Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9225B7AA44A11F0912B1787DAE4EC9C.roa
File: A9225B7AA44A11F0912B1787DAE4EC9C.roa (raw, json)
Hash identifier: kQI42kXjV0GTT41gyFX2ksSZPwaVnbdyPq0gW3y1vxQ=
Subject key identifier: 92:85:65:77:2B:E5:CB:8E:56:1D:37:4A:40:CC:EC:1C:5B:03:D9:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A2DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9225B7AA44A11F0912B1787DAE4EC9C.roa
Signing time: Wed 08 Oct 2025 13:28:22 +0000
ROA not before: Wed 08 Oct 2025 13:28:16 +0000
ROA not after: Thu 27 Nov 2025 13:28:16 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107231 (0x1a2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 8 13:28:16 2025 GMT
Not After : Nov 27 13:28:16 2025 GMT
Subject: CN=68e666f6-e9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:6a:ae:33:a5:4e:9c:c8:17:90:fd:41:de:
47:aa:d7:7d:70:96:6c:11:43:c2:3b:af:70:e9:d2:
ae:f7:d6:6d:f1:db:8b:cd:7a:07:16:62:05:c5:a4:
8b:38:24:44:c0:c6:c2:b9:c8:29:5c:cc:55:4a:23:
21:08:36:10:c5:ab:6e:b1:c8:0f:2f:a1:33:fb:0e:
0b:2b:36:e5:d0:83:2b:32:85:8e:a6:67:0a:4d:c7:
23:62:d5:e2:89:74:dc:a1:84:92:53:3d:2a:c9:41:
59:19:2a:78:81:20:e6:d3:6d:03:6f:da:2f:10:b8:
12:5f:31:8d:2b:c5:4a:c4:fd:e8:f8:8d:b0:40:66:
35:98:10:58:71:af:12:ba:bd:52:17:c5:c3:04:28:
4e:44:99:fe:b4:c5:8e:dd:07:be:44:94:7f:96:4b:
6d:9e:fe:e4:3a:89:ad:02:e6:0d:30:17:2c:54:7e:
60:08:bc:ab:47:0b:85:8d:22:ac:0a:5a:06:08:54:
45:e8:5e:52:96:1c:f7:68:df:09:b1:81:7b:9b:3c:
f5:44:d5:b9:d6:4b:b4:58:5c:46:9c:a0:d3:a8:93:
32:02:06:40:92:30:d3:d0:88:22:1e:c3:13:31:a8:
dc:15:78:cb:74:7c:b0:27:82:5e:65:3a:b0:11:b0:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:65:77:2B:E5:CB:8E:56:1D:37:4A:40:CC:EC:1C:5B:03:D9:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9225B7AA44A11F0912B1787DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:c0:60:1b:91:53:31:47:28:5b:24:0f:ce:f5:7c:c3:ff:73:
84:fc:2e:7d:a6:6e:67:e9:91:c1:eb:f1:30:a9:99:6c:6e:ce:
06:3b:93:dd:bc:fb:cb:cd:d2:5e:9e:3f:45:ee:fa:57:6a:a5:
a8:c0:f6:36:33:51:d6:43:59:34:a9:a3:38:09:a2:2f:2b:f8:
65:7a:64:d3:c2:66:2c:6e:ab:c9:4a:4a:b3:e0:df:d6:d9:4f:
01:ad:7f:7d:89:c2:55:4d:31:57:ed:31:5b:d1:fe:7e:aa:6c:
98:de:9f:45:ac:ff:da:9d:0d:f4:4b:66:f0:7e:82:bb:ea:31:
94:38:92:53:b0:3f:08:e9:18:aa:93:62:c6:6c:91:62:fd:8f:
61:92:4c:34:65:24:40:52:e5:ab:fe:0e:db:33:ca:98:6c:82:
00:fd:46:3c:93:41:33:8b:14:ef:a1:a7:01:4f:44:e7:61:06:
40:db:a6:b9:6b:9e:e5:61:52:2e:2f:34:6d:dd:e9:86:73:00:
9a:0f:8b:2b:5b:d7:77:8d:79:ce:ab:2c:0c:a9:95:7d:6d:46:
ab:57:3e:09:0d:99:f2:93:30:ae:3f:46:7c:13:dc:98:5d:75:
48:d0:20:2c:f6:ba:87:dc:be:45:92:df:ea:99:f1:d3:b3:c2:
f9:62:a7:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaLfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDA4MTMyODE2WhcNMjUxMTI3MTMyODE2WjAYMRYw
FAYDVQQDEw02OGU2NjZmNi1lOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwuVqrjOlTpzIF5D9Qd5Hqtd9cJZsEUPCO69w6dKu99Zt8duLzXoHFmIF
xaSLOCREwMbCucgpXMxVSiMhCDYQxatuscgPL6Ez+w4LKzbl0IMrMoWOpmcKTccj
YtXiiXTcoYSSUz0qyUFZGSp4gSDm020Db9ovELgSXzGNK8VKxP3o+I2wQGY1mBBY
ca8Sur1SF8XDBChORJn+tMWO3Qe+RJR/lkttnv7kOomtAuYNMBcsVH5gCLyrRwuF
jSKsCloGCFRF6F5Slhz3aN8JsYF7mzz1RNW51ku0WFxGnKDTqJMyAgZAkjDT0Igi
HsMTMajcFXjLdHywJ4JeZTqwEbD/5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJKF
ZXcr5cuOVh03SkDM7BxbA9l6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTIyNUI3QUE0NEExMUYwOTEyQjE3ODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQA6wGAbkVMxRyhbJA/O9XzD/3OE/C59pm5n6ZHB6/EwqZlsbs4GO5Pd
vPvLzdJenj9F7vpXaqWowPY2M1HWQ1k0qaM4CaIvK/hlemTTwmYsbqvJSkqz4N/W
2U8BrX99icJVTTFX7TFb0f5+qmyY3p9FrP/anQ30S2bwfoK76jGUOJJTsD8I6Riq
k2LGbJFi/Y9hkkw0ZSRAUuWr/g7bM8qYbIIA/UY8k0EzixTvoacBT0TnYQZA26a5
a57lYVIuLzRt3emGcwCaD4srW9d3jXnOqywMqZV9bUarVz4JDZnykzCuP0Z8E9yY
XXVI0CAs9rqH3L5Fkt/qmfHTs8L5Yqdq
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:24 2025 by rpki-client