Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B435732899E11F09A29ED7DDAE4EC9C.roa
File: 9B435732899E11F09A29ED7DDAE4EC9C.roa (raw, json)
Hash identifier: mgLzJGaX7un37F1jiya+pNc9UiM5UZS8DSbvmxa5sJM=
Subject key identifier: BE:88:2F:8E:98:DC:66:9E:72:57:7F:2E:86:9B:C0:2E:4D:C8:23:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019DBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B435732899E11F09A29ED7DDAE4EC9C.roa
Signing time: Thu 04 Sep 2025 14:51:15 +0000
ROA not before: Thu 04 Sep 2025 14:51:11 +0000
ROA not after: Sun 01 Sep 2030 14:51:11 +0000
asID: 134548
IP address blocks: 154.88.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105919 (0x19dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 14:51:11 2025 GMT
Not After : Sep 1 14:51:11 2030 GMT
Subject: CN=68b9a763-001c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:70:44:8d:7d:c1:62:ff:f0:0d:36:c6:d7:
cc:4b:7e:d2:8a:c1:67:9f:7b:5e:ca:0b:b0:83:97:
29:4f:d9:3a:64:aa:bb:7b:5e:ae:00:e6:f2:ae:cb:
6e:c0:22:a4:a3:b5:88:ad:cc:2b:15:01:f6:84:18:
10:ff:7c:bf:8d:80:d4:61:00:f3:34:03:3f:e1:47:
68:aa:9d:a0:55:ad:c8:18:7a:4d:43:d9:8d:30:b9:
39:27:02:66:92:8b:30:d8:9d:d7:39:d7:a6:a8:a6:
d9:2d:07:59:f8:29:eb:ca:90:e6:9a:7a:5a:fd:67:
1f:e0:20:14:b2:2a:dc:6f:dc:c4:70:9c:21:9a:8b:
fc:18:92:33:8d:ad:de:6c:49:cb:d8:a9:14:3a:30:
2e:be:2b:77:15:da:55:9a:60:ac:1e:43:9c:6c:e2:
db:15:36:8c:72:09:5f:2a:4f:73:bf:2b:25:37:c9:
7c:62:d6:95:a7:81:09:e9:65:c6:dd:5c:f0:0d:28:
14:44:a2:d5:3e:76:1e:fe:c7:28:68:69:23:d0:3a:
7f:de:11:39:53:d6:f8:12:c6:ee:6c:67:7a:aa:60:
35:38:3b:e4:07:c2:49:28:06:ac:02:a5:50:a0:ea:
3f:0a:5b:41:f9:5f:2e:d8:28:74:8f:d4:3a:d9:bc:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:88:2F:8E:98:DC:66:9E:72:57:7F:2E:86:9B:C0:2E:4D:C8:23:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B435732899E11F09A29ED7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ec:7c:b5:b0:ca:d1:cd:db:01:e4:21:22:15:3a:cc:f6:bb:
08:2a:d3:5d:0f:c7:79:e4:60:26:de:dc:1a:75:8f:7f:e8:84:
16:e7:60:ab:ea:e0:b7:3a:49:aa:3a:2f:d2:4d:49:23:47:33:
26:33:c4:de:bb:63:c8:e7:6a:1b:a9:f9:be:af:20:17:3f:25:
0b:73:9f:e2:63:53:ee:b4:49:d5:d5:20:27:e7:5c:46:4d:90:
4a:fc:00:59:7e:cf:6c:17:67:0c:f1:10:06:91:ed:95:07:f8:
32:24:d5:7c:f1:c7:e0:1c:fd:8f:81:86:ef:ea:ba:d6:91:e8:
95:8c:bc:69:d0:4f:28:a3:46:2f:e9:b5:f5:c5:bb:96:43:ae:
77:7f:c1:a4:2a:d7:b9:6b:02:8a:b3:71:ad:eb:3c:3d:40:3b:
aa:ca:66:20:c0:60:ad:39:11:91:c2:d6:77:bc:21:1d:65:c3:
88:0c:c1:47:10:27:15:d6:bd:89:98:e8:5a:e4:69:8a:58:e0:
df:53:f4:45:fd:a4:85:25:f9:15:e6:2e:54:3d:0f:d7:c5:ed:
0d:3c:33:e8:76:1e:bc:3c:41:de:c5:eb:45:90:94:81:f1:7b:
ca:89:f7:4b:5f:7e:e6:5c:70:a3:f8:b6:34:3f:8a:fd:1f:0f:
1d:f2:d0:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZ2/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA0MTQ1MTExWhcNMzAwOTAxMTQ1MTExWjAYMRYw
FAYDVQQDEw02OGI5YTc2My0wMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnTFwRI19wWL/8A02xtfMS37SisFnn3teyguwg5cpT9k6ZKq7e16uAOby
rstuwCKko7WIrcwrFQH2hBgQ/3y/jYDUYQDzNAM/4Udoqp2gVa3IGHpNQ9mNMLk5
JwJmkosw2J3XOdemqKbZLQdZ+CnrypDmmnpa/Wcf4CAUsircb9zEcJwhmov8GJIz
ja3ebEnL2KkUOjAuvit3FdpVmmCsHkOcbOLbFTaMcglfKk9zvyslN8l8YtaVp4EJ
6WXG3VzwDSgURKLVPnYe/scoaGkj0Dp/3hE5U9b4EsbubGd6qmA1ODvkB8JJKAas
AqVQoOo/CltB+V8u2Ch0j9Q62bzk4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL6I
L46Y3Gaecld/LoabwC5NyCPGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjQzNTczMjg5OUUxMUYwOUEyOUVEN0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgIMA0GCSqGSIb3DQEB
CwUAA4IBAQAL7Hy1sMrRzdsB5CEiFTrM9rsIKtNdD8d55GAm3twadY9/6IQW52Cr
6uC3OkmqOi/STUkjRzMmM8Teu2PI52obqfm+ryAXPyULc5/iY1PutEnV1SAn51xG
TZBK/ABZfs9sF2cM8RAGke2VB/gyJNV88cfgHP2PgYbv6rrWkeiVjLxp0E8oo0Yv
6bX1xbuWQ653f8GkKte5awKKs3Gt6zw9QDuqymYgwGCtORGRwtZ3vCEdZcOIDMFH
ECcV1r2JmOha5GmKWODfU/RF/aSFJfkV5i5UPQ/Xxe0NPDPodh68PEHexetFkJSB
8XvKifdLX37mXHCj+LY0P4r9Hw8d8tCK
-----END CERTIFICATE-----
Generated at Wed Sep 17 18:35:54 2025 by rpki-client