Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB5CD84999111F09C1736F6DAE4EC9C.roa
File: BCB5CD84999111F09C1736F6DAE4EC9C.roa (raw, json)
Hash identifier: RK2cFS2jxyFPeQpDM8c3+FIWd78lbMGibr9+7ljAFOk=
Subject key identifier: 05:CA:69:16:29:7B:D1:57:79:59:54:27:8E:28:B4:96:31:93:BC:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB5CD84999111F09C1736F6DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 21:59:27 +0000
ROA not before: Wed 24 Sep 2025 21:59:22 +0000
ROA not after: Wed 25 Mar 2026 21:59:22 +0000
asID: 16437
IP address blocks: 154.81.208.0/21 maxlen: 24
154.81.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106710 (0x1a0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 21:59:22 2025 GMT
Not After : Mar 25 21:59:22 2026 GMT
Subject: CN=68d469bf-08c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:b0:98:4e:f6:80:f3:dd:01:30:13:8d:29:
14:5f:7e:8e:95:17:76:c5:d5:f3:df:0f:c3:9c:c3:
2c:53:9b:65:a9:54:e4:21:24:92:68:85:ca:d4:dc:
28:6c:2b:a3:6b:93:74:92:cc:f9:01:b0:85:b0:1d:
71:9a:0e:6e:6a:60:a3:44:91:7c:dc:ba:a3:b3:1a:
cf:72:35:0f:45:43:f2:bc:0f:8a:6a:68:05:8d:6e:
5e:36:09:6d:78:d4:5e:23:f0:b2:70:26:b4:76:24:
c7:e2:c8:05:f8:31:15:a0:07:f9:5c:6d:ac:29:52:
a1:cc:90:d8:33:b9:ae:4f:d0:fb:f8:66:b8:c7:00:
0b:f8:58:96:49:09:4e:79:50:86:97:23:36:fa:ac:
35:1c:94:d8:5b:9e:94:99:42:9d:0a:f7:4d:c1:f4:
b5:dd:ee:f5:18:af:31:87:98:dc:d8:4a:63:d4:69:
48:bb:6a:d8:96:80:57:26:3f:aa:4f:92:fd:a0:a6:
53:ad:60:32:8b:50:9a:a5:fe:bd:33:a2:b9:26:12:
c6:49:fe:87:28:15:e3:3a:e3:1b:a0:3d:33:10:ae:
4c:6a:85:09:b7:85:47:42:7f:75:95:a1:48:fc:48:
1e:f9:78:b4:31:c7:97:bb:73:ef:8f:fd:f5:35:67:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:69:16:29:7B:D1:57:79:59:54:27:8E:28:B4:96:31:93:BC:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB5CD84999111F09C1736F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.208.0-154.81.219.255
Signature Algorithm: sha256WithRSAEncryption
27:84:37:66:01:78:d7:82:9a:66:5b:25:a0:f4:16:e2:8f:87:
ed:46:81:bd:a2:cd:51:59:e6:d8:13:e0:01:c6:b8:20:5f:25:
e9:de:1d:fa:59:f3:82:22:f1:0f:e7:8c:81:3e:03:14:6f:90:
22:96:d7:56:f3:52:23:42:6b:80:04:3f:98:e2:46:39:bd:d5:
6e:30:aa:23:45:06:72:11:d0:04:f5:c7:ff:f6:0a:bc:27:e1:
76:08:04:27:b9:30:fe:14:a1:25:d1:77:d4:ea:8d:7e:71:bf:
6b:0f:db:df:e2:27:a5:21:c2:48:bb:29:7d:28:d1:21:33:62:
5e:b0:f8:bd:c2:99:b6:a0:55:e3:18:4d:de:82:43:cf:a3:2d:
25:a2:6a:08:a5:68:5b:13:f8:9d:95:d0:fb:25:b1:cc:95:63:
e3:13:cb:69:c9:fd:8a:16:a3:e3:4f:41:32:5e:d8:fa:10:f9:
cb:61:7e:ff:d8:13:84:38:8a:b5:58:64:76:86:67:4d:e2:ec:
33:23:b0:4e:53:17:20:12:c0:74:b3:9c:af:07:02:05:b0:f8:
91:cb:d2:06:6e:8d:af:60:ff:b9:a6:1c:ea:bb:bf:9a:5a:34:
9b:f9:f1:e9:e4:b0:e1:ab:34:f3:b6:c8:a7:4e:97:2c:88:08:
e7:9e:7c:5f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaDWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MjE1OTIyWhcNMjYwMzI1MjE1OTIyWjAYMRYw
FAYDVQQDEw02OGQ0NjliZi0wOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu42wmE72gPPdATATjSkUX36OlRd2xdXz3w/DnMMsU5tlqVTkISSSaIXK
1NwobCuja5N0ksz5AbCFsB1xmg5uamCjRJF83LqjsxrPcjUPRUPyvA+KamgFjW5e
NglteNReI/CycCa0diTH4sgF+DEVoAf5XG2sKVKhzJDYM7muT9D7+Ga4xwAL+FiW
SQlOeVCGlyM2+qw1HJTYW56UmUKdCvdNwfS13e71GK8xh5jc2Epj1GlIu2rYloBX
Jj+qT5L9oKZTrWAyi1Capf69M6K5JhLGSf6HKBXjOuMboD0zEK5MaoUJt4VHQn91
laFI/Ege+Xi0MceXu3Pvj/31NWf7GQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAXK
aRYpe9FXeVlUJ44otJYxk7z/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0I1Q0Q4NDk5OTExMUYwOUMxNzM2RjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaUdADBAKaUdgwDQYJ
KoZIhvcNAQELBQADggEBACeEN2YBeNeCmmZbJaD0FuKPh+1Ggb2izVFZ5tgT4AHG
uCBfJeneHfpZ84Ii8Q/njIE+AxRvkCKW11bzUiNCa4AEP5jiRjm91W4wqiNFBnIR
0AT1x//2Crwn4XYIBCe5MP4UoSXRd9TqjX5xv2sP29/iJ6Uhwki7KX0o0SEzYl6w
+L3CmbagVeMYTd6CQ8+jLSWiagilaFsT+J2V0PslscyVY+MTy2nJ/YoWo+NPQTJe
2PoQ+cthfv/YE4Q4irVYZHaGZ03i7DMjsE5TFyASwHSznK8HAgWw+JHL0gZuja9g
/7mmHOq7v5paNJv58enksOGrNPO2yKdOlyyICOeefF8=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:52:02 2025 by rpki-client