Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61D25482997311F098C700B7DAE4EC9C.roa
File: 61D25482997311F098C700B7DAE4EC9C.roa (raw, json)
Hash identifier: VDLZyrNpuA9/G+jrJPTe+UQzPLSzlaTzUcAo88Frdaw=
Subject key identifier: 21:91:34:79:CF:7B:7E:67:6B:06:E7:7E:49:F5:51:3E:41:E9:A1:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61D25482997311F098C700B7DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 18:22:09 +0000
ROA not before: Wed 24 Sep 2025 18:22:04 +0000
ROA not after: Thu 30 Oct 2025 18:22:04 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106670 (0x1a0ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 18:22:04 2025 GMT
Not After : Oct 30 18:22:04 2025 GMT
Subject: CN=68d436d1-309a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:3f:ae:1c:3c:6d:7e:9e:bc:8e:18:33:17:
03:24:fc:41:79:03:2e:25:d4:35:8a:72:2e:52:c1:
b0:89:8d:3b:8e:13:14:7a:da:c9:52:d9:07:ed:03:
14:27:44:a7:73:0f:74:60:67:44:95:8a:f3:f8:c4:
5d:89:82:ee:02:27:50:52:be:09:2a:49:9f:77:97:
6c:22:47:45:ec:85:37:b5:c0:89:ac:22:9a:54:4c:
1a:ae:70:d5:30:aa:df:fa:f4:7c:0d:a2:45:00:3e:
59:54:57:b0:0c:31:2e:bd:1f:ce:7e:45:6b:f1:f9:
9a:7b:db:f9:c3:c7:77:55:5a:b1:f7:fb:37:93:ff:
4e:59:a4:63:92:07:e3:d1:6c:1e:28:b2:e5:31:eb:
89:b6:87:0d:26:5a:6a:e9:23:b5:0f:7b:bb:d7:57:
cb:63:84:86:4c:12:be:b1:59:a2:41:1b:f3:79:d4:
be:e7:d2:08:db:54:d9:35:6f:ba:1a:1e:4b:b0:7b:
1c:81:69:53:35:46:b7:4c:4f:20:71:52:74:00:0d:
89:09:0d:aa:a4:9e:09:2b:99:a6:4a:54:1c:48:4f:
1a:eb:80:76:7d:d8:4e:bc:a7:15:85:6f:d3:ab:24:
ea:5f:b0:82:6f:9b:a4:05:77:98:ed:b3:cc:bb:af:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:91:34:79:CF:7B:7E:67:6B:06:E7:7E:49:F5:51:3E:41:E9:A1:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61D25482997311F098C700B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
96:13:4f:b6:7d:bc:aa:5d:21:ea:91:d7:d4:a7:20:bd:9c:a8:
16:57:c4:be:8e:cc:fe:45:2e:97:8c:e0:1c:f1:89:61:fd:52:
11:62:c7:b8:c1:eb:7d:2e:02:4b:1c:0c:ca:92:c5:ac:bf:92:
b6:1f:02:ce:f7:14:f8:92:60:9b:e3:71:42:3c:95:25:fb:5c:
80:f5:0f:2b:0b:40:d5:b9:b1:fd:1b:d0:e9:d9:aa:25:ad:66:
bc:e5:81:96:9d:2d:10:78:3b:49:13:35:45:7c:ed:ea:39:45:
0e:f8:08:dc:ee:c3:29:47:eb:fa:82:f6:c4:ce:97:1f:9b:32:
39:ad:6e:33:b5:95:5b:4e:75:8c:c4:f4:22:5a:89:bf:a9:f3:
dd:35:68:52:df:af:b5:bc:f0:8e:a8:ab:af:eb:87:95:70:38:
d3:f8:db:ba:84:90:bf:8a:e5:df:85:fb:0c:47:94:ef:44:61:
3d:ec:12:b9:b4:89:14:4d:5d:48:69:dc:f2:c6:d6:71:a0:32:
2c:ca:14:10:58:38:4e:17:ee:5d:e6:68:da:73:73:2d:18:9f:
4d:f6:02:ab:86:17:2c:63:68:7f:d0:80:0e:83:19:3d:e6:2c:
d7:5f:c3:dc:92:e0:c5:5c:bc:70:cb:30:c4:cf:91:e5:ec:da:
b0:5e:34:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaCuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MTgyMjA0WhcNMjUxMDMwMTgyMjA0WjAYMRYw
FAYDVQQDEw02OGQ0MzZkMS0zMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuRk/rhw8bX6evI4YMxcDJPxBeQMuJdQ1inIuUsGwiY07jhMUetrJUtkH
7QMUJ0Sncw90YGdElYrz+MRdiYLuAidQUr4JKkmfd5dsIkdF7IU3tcCJrCKaVEwa
rnDVMKrf+vR8DaJFAD5ZVFewDDEuvR/OfkVr8fmae9v5w8d3VVqx9/s3k/9OWaRj
kgfj0WweKLLlMeuJtocNJlpq6SO1D3u711fLY4SGTBK+sVmiQRvzedS+59II21TZ
NW+6Gh5LsHscgWlTNUa3TE8gcVJ0AA2JCQ2qpJ4JK5mmSlQcSE8a64B2fdhOvKcV
hW/TqyTqX7CCb5ukBXeY7bPMu68khwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCGR
NHnPe35nawbnfkn1UT5B6aF+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MUQyNTQ4Mjk5NzMxMUYwOThDNzAwQjdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWE0+2fbyqXSHqkdfUpyC9nKgWV8S+jsz+RS6XjOAc8Ylh/VIRYse4
wet9LgJLHAzKksWsv5K2HwLO9xT4kmCb43FCPJUl+1yA9Q8rC0DVubH9G9Dp2aol
rWa85YGWnS0QeDtJEzVFfO3qOUUO+Ajc7sMpR+v6gvbEzpcfmzI5rW4ztZVbTnWM
xPQiWom/qfPdNWhS36+1vPCOqKuv64eVcDjT+Nu6hJC/iuXfhfsMR5TvRGE97BK5
tIkUTV1IadzyxtZxoDIsyhQQWDhOF+5d5mjac3MtGJ9N9gKrhhcsY2h/0IAOgxk9
5izXX8PckuDFXLxwyzDEz5Hl7NqwXjSk
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:58 2025 by rpki-client