Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A98F60AE895A11F0A3242BC6DAE4EC9C.roa
File: A98F60AE895A11F0A3242BC6DAE4EC9C.roa (raw, json)
Hash identifier: Icsmb4ch0PFHFcu5DEAlss02XNdpiW1Vzas5aPdXV9g=
Subject key identifier: C0:8D:36:7C:CD:AE:2E:52:64:8F:B4:F9:BA:06:27:E6:11:FB:06:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019D64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A98F60AE895A11F0A3242BC6DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 06:44:54 +0000
ROA not before: Thu 04 Sep 2025 06:44:49 +0000
ROA not after: Tue 30 Sep 2025 06:44:49 +0000
asID: 134548
IP address blocks: 154.88.8.0/24 maxlen: 24
154.92.0.0/24 maxlen: 24
154.92.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105828 (0x19d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 06:44:49 2025 GMT
Not After : Sep 30 06:44:49 2025 GMT
Subject: CN=68b93566-431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:e0:40:92:8a:3e:a3:a3:fa:cc:be:7f:86:
c0:61:13:2d:09:a9:40:41:21:55:7f:64:ea:15:a6:
ba:7d:62:32:27:e1:71:14:80:9b:fa:30:32:72:09:
a4:b9:9c:3b:cb:b3:f6:db:b1:9b:9a:2d:8a:d4:21:
8f:b5:01:a3:e2:d5:a7:b5:7e:6b:51:eb:a5:54:08:
67:36:d6:77:52:1d:0f:80:3e:77:4e:ef:5c:fd:b0:
60:19:09:ac:74:0f:b5:d0:af:e8:cf:2f:3c:83:6e:
e4:6b:0f:65:4d:47:e2:8a:76:88:3f:51:98:8e:4d:
0b:0d:51:8d:4c:3b:79:19:d0:7f:2d:8f:02:7e:81:
0a:2f:83:e2:80:4f:13:41:7e:f0:1a:1f:9c:a8:ff:
3a:dc:07:b9:9b:2e:9a:95:f5:5a:25:37:84:17:36:
69:9e:79:27:67:06:fb:e0:a8:b3:f1:a7:11:90:95:
92:c3:d8:29:30:fe:c8:47:cf:40:13:80:3e:72:53:
01:6b:64:5a:6f:e7:a9:6f:01:f4:d7:a4:33:85:3d:
3d:ab:3a:1a:60:1f:48:be:82:67:ca:62:b1:9a:3e:
ea:aa:be:d1:db:fe:4a:e1:3d:e0:8a:ed:cd:98:23:
01:c7:0e:50:fb:b5:bc:02:92:8d:d1:38:2b:9a:72:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:36:7C:CD:AE:2E:52:64:8F:B4:F9:BA:06:27:E6:11:FB:06:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A98F60AE895A11F0A3242BC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.8.0/24
154.92.0.0/24
154.92.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fa:6b:43:dc:06:df:62:d7:4a:72:a1:8c:d3:ae:27:8e:0f:
73:7d:39:3e:86:40:b6:be:28:55:ba:2d:3e:4f:9d:a7:32:78:
1e:94:aa:63:b7:dd:31:f8:cb:90:b2:af:24:ad:55:05:65:77:
b6:62:e0:f0:d9:37:c9:c4:33:22:e9:38:81:ee:fd:fb:2d:f4:
51:b5:28:c5:9e:9b:fd:84:5b:74:65:2a:c1:89:66:29:f2:d1:
e1:ad:82:96:0a:f4:c9:7d:34:d3:07:fc:29:6d:45:63:97:0c:
92:93:8c:31:ce:1c:14:ce:64:99:76:ae:fe:05:b9:8e:b9:d0:
05:6f:3a:37:cb:5c:e7:b3:61:6f:c2:df:bb:f2:07:d1:3f:4f:
40:97:88:af:f1:83:10:1d:da:c6:57:c1:8e:be:b6:ff:8c:71:
92:d9:12:05:0f:bc:50:82:d6:45:fa:9e:ae:41:17:9c:d5:7d:
4a:e5:b2:97:9e:89:d7:d5:a4:f3:25:31:46:27:a7:8d:07:8b:
d4:79:d7:d0:97:2a:61:05:e7:b3:b3:ff:e8:85:dc:63:98:92:
02:9e:fe:6c:5a:99:74:c2:51:6c:69:e2:75:5d:ff:b3:7a:23:
46:ef:75:5c:37:0b:4a:b7:76:36:70:78:b7:b7:94:dd:7d:a1:
a4:1c:c8:f4
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAZ1kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA0MDY0NDQ5WhcNMjUwOTMwMDY0NDQ5WjAYMRYw
FAYDVQQDEw02OGI5MzU2Ni00MzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtZDgQJKKPqOj+sy+f4bAYRMtCalAQSFVf2TqFaa6fWIyJ+FxFICb+jAy
cgmkuZw7y7P227Gbmi2K1CGPtQGj4tWntX5rUeulVAhnNtZ3Uh0PgD53Tu9c/bBg
GQmsdA+10K/ozy88g27kaw9lTUfiinaIP1GYjk0LDVGNTDt5GdB/LY8CfoEKL4Pi
gE8TQX7wGh+cqP863Ae5my6alfVaJTeEFzZpnnknZwb74Kiz8acRkJWSw9gpMP7I
R89AE4A+clMBa2Rab+epbwH016QzhT09qzoaYB9IvoJnymKxmj7qqr7R2/5K4T3g
iu3NmCMBxw5Q+7W8ApKN0TgrmnKoBwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMCN
NnzNri5SZI+0+boGJ+YR+wbIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOThGNjBBRTg5NUExMUYwQTMyNDJCQzZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlgIAwQAmlwAAwQAmlwI
MA0GCSqGSIb3DQEBCwUAA4IBAQCs+mtD3AbfYtdKcqGM064njg9zfTk+hkC2vihV
ui0+T52nMngelKpjt90x+MuQsq8krVUFZXe2YuDw2TfJxDMi6TiB7v37LfRRtSjF
npv9hFt0ZSrBiWYp8tHhrYKWCvTJfTTTB/wpbUVjlwySk4wxzhwUzmSZdq7+BbmO
udAFbzo3y1zns2Fvwt+78gfRP09Al4iv8YMQHdrGV8GOvrb/jHGS2RIFD7xQgtZF
+p6uQRec1X1K5bKXnonX1aTzJTFGJ6eNB4vUedfQlyphBeezs//ohdxjmJICnv5s
Wpl0wlFsaeJ1Xf+zeiNG73VcNwtKt3Y2cHi3t5TdfaGkHMj0
-----END CERTIFICATE-----
Generated at Wed Sep 17 18:36:59 2025 by rpki-client