Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87A9F97A8A5611F0BCC7D8ACDAE4EC9C.roa
File: 87A9F97A8A5611F0BCC7D8ACDAE4EC9C.roa (raw, json)
Hash identifier: F67hUtGCxzXyr/FCclKBSb8sAOfAkDQiOvKD8RIkdFI=
Subject key identifier: 22:32:5B:05:AE:55:7D:59:D9:F8:E6:84:81:85:92:01:C7:D6:9E:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87A9F97A8A5611F0BCC7D8ACDAE4EC9C.roa
Signing time: Fri 05 Sep 2025 12:47:50 +0000
ROA not before: Fri 05 Sep 2025 12:47:45 +0000
ROA not after: Fri 12 Dec 2025 12:47:45 +0000
asID: 398478
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106036 (0x19e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 12:47:45 2025 GMT
Not After : Dec 12 12:47:45 2025 GMT
Subject: CN=68badbf6-2f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:be:c6:43:f9:10:47:2a:2a:f4:79:a0:39:
23:89:8f:11:f9:70:4c:ed:1a:34:a7:f7:dd:32:f5:
60:42:10:b2:de:30:6c:e7:84:d8:f2:e0:d6:7a:5b:
34:f0:22:b8:7e:da:6d:10:80:43:87:49:28:67:44:
87:99:1e:70:b0:28:ac:8c:6f:12:f8:8b:0a:32:c2:
23:b9:0c:09:d6:b3:ff:4b:ff:78:fe:bd:f9:90:cf:
b2:b8:d7:d5:8e:f5:b1:bc:d8:37:63:d7:e4:15:f9:
46:94:5f:06:59:20:c6:a0:72:4b:5d:a3:4b:b4:60:
cf:2a:18:c1:ce:bd:4d:29:0e:5c:61:fb:45:30:54:
01:e2:45:41:a6:5e:1d:ab:04:60:81:b8:26:90:c7:
a7:b5:0a:df:87:b5:8b:7a:68:ea:d7:d0:fa:37:1f:
28:1d:b0:3f:ca:2b:ae:5b:58:7e:d4:a9:14:f7:82:
e8:f0:71:b0:a2:b9:08:6d:a8:82:b5:8d:80:22:db:
c3:ab:d7:f1:74:11:99:98:f3:21:fa:d2:2a:90:2e:
22:51:1a:66:0f:0f:99:07:86:b2:a3:df:bf:a1:08:
1c:26:1c:a0:46:b3:6c:d4:8b:f4:d6:21:44:34:a0:
4d:2f:89:46:23:62:38:1d:57:3b:15:49:0f:c5:da:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:5B:05:AE:55:7D:59:D9:F8:E6:84:81:85:92:01:C7:D6:9E:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87A9F97A8A5611F0BCC7D8ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:6a:6c:0a:dd:8d:9e:80:1b:0e:0e:03:ea:01:91:59:1e:a4:
e0:23:84:78:36:8b:51:df:0f:3a:0f:54:11:07:23:1e:ae:ff:
b6:47:fa:05:fd:5a:a4:a1:67:e7:75:6f:6c:c8:d4:26:af:ee:
2b:61:5f:a3:d2:1f:37:7f:a6:bd:a5:e8:7d:d4:86:c2:29:2f:
c7:23:16:ca:af:9b:e6:4e:08:c3:e6:a9:ef:31:d4:74:ef:40:
8f:3e:cf:f9:71:68:96:b3:0e:a1:25:dc:2c:5b:f8:e9:66:32:
a4:1c:de:f0:6b:52:05:41:a8:5e:54:ac:06:9e:6c:e8:82:6f:
30:ff:a9:20:a9:6e:83:c2:ff:2b:58:45:e3:4e:d7:27:29:de:
1d:66:56:9c:b1:c3:d2:38:b8:f1:f8:cc:f3:58:e6:ed:6e:f5:
c9:a9:af:6f:5b:c7:07:59:b8:c8:f3:d0:5a:9a:0f:4d:93:62:
d0:4b:44:f7:c0:49:b3:f8:6d:4c:f2:11:b9:67:07:19:49:40:
b0:e3:9d:1c:96:05:b3:8d:f1:e8:63:2e:e7:8e:66:0a:b6:01:
f0:d7:00:62:92:67:72:91:12:86:8b:da:7f:41:4c:0b:77:79:
03:8f:43:8a:a5:95:ba:4d:36:23:db:93:8a:de:bd:91:73:2f:
75:95:e3:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ40MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA1MTI0NzQ1WhcNMjUxMjEyMTI0NzQ1WjAYMRYw
FAYDVQQDEw02OGJhZGJmNi0yZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxf2+xkP5EEcqKvR5oDkjiY8R+XBM7Ro0p/fdMvVgQhCy3jBs54TY8uDW
els08CK4ftptEIBDh0koZ0SHmR5wsCisjG8S+IsKMsIjuQwJ1rP/S/94/r35kM+y
uNfVjvWxvNg3Y9fkFflGlF8GWSDGoHJLXaNLtGDPKhjBzr1NKQ5cYftFMFQB4kVB
pl4dqwRggbgmkMentQrfh7WLemjq19D6Nx8oHbA/yiuuW1h+1KkU94Lo8HGworkI
baiCtY2AItvDq9fxdBGZmPMh+tIqkC4iURpmDw+ZB4ayo9+/oQgcJhygRrNs1Iv0
1iFENKBNL4lGI2I4HVc7FUkPxdoktwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCIy
WwWuVX1Z2fjmhIGFkgHH1p4XMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84N0E5Rjk3QThBNTYxMUYwQkNDN0Q4QUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlywMA0GCSqGSIb3DQEB
CwUAA4IBAQBtamwK3Y2egBsODgPqAZFZHqTgI4R4NotR3w86D1QRByMerv+2R/oF
/VqkoWfndW9syNQmr+4rYV+j0h83f6a9peh91IbCKS/HIxbKr5vmTgjD5qnvMdR0
70CPPs/5cWiWsw6hJdwsW/jpZjKkHN7wa1IFQaheVKwGnmzogm8w/6kgqW6Dwv8r
WEXjTtcnKd4dZlacscPSOLjx+MzzWObtbvXJqa9vW8cHWbjI89Bamg9Nk2LQS0T3
wEmz+G1M8hG5ZwcZSUCw450clgWzjfHoYy7njmYKtgHw1wBikmdykRKGi9p/QUwL
d3kDj0OKpZW6TTYj25OK3r2Rcy91leMl
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:00 2025 by rpki-client