Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647DB6C488C811F088D1C488DAE4EC9C.roa
File: 647DB6C488C811F088D1C488DAE4EC9C.roa (raw, json)
Hash identifier: fxbD+MPWaP5PNcIGJW5oTOn1N5IvSltiN0WM3hQqKaI=
Subject key identifier: 37:70:FD:CD:16:05:9B:F3:86:F0:3A:69:A2:64:02:8E:C6:48:85:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647DB6C488C811F088D1C488DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 13:17:51 +0000
ROA not before: Wed 03 Sep 2025 13:17:43 +0000
ROA not after: Fri 10 Oct 2025 13:17:43 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105752 (0x19d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 13:17:43 2025 GMT
Not After : Oct 10 13:17:43 2025 GMT
Subject: CN=68b83fff-1af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:31:2b:af:0d:4b:0c:92:f6:6d:22:ea:6d:
02:70:61:7c:b5:2d:41:59:71:cd:53:37:62:52:71:
25:0a:d4:e7:df:5f:d3:00:f3:c0:95:97:f4:39:89:
b1:b8:ef:5d:9c:06:38:e1:83:b9:ff:2f:21:99:ea:
0d:b0:78:b6:82:a8:6f:f9:1d:73:52:d7:43:d9:4e:
43:be:e7:24:f9:1d:cb:94:c3:65:db:c2:5b:70:d0:
72:83:6d:32:e0:8a:10:33:42:17:17:27:34:82:2a:
5b:b7:66:1d:3a:a5:af:99:15:ce:b0:ec:f6:0c:07:
79:05:52:93:9c:17:05:ab:4d:4b:c3:ac:db:0f:92:
71:db:b7:b8:32:23:90:54:2d:f0:11:c9:7a:3f:d9:
18:46:ec:3c:f7:6e:b0:3a:8f:b6:6a:17:c3:42:70:
35:1c:8f:cc:a8:42:6d:a4:c4:31:0f:8a:39:44:32:
f8:7c:4f:3a:4d:04:47:13:0c:b2:0e:93:15:34:4f:
22:35:ba:99:43:f2:c9:86:fb:00:8b:8e:34:29:59:
10:92:bc:a7:38:fc:db:1e:d3:13:70:5b:87:47:ed:
2c:5d:3a:62:1c:84:81:ee:46:1f:59:83:b4:d5:eb:
23:03:3a:71:36:4c:cd:67:14:58:ca:29:94:4b:4c:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:FD:CD:16:05:9B:F3:86:F0:3A:69:A2:64:02:8E:C6:48:85:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647DB6C488C811F088D1C488DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
03:ee:0c:32:6f:d5:98:0e:8a:3a:ad:29:8d:9f:08:e7:bf:1f:
d7:aa:26:2a:a8:fb:55:4f:fd:83:f9:e4:aa:4e:40:fe:94:7c:
6e:5f:a2:15:0b:84:86:49:db:69:37:ba:63:bd:6e:6f:c9:bb:
ed:ae:b6:ff:9f:46:b0:6e:47:08:e5:be:fd:70:72:64:4e:f5:
b0:50:a3:49:aa:b4:ad:f2:e0:df:f4:cf:4e:bf:ba:3b:45:5a:
d1:bd:27:76:d6:8e:50:ea:a6:5b:79:f9:0e:2f:a1:06:29:08:
24:71:7f:65:ba:c2:37:76:41:a9:df:05:36:9e:e3:8d:54:cc:
0d:36:a8:a1:c3:da:0d:b2:7d:76:4d:15:1b:28:7c:b6:51:4c:
3a:3e:59:6b:1e:9c:ce:8c:d0:f0:f0:ce:f3:fa:ba:db:ad:2c:
80:ef:6d:4e:64:67:25:06:ac:53:15:d5:3e:57:c4:8d:02:70:
af:2e:bb:fa:35:da:0f:ef:4c:08:c1:d9:3c:d6:7b:56:a3:12:
99:a8:de:25:0d:2a:67:68:ca:26:3a:d9:4e:b1:50:5e:a9:95:
05:8f:46:e7:92:d6:30:28:c7:0b:a0:f7:fd:dc:44:07:3d:b9:
ed:60:b6:75:39:a2:1e:4c:7f:4b:3e:6b:0e:4c:bb:77:25:6b:
40:7d:db:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ0YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMTMxNzQzWhcNMjUxMDEwMTMxNzQzWjAYMRYw
FAYDVQQDEw02OGI4M2ZmZi0xYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyeExK68NSwyS9m0i6m0CcGF8tS1BWXHNUzdiUnElCtTn31/TAPPAlZf0
OYmxuO9dnAY44YO5/y8hmeoNsHi2gqhv+R1zUtdD2U5Dvuck+R3LlMNl28JbcNBy
g20y4IoQM0IXFyc0gipbt2YdOqWvmRXOsOz2DAd5BVKTnBcFq01Lw6zbD5Jx27e4
MiOQVC3wEcl6P9kYRuw8926wOo+2ahfDQnA1HI/MqEJtpMQxD4o5RDL4fE86TQRH
EwyyDpMVNE8iNbqZQ/LJhvsAi440KVkQkrynOPzbHtMTcFuHR+0sXTpiHISB7kYf
WYO01esjAzpxNkzNZxRYyimUS0zQ/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDdw
/c0WBZvzhvA6aaJkAo7GSIUAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NDdEQjZDNDg4QzgxMUYwODhEMUM0ODhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQAD7gwyb9WYDoo6rSmNnwjnvx/XqiYqqPtVT/2D+eSqTkD+lHxuX6IV
C4SGSdtpN7pjvW5vybvtrrb/n0awbkcI5b79cHJkTvWwUKNJqrSt8uDf9M9Ov7o7
RVrRvSd21o5Q6qZbefkOL6EGKQgkcX9lusI3dkGp3wU2nuONVMwNNqihw9oNsn12
TRUbKHy2UUw6PllrHpzOjNDw8M7z+rrbrSyA721OZGclBqxTFdU+V8SNAnCvLrv6
NdoP70wIwdk81ntWoxKZqN4lDSpnaMomOtlOsVBeqZUFj0bnktYwKMcLoPf93EQH
PbntYLZ1OaIeTH9LPmsOTLt3JWtAfdtp
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:41 2025 by rpki-client