Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A99BDA40889311F0A6F9B3B5DAE4EC9C.roa
File: A99BDA40889311F0A6F9B3B5DAE4EC9C.roa (raw, json)
Hash identifier: 5G9H/1bZpwzF2B0T4H4TdDzO6sDGq4TaAqD13q8Rz/4=
Subject key identifier: 1F:3E:B9:48:49:6A:B0:CA:6E:4E:57:A3:4F:9C:88:22:52:43:8A:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A99BDA40889311F0A6F9B3B5DAE4EC9C.roa
Signing time: Wed 03 Sep 2025 07:00:24 +0000
ROA not before: Wed 03 Sep 2025 07:00:19 +0000
ROA not after: Thu 05 Mar 2026 07:00:19 +0000
asID: 204770
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105618 (0x19c92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 07:00:19 2025 GMT
Not After : Mar 5 07:00:19 2026 GMT
Subject: CN=68b7e788-adf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:87:e5:2e:fe:f5:24:67:a3:6e:6d:54:7e:
96:db:50:25:31:86:45:28:ec:da:fb:cb:5d:16:99:
b8:aa:f2:d7:97:bd:1b:63:03:5e:ad:b9:f5:b4:f9:
fa:8e:39:48:12:cb:38:53:a6:e4:31:0d:a0:de:10:
56:3a:b3:88:a0:f5:0a:f3:fd:98:5f:9b:fb:ee:e0:
c0:0d:1b:ea:26:90:bd:6b:c1:de:45:a9:ce:c0:2b:
dd:cf:8f:9a:e2:10:14:98:ee:df:38:9e:f4:9c:2a:
a1:6c:fd:da:ce:f9:0d:ce:12:88:ef:b0:13:46:c2:
67:71:04:4b:7f:06:fd:c8:ad:46:49:d5:b3:1d:4e:
78:d2:77:30:50:a0:41:7e:1b:84:fe:f1:4d:ab:38:
65:7c:c7:d4:f7:f5:04:76:f3:e4:a2:52:d1:6d:a0:
36:a6:67:ff:c7:c3:3e:46:65:f1:19:46:2e:c6:7e:
32:c2:94:4a:fe:eb:ee:c3:bc:64:d7:c6:09:6f:34:
e5:c7:9e:10:d4:2e:99:1e:36:a5:d8:20:80:40:c0:
fe:5d:25:43:89:bc:e1:a6:b9:7a:9d:9c:3b:67:84:
03:32:3f:f2:b1:f6:e3:df:d0:8d:89:9d:bb:e2:26:
89:5b:8b:cd:68:96:15:08:83:58:59:b8:f8:13:f7:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3E:B9:48:49:6A:B0:CA:6E:4E:57:A3:4F:9C:88:22:52:43:8A:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A99BDA40889311F0A6F9B3B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e2:95:d5:7f:da:85:e7:15:4b:2b:88:05:7b:ae:16:1c:9e:
fd:3a:0a:ba:4a:c5:0b:20:95:fb:b9:24:72:27:cf:8a:9b:55:
ec:f1:30:e9:3e:8e:07:43:e1:da:7b:5f:83:c1:f3:f4:8a:0a:
d5:d8:d8:9b:30:a0:0f:c1:c4:8c:65:85:b3:de:cd:31:3e:b6:
04:18:13:92:05:15:48:df:1e:01:64:b1:22:3e:91:d0:d6:5c:
d0:cb:0b:92:1c:a5:6a:5c:b8:d3:86:6a:1a:1a:c5:f7:6a:00:
cf:62:09:6e:b8:d5:c1:e1:f4:95:89:53:5a:9a:0d:b9:da:02:
b9:65:21:f4:75:f3:cf:11:66:eb:f0:fc:28:3a:84:01:2a:16:
67:93:33:0d:de:8c:e3:44:72:44:70:bc:c2:f4:af:26:70:4c:
bc:69:42:0e:4b:8d:1a:83:a4:7f:3e:d8:37:ae:d1:8f:64:dd:
63:00:57:7f:16:fc:84:0d:59:1f:98:d2:ec:e7:6f:03:c5:85:
d4:16:00:26:a8:d2:6e:33:41:1b:6f:80:d7:41:4c:0b:51:a8:
62:01:01:a6:7a:2f:b9:a9:bf:6d:0b:65:f8:27:c7:85:13:08:
a5:4a:46:f0:b7:f6:fc:28:fb:5f:63:4f:7d:98:3f:17:f3:39:
83:28:34:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZySMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAzMDcwMDE5WhcNMjYwMzA1MDcwMDE5WjAYMRYw
FAYDVQQDEw02OGI3ZTc4OC1hZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtEeH5S7+9SRno25tVH6W21AlMYZFKOza+8tdFpm4qvLXl70bYwNerbn1
tPn6jjlIEss4U6bkMQ2g3hBWOrOIoPUK8/2YX5v77uDADRvqJpC9a8HeRanOwCvd
z4+a4hAUmO7fOJ70nCqhbP3azvkNzhKI77ATRsJncQRLfwb9yK1GSdWzHU540ncw
UKBBfhuE/vFNqzhlfMfU9/UEdvPkolLRbaA2pmf/x8M+RmXxGUYuxn4ywpRK/uvu
w7xk18YJbzTlx54Q1C6ZHjal2CCAQMD+XSVDibzhprl6nZw7Z4QDMj/ysfbj39CN
iZ274iaJW4vNaJYVCINYWbj4E/epvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB8+
uUhJarDKbk5Xo0+ciCJSQ4oOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTlCREE0MDg4OTMxMUYwQTZGOUIzQjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgDMA0GCSqGSIb3DQEB
CwUAA4IBAQC64pXVf9qF5xVLK4gFe64WHJ79Ogq6SsULIJX7uSRyJ8+Km1Xs8TDp
Po4HQ+Hae1+DwfP0igrV2NibMKAPwcSMZYWz3s0xPrYEGBOSBRVI3x4BZLEiPpHQ
1lzQywuSHKVqXLjThmoaGsX3agDPYgluuNXB4fSViVNamg252gK5ZSH0dfPPEWbr
8PwoOoQBKhZnkzMN3ozjRHJEcLzC9K8mcEy8aUIOS40ag6R/Ptg3rtGPZN1jAFd/
FvyEDVkfmNLs528DxYXUFgAmqNJuM0Ebb4DXQUwLUahiAQGmei+5qb9tC2X4J8eF
EwilSkbwt/b8KPtfY099mD8X8zmDKDS6
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:34 2025 by rpki-client