Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472855D688C611F0B7CF777BDAE4EC9C.roa
File: 472855D688C611F0B7CF777BDAE4EC9C.roa (raw, json)
Hash identifier: qPt29GxPAcgQ6RcugJbvaAhdcNgl+LQ1+CEP2x8picQ=
Subject key identifier: 9C:48:99:66:95:1E:33:E6:F1:4F:C9:E4:D0:57:79:13:2D:CB:16:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472855D688C611F0B7CF777BDAE4EC9C.roa
Signing time: Wed 03 Sep 2025 13:02:43 +0000
ROA not before: Wed 03 Sep 2025 13:02:38 +0000
ROA not after: Fri 10 Oct 2025 13:02:38 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105746 (0x19d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 13:02:38 2025 GMT
Not After : Oct 10 13:02:38 2025 GMT
Subject: CN=68b83c73-2ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:a4:55:8b:bf:19:1e:85:5b:ef:db:4c:33:
3c:9c:43:d1:20:4a:36:92:28:ba:40:20:de:17:47:
8e:4d:e3:8b:e9:94:93:8a:64:3b:51:97:65:77:e4:
bb:b6:3f:2d:ba:3c:22:f2:98:2d:e3:dd:60:38:fb:
64:9b:15:91:9a:e9:e4:2c:2c:45:a6:a2:13:01:f9:
d8:0b:f9:fd:87:70:b9:9f:e9:7c:aa:79:b7:8a:19:
19:7a:05:8a:5f:06:86:ba:bb:7f:37:bc:61:91:13:
11:5b:22:25:49:a8:0c:db:5a:f5:0f:5d:df:c6:60:
b0:8c:ec:82:6d:92:c5:be:44:a7:3e:97:af:26:4e:
87:af:90:75:de:a3:72:4d:c5:23:23:2a:68:da:2d:
69:86:ac:27:67:75:e2:d5:96:3a:7a:c9:7f:f2:01:
53:a5:6f:ab:f9:89:8f:64:c4:6a:81:a9:22:21:08:
bd:1f:3e:95:61:df:90:d5:f0:2a:b4:f9:46:de:81:
6d:84:af:81:ed:c8:a8:de:e8:29:9a:5c:04:07:3a:
ec:d9:19:8b:9f:b7:a1:d0:9e:02:f8:d8:06:bd:b8:
81:1c:8c:0c:5e:df:ca:fe:57:99:b1:54:22:09:10:
0a:cb:26:78:d9:fe:76:99:cd:c5:f4:89:6d:91:50:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:99:66:95:1E:33:E6:F1:4F:C9:E4:D0:57:79:13:2D:CB:16:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/472855D688C611F0B7CF777BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:ff:c0:58:68:10:bc:1d:2f:43:89:a7:e4:e2:af:c0:bc:52:
46:70:2c:f7:10:7d:22:94:1f:78:1e:77:fa:6a:33:1d:42:19:
89:c7:2d:e7:3f:6e:1a:82:fc:09:c9:b3:75:9e:b3:0f:99:79:
bb:40:9d:61:73:46:fb:a0:aa:8d:37:ef:5d:4b:0d:63:43:60:
6f:43:01:09:ec:2a:77:b5:aa:ce:2d:ea:03:36:4d:ea:18:c6:
19:30:c9:89:21:52:a9:ab:ae:01:6c:f3:b5:40:49:02:cd:f1:
2d:77:47:59:ab:a4:4b:c0:c1:c0:b4:5d:ff:eb:4a:62:35:9e:
73:22:56:65:4d:c0:ef:5b:05:18:a1:a2:b6:1b:5e:22:d9:fe:
95:f9:f5:d5:2f:0a:c9:65:af:26:bd:da:66:60:49:17:45:39:
3b:0b:70:ac:89:9f:7a:93:cc:81:2e:30:6d:16:ac:78:33:2d:
56:d4:df:7b:cb:bc:b6:82:67:db:48:d3:a4:dd:13:66:d9:9c:
0a:1c:2f:64:fb:b9:69:04:33:37:fd:2d:ec:92:31:0f:80:8c:
2c:9c:8c:f0:09:22:8f:2a:4c:19:7c:1f:22:4a:5b:5a:45:98:
98:88:78:b7:fc:b9:24:e7:b2:2e:25:0b:85:d9:3f:ff:11:5b:
25:89:bd:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ0SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMTMwMjM4WhcNMjUxMDEwMTMwMjM4WjAYMRYw
FAYDVQQDEw02OGI4M2M3My0yYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAymOkVYu/GR6FW+/bTDM8nEPRIEo2kii6QCDeF0eOTeOL6ZSTimQ7UZdl
d+S7tj8tujwi8pgt491gOPtkmxWRmunkLCxFpqITAfnYC/n9h3C5n+l8qnm3ihkZ
egWKXwaGurt/N7xhkRMRWyIlSagM21r1D13fxmCwjOyCbZLFvkSnPpevJk6Hr5B1
3qNyTcUjIypo2i1phqwnZ3Xi1ZY6esl/8gFTpW+r+YmPZMRqgakiIQi9Hz6VYd+Q
1fAqtPlG3oFthK+B7cio3ugpmlwEBzrs2RmLn7eh0J4C+NgGvbiBHIwMXt/K/leZ
sVQiCRAKyyZ42f52mc3F9IltkVCpUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJxI
mWaVHjPm8U/J5NBXeRMtyxaUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NzI4NTVENjg4QzYxMUYwQjdDRjc3N0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQC1/8BYaBC8HS9Diafk4q/AvFJGcCz3EH0ilB94Hnf6ajMdQhmJxy3n
P24agvwJybN1nrMPmXm7QJ1hc0b7oKqNN+9dSw1jQ2BvQwEJ7Cp3tarOLeoDNk3q
GMYZMMmJIVKpq64BbPO1QEkCzfEtd0dZq6RLwMHAtF3/60piNZ5zIlZlTcDvWwUY
oaK2G14i2f6V+fXVLwrJZa8mvdpmYEkXRTk7C3CsiZ96k8yBLjBtFqx4My1W1N97
y7y2gmfbSNOk3RNm2ZwKHC9k+7lpBDM3/S3skjEPgIwsnIzwCSKPKkwZfB8iSlta
RZiYiHi3/Lkk57IuJQuF2T//EVslib0L
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:28 2025 by rpki-client