c4:82:9f:7f:c9:22:d0:a6:68:f1:37:88:43:
e2:51:90:99:38:87:1e:62:e7:dd:1d:f5:e4:09:86:
1e:d1:e7:e9:f5:04:f7:ff:f9:0e:9a:5e:bd:04:d3:
69:d1:a8:9f:27:6e:3b:f5:5c:c3:48:4a:77:6c:e9:
72:35:a8:41:a3:69:f3:83:bc:57:42:24:0f:a2:52:
89:44:48:7b:83:fb:1b:d4:54:c0:7b:ce:6c:57:c8:
45:bb:90:b6:3d:00:6d:a0:35:fd:c0:04:f2:3f:96:
45:ed:2f:2d:93:aa:ee:20:6e:96:31:42:5f:a8:0d:
8e:ef:f4:e9:16:84:94:61:09:13:a2:93:7b:c6:c6:
32:bf:86:3e:a7:f0:f9:cf:62:29:97:31:2f:db:d5:
80:d7:76:0a:d8:e1:8e:54:e9:8c:93:80:88:aa:c7:
42:19:e8:95:a4:59:2d:2d:c5:7a:b2:f6:0d:ca:f1:
20:49:d6:56:d7:86:37:ee:92:91:5f:fb:60:56:cd:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B3:EE:B0:8A:E2:91:BC:3F:8A:6B:58:CF:65:69:B5:DA:04:EC:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE5768C9D4A11F0A9298B9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.1.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d4:bd:a1:80:b1:6a:55:89:43:3d:77:a4:11:1d:44:43:16:
f5:50:81:cb:11:49:ef:30:e5:9a:94:a3:b4:1c:88:31:4f:de:
3b:14:f8:5f:7a:48:d6:84:3f:4f:44:1a:7c:b0:b2:af:aa:4e:
83:68:02:8b:62:b0:67:1b:a7:84:ec:98:1e:35:bf:73:6d:16:
7a:c6:06:39:b5:3d:d6:a0:59:b0:e5:a6:c0:e3:cd:95:0f:c7:
67:70:6c:25:ed:b3:05:43:04:b3:ba:90:37:e8:ad:71:c1:d7:
37:d5:23:44:44:20:1a:d4:a0:d4:5a:cc:4a:b7:a8:cb:b5:4b:
26:c8:e1:06:34:b0:0e:8a:a1:c2:2b:89:15:72:36:27:43:59:
38:f2:d9:e3:e6:a2:9d:b4:2d:4c:f6:aa:66:03:ec:d0:d4:98:
38:1e:a3:97:d0:48:0b:06:dc:0c:12:e4:dd:09:ca:d7:6e:16:
7e:33:8b:2b:d8:f2:64:e2:48:2a:0a:ba:8b:f1:de:2f:80:fa:
f1:b1:88:a9:a9:f9:1d:56:3a:69:8a:f8:d4:d3:2c:d5:e1:d6:
0d:62:6d:1f:e9:72:89:01:de:27:af:ed:8d:84:38:bf:f5:d2:
03:1f:59:fc:b7:3e:0e:da:4f:5f:ef:cf:93:52:fe:07:ed:1e:
30:70:7a:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaFNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MTUzNjQ5WhcNMjYwOTIwMTUzNjQ5WjAYMRYw
FAYDVQQDEw02OGRhYTc5Ni1kNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTeAuXAOzBw9AkyumfXvf1reH7GLockN6+n1rpq0ToOIDhKF36+z/q0p
gVRvknC7JXUgg88zYGNuYATyK8SCn3/JItCmaPE3iEPiUZCZOIceYufdHfXkCYYe
0efp9QT3//kOml69BNNp0aifJ2479VzDSEp3bOlyNahBo2nzg7xXQiQPolKJREh7
g/sb1FTAe85sV8hFu5C2PQBtoDX9wATyP5ZF7S8tk6ruIG6WMUJfqA2O7/TpFoSU
YQkTopN7xsYyv4Y+p/D5z2IplzEv29WA13YK2OGOVOmMk4CIqsdCGeiVpFktLcV6
svYNyvEgSdZW14Y37pKRX/tgVs07NwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBWz
7rCK4pG8P4prWM9labXaBOyTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRkU1NzY4QzlENEExMUYwQTkyOThCOUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmskBMA0GCSqGSIb3DQEB
CwUAA4IBAQA21L2hgLFqVYlDPXekER1EQxb1UIHLEUnvMOWalKO0HIgxT947FPhf
ekjWhD9PRBp8sLKvqk6DaAKLYrBnG6eE7JgeNb9zbRZ6xgY5tT3WoFmw5abA482V
D8dncGwl7bMFQwSzupA36K1xwdc31SNERCAa1KDUWsxKt6jLtUsmyOEGNLAOiqHC
K4kVcjYnQ1k48tnj5qKdtC1M9qpmA+zQ1Jg4HqOX0EgLBtwMEuTdCcrXbhZ+M4sr
2PJk4kgqCrqL8d4vgPrxsYipqfkdVjppivjU0yzV4dYNYm0f6XKJAd4nr+2NhDi/
9dIDH1n8tz4O2k9f78+TUv4H7R4wcHp5
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:25 2025 by rpki-client