Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B20B8F83E1C11F0894043B4DAE4EC9C.roa
File: 9B20B8F83E1C11F0894043B4DAE4EC9C.roa (raw, json)
Hash identifier: Cifc2hDmTlJ8BgLgFlRYK+fw/XWf0Lzm2rbdYtaO3og=
Subject key identifier: 31:E8:37:DE:F9:AF:0E:1D:9E:1E:A6:22:2E:E6:6A:1D:27:00:6D:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018400
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B20B8F83E1C11F0894043B4DAE4EC9C.roa
Signing time: Sat 31 May 2025 12:41:43 +0000
ROA not before: Sat 31 May 2025 12:41:39 +0000
ROA not after: Mon 16 Jun 2025 12:41:39 +0000
asID: 401701
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99328 (0x18400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 12:41:39 2025 GMT
Not After : Jun 16 12:41:39 2025 GMT
Subject: CN=683af907-e483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:7c:89:f7:81:c5:24:5b:37:85:0a:b9:58:
a5:51:1f:b2:27:0a:fa:39:cd:b3:4f:bf:b2:1c:cf:
69:47:6a:7c:c5:28:34:6c:13:f4:48:62:69:a9:bf:
e5:ad:03:21:e4:27:f9:1b:ed:1b:79:04:b4:7c:52:
7d:5f:e8:48:b2:ff:fd:41:1f:d0:3a:f3:1b:04:6f:
58:43:6d:78:dc:ca:69:c0:d1:c9:c5:9c:36:8e:67:
a7:59:7b:a0:40:94:59:30:0e:d4:46:d0:1d:07:a7:
23:ce:47:a1:9e:bd:ff:63:34:1d:e1:5a:03:58:91:
59:ef:ed:ef:14:d6:18:90:cb:18:f4:12:2e:ea:01:
c4:9b:8c:83:cc:20:63:3b:51:c6:24:48:78:70:17:
ae:9e:28:51:ca:b2:dd:7a:0f:1b:58:9d:ec:32:ea:
7f:8d:70:5c:fc:d3:3f:03:40:7c:26:29:09:e8:9b:
28:01:da:60:31:bc:70:71:45:e6:98:a5:1a:b8:02:
58:3f:ed:cf:29:0a:aa:3e:40:d2:cf:cb:80:75:71:
75:eb:8a:6a:8f:a1:d2:00:a5:8c:cc:88:5e:39:53:
44:33:15:28:e5:2a:d7:02:75:ab:db:bc:ed:d7:bc:
64:eb:bb:17:a3:99:7d:a8:40:d3:33:8b:80:3c:de:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E8:37:DE:F9:AF:0E:1D:9E:1E:A6:22:2E:E6:6A:1D:27:00:6D:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B20B8F83E1C11F0894043B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:ce:cb:1b:e6:31:59:ce:7c:a0:6b:a9:62:64:e3:4a:94:bd:
41:4b:05:e4:b2:a4:fd:ba:04:dd:24:71:ff:e6:46:8e:f0:4a:
cd:7d:51:57:5b:d9:d1:75:87:07:56:97:be:66:2e:0e:8a:df:
4a:53:84:16:3a:32:6b:51:b3:92:d3:e1:0b:99:28:2b:20:65:
a1:23:01:37:45:eb:89:40:5a:ba:7c:ae:d3:6b:82:c3:0f:6f:
02:27:33:b9:e3:b2:49:e8:93:62:14:74:cc:72:19:4c:b1:d4:
5e:aa:f5:ba:b2:78:3b:40:81:9d:8b:c2:95:7f:99:1b:82:be:
e5:a0:6f:e7:1a:31:e8:5c:9e:6c:7b:e9:0f:62:93:b9:d9:e3:
3c:89:a0:53:3f:8f:15:00:02:c7:5c:e0:9f:ef:c4:d1:81:95:
1e:e3:c9:84:18:90:1c:93:bb:5f:ce:c3:62:b6:77:da:6f:86:
0a:72:7f:8e:4b:20:21:11:7f:a2:0c:01:3e:f4:05:53:b8:0c:
e5:ed:90:d8:15:0c:42:24:f4:55:a4:9d:32:28:a9:2e:c5:6d:
69:c2:4a:d2:23:0e:dc:da:46:42:55:8f:25:3a:b3:0d:4a:5c:
8a:9a:9d:43:4d:60:52:44:e0:9f:2f:44:99:c2:79:cb:d2:36:
5a:d7:92:14
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYQAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTMxMTI0MTM5WhcNMjUwNjE2MTI0MTM5WjAYMRYw
FAYDVQQDEw02ODNhZjkwNy1lNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAswt8ifeBxSRbN4UKuVilUR+yJwr6Oc2zT7+yHM9pR2p8xSg0bBP0SGJp
qb/lrQMh5Cf5G+0beQS0fFJ9X+hIsv/9QR/QOvMbBG9YQ2143MppwNHJxZw2jmen
WXugQJRZMA7URtAdB6cjzkehnr3/YzQd4VoDWJFZ7+3vFNYYkMsY9BIu6gHEm4yD
zCBjO1HGJEh4cBeunihRyrLdeg8bWJ3sMup/jXBc/NM/A0B8JikJ6JsoAdpgMbxw
cUXmmKUauAJYP+3PKQqqPkDSz8uAdXF164pqj6HSAKWMzIheOVNEMxUo5SrXAnWr
27zt17xk67sXo5l9qEDTM4uAPN52FQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDHo
N975rw4dnh6mIi7mah0nAG1iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjIwQjhGODNFMUMxMUYwODk0MDQzQjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmttgAwQEmt4QMA0GCSqG
SIb3DQEBCwUAA4IBAQCdzssb5jFZznyga6liZONKlL1BSwXksqT9ugTdJHH/5kaO
8ErNfVFXW9nRdYcHVpe+Zi4Oit9KU4QWOjJrUbOS0+ELmSgrIGWhIwE3ReuJQFq6
fK7Ta4LDD28CJzO547JJ6JNiFHTMchlMsdReqvW6sng7QIGdi8KVf5kbgr7loG/n
GjHoXJ5se+kPYpO52eM8iaBTP48VAALHXOCf78TRgZUe48mEGJAck7tfzsNitnfa
b4YKcn+OSyAhEX+iDAE+9AVTuAzl7ZDYFQxCJPRVpJ0yKKkuxW1pwkrSIw7c2kZC
VY8lOrMNSlyKmp1DTWBSROCfL0SZwnnL0jZa15IU
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:40:08 2025 by rpki-client