Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97FE91D88CA811F0948EDDB7DAE4EC9C.roa
File: 97FE91D88CA811F0948EDDB7DAE4EC9C.roa (raw, json)
Hash identifier: /zZHvk/ErdwRTcmbZOpL1fIm3mi2KQyXnqod/RUtna4=
Subject key identifier: 88:BF:54:DC:0E:87:7D:16:D1:42:36:20:77:3C:7C:97:61:8D:EF:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019EC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97FE91D88CA811F0948EDDB7DAE4EC9C.roa
Signing time: Mon 08 Sep 2025 11:40:18 +0000
ROA not before: Mon 08 Sep 2025 11:40:12 +0000
ROA not after: Mon 27 Oct 2025 11:40:12 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106185 (0x19ec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 8 11:40:12 2025 GMT
Not After : Oct 27 11:40:12 2025 GMT
Subject: CN=68bec0a2-d1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:a7:7c:f7:2e:3c:60:ae:9d:a0:96:f1:29:
2a:9e:2f:ae:40:43:6e:26:a0:f2:39:bf:c5:c9:9b:
75:f9:5f:96:c2:ad:94:9a:35:db:31:05:8d:d2:fa:
23:eb:df:2e:32:a8:ac:75:a8:bd:92:39:b9:cc:87:
21:b5:c5:f7:ca:eb:a7:8d:a3:c5:65:b5:53:bd:48:
b3:b2:37:40:e3:6e:5c:88:04:57:3b:20:dc:1d:88:
d4:02:6e:46:71:6d:cb:95:68:c9:e8:d8:e5:bb:93:
42:b8:71:01:1c:5b:a6:48:58:19:2d:87:ad:9d:1c:
19:58:7e:b5:85:55:55:cf:a2:68:66:bd:e9:e0:b8:
e9:46:c0:35:0e:c0:dd:04:14:29:cd:41:67:58:ce:
59:a0:5e:59:d4:1c:1d:06:0d:fb:50:6b:43:07:a3:
83:cd:60:fd:ef:0a:9e:1d:d9:ea:01:b6:8b:09:ff:
1b:c1:c2:fc:89:88:75:75:9d:93:d0:f9:df:fb:f3:
9b:3e:f2:82:cb:6b:97:26:2c:b1:c5:df:f1:00:31:
b4:3e:02:0a:22:83:aa:37:28:21:22:19:94:ff:74:
92:5e:c3:95:16:af:d3:16:25:e3:0b:29:a7:85:63:
8f:63:09:ea:d7:d9:8a:3a:7b:5c:c6:32:75:0c:39:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:54:DC:0E:87:7D:16:D1:42:36:20:77:3C:7C:97:61:8D:EF:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97FE91D88CA811F0948EDDB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
59:c1:35:b9:5f:73:38:f8:34:08:79:bd:66:eb:ca:17:e9:da:
a0:0a:b5:40:e6:08:f1:7a:02:ab:77:63:c6:21:13:c0:6b:1c:
d0:dc:96:3f:45:bb:61:68:0a:ac:63:97:f2:c3:32:c8:6d:f6:
44:6d:7e:2b:ab:4b:0d:2e:a2:a7:2c:66:b4:e6:c2:c1:d5:5b:
2d:95:52:8a:93:02:f5:b8:34:92:73:ab:e9:fa:6a:e7:fb:c1:
c1:69:cd:bd:23:b1:08:cf:b8:63:c9:db:c6:49:41:7c:85:e2:
92:7b:d0:42:6c:d5:ac:c1:40:53:dc:45:81:02:2e:5f:ef:0c:
d8:7b:3c:8a:bd:56:fb:e9:91:ee:4e:57:bc:80:96:29:3f:72:
22:56:f5:f1:e1:67:60:b2:1a:1e:b8:26:56:6c:c5:59:c4:44:
24:e6:bc:9f:a6:3b:75:f3:1e:dc:2f:3f:b5:c2:ac:e1:48:4d:
ce:ef:76:43:02:55:5f:00:dd:17:e1:52:97:d7:50:85:4a:e0:
4f:4d:eb:84:c8:66:9b:82:10:5c:29:4c:2f:16:38:0b:17:b9:
65:94:89:8f:0f:04:07:b7:92:78:b7:55:84:65:3b:bf:ef:74:
ab:d8:0b:10:2e:1e:26:78:04:64:a7:6f:67:71:4f:e2:4c:74:
0d:fe:a2:1b
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZ7JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA4MTE0MDEyWhcNMjUxMDI3MTE0MDEyWjAYMRYw
FAYDVQQDEw02OGJlYzBhMi1kMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0RanfPcuPGCunaCW8Skqni+uQENuJqDyOb/FyZt1+V+Wwq2UmjXbMQWN
0voj698uMqisdai9kjm5zIchtcX3yuunjaPFZbVTvUizsjdA425ciARXOyDcHYjU
Am5GcW3LlWjJ6Njlu5NCuHEBHFumSFgZLYetnRwZWH61hVVVz6JoZr3p4LjpRsA1
DsDdBBQpzUFnWM5ZoF5Z1BwdBg37UGtDB6ODzWD97wqeHdnqAbaLCf8bwcL8iYh1
dZ2T0Pnf+/ObPvKCy2uXJiyxxd/xADG0PgIKIoOqNyghIhmU/3SSXsOVFq/TFiXj
CymnhWOPYwnq19mKOntcxjJ1DDkuvQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIi/
VNwOh30W0UI2IHc8fJdhje/3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85N0ZFOTFEODhDQTgxMUYwOTQ4RUREQjdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmttgAwQEmt4QMA0GCSqG
SIb3DQEBCwUAA4IBAQBZwTW5X3M4+DQIeb1m68oX6dqgCrVA5gjxegKrd2PGIRPA
axzQ3JY/RbthaAqsY5fywzLIbfZEbX4rq0sNLqKnLGa05sLB1VstlVKKkwL1uDSS
c6vp+mrn+8HBac29I7EIz7hjydvGSUF8heKSe9BCbNWswUBT3EWBAi5f7wzYezyK
vVb76ZHuTle8gJYpP3IiVvXx4WdgshoeuCZWbMVZxEQk5ryfpjt18x7cLz+1wqzh
SE3O73ZDAlVfAN0X4VKX11CFSuBPTeuEyGabghBcKUwvFjgLF7lllImPDwQHt5J4
t1WEZTu/73Sr2AsQLh4meARkp29ncU/iTHQN/qIb
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:50 2025 by rpki-client