Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F0002E825311F0926B40EBDAE4EC9C.roa
File: D2F0002E825311F0926B40EBDAE4EC9C.roa (raw, json)
Hash identifier: XnmRSrxh0hHxfqycYiLsTH8EZYSPKiSLnuF0UYx2tuo=
Subject key identifier: 02:04:C8:A7:27:5D:78:A6:22:5D:F2:79:E9:26:63:BC:6B:53:A3:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0197A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F0002E825311F0926B40EBDAE4EC9C.roa
Signing time: Tue 26 Aug 2025 08:08:18 +0000
ROA not before: Tue 26 Aug 2025 08:08:13 +0000
ROA not after: Sat 04 Oct 2025 08:08:13 +0000
asID: 138915
IP address blocks: 154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104353 (0x197a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:08:13 2025 GMT
Not After : Oct 4 08:08:13 2025 GMT
Subject: CN=68ad6b72-3703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:d0:50:7a:34:ef:b4:8b:3a:99:e0:a2:99:
0e:22:39:47:8f:6e:ed:27:51:63:c1:fc:3f:9d:b1:
9c:a2:31:bd:f6:4d:61:3f:3b:e2:e8:38:40:ed:7c:
04:72:c0:40:36:d2:73:61:77:6b:e5:f1:89:93:d3:
6e:9f:f7:da:34:c1:32:66:a1:bf:e1:31:eb:9c:d5:
3a:f8:c4:24:a2:47:63:ed:85:f1:6f:ba:d1:2d:85:
46:ea:57:71:db:6e:22:fc:97:b8:00:70:51:3d:67:
5f:f0:fb:49:ba:8b:e2:70:35:27:81:66:29:f8:f8:
66:f6:93:4c:fb:fa:ec:3d:27:97:40:40:44:ab:f0:
e4:8b:9d:9f:4f:f4:ce:2b:7d:4c:50:15:f9:39:cf:
66:f1:d4:87:83:e1:d6:8a:e6:db:e4:80:26:b7:9f:
ad:a3:26:56:b6:5b:a1:81:04:7b:d7:26:6c:16:c7:
9c:a9:28:ce:10:1d:af:15:3b:f6:0d:50:41:56:60:
f2:0e:32:8c:95:a0:99:2e:63:9c:c9:6b:fa:1a:a8:
5d:44:66:c0:b0:47:8c:36:c9:19:be:14:5a:9e:7b:
d7:84:b6:f5:eb:28:61:67:83:31:8f:cb:12:06:36:
22:7d:d9:5a:82:d4:0e:01:74:a2:1e:6a:a4:19:c1:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:C8:A7:27:5D:78:A6:22:5D:F2:79:E9:26:63:BC:6B:53:A3:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F0002E825311F0926B40EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:c8:38:31:1e:88:f0:75:7f:f4:b2:5f:0f:34:2b:df:e1:11:
de:7b:b7:55:02:36:b7:be:83:77:ad:d6:25:04:fc:ca:c8:b2:
07:72:0e:9d:0a:70:44:5a:65:ab:0e:9a:a4:ad:d6:ea:47:36:
92:02:4b:2b:8d:01:b6:36:44:79:9a:0b:0c:c8:fe:3e:ad:e9:
f2:eb:15:13:00:60:61:1b:e3:f3:2a:8f:89:e2:03:af:f4:92:
e5:54:79:d5:0b:fa:e3:92:9a:3d:ef:b3:c3:35:8d:eb:79:18:
ad:5c:14:4f:2c:91:03:75:6c:1e:b6:aa:7e:74:aa:76:23:3b:
5d:e7:29:a6:d1:99:ba:9a:b5:4c:3b:77:09:4a:d1:88:a3:87:
4e:ef:b1:55:c9:e8:db:b3:39:57:be:91:b1:13:0f:55:b2:4d:
4d:e3:1a:d6:36:a9:4b:c5:ea:0c:50:40:cc:d7:d0:d2:41:84:
83:76:01:f8:e0:5d:9c:bc:b8:dc:c1:f5:c7:fd:27:0a:5d:52:
9b:bb:43:64:fd:35:bc:14:da:51:0a:4e:77:e2:d6:3e:a4:be:
e7:26:8d:d8:90:b6:15:9f:8c:99:8b:2e:37:80:c3:00:c0:6a:
1f:58:b4:74:2e:20:1d:f5:46:f1:aa:c9:c0:aa:be:d4:10:b9:
4f:3f:71:c3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZehMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODI2MDgwODEzWhcNMjUxMDA0MDgwODEzWjAYMRYw
FAYDVQQDEw02OGFkNmI3Mi0zNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0bDQUHo077SLOpngopkOIjlHj27tJ1Fjwfw/nbGcojG99k1hPzvi6DhA
7XwEcsBANtJzYXdr5fGJk9Nun/faNMEyZqG/4THrnNU6+MQkokdj7YXxb7rRLYVG
6ldx224i/Je4AHBRPWdf8PtJuovicDUngWYp+Phm9pNM+/rsPSeXQEBEq/Dki52f
T/TOK31MUBX5Oc9m8dSHg+HWiubb5IAmt5+toyZWtluhgQR71yZsFsecqSjOEB2v
FTv2DVBBVmDyDjKMlaCZLmOcyWv6GqhdRGbAsEeMNskZvhRannvXhLb16yhhZ4Mx
j8sSBjYifdlagtQOAXSiHmqkGcHkUwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAIE
yKcnXXimIl3yeekmY7xrU6MbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMkYwMDAyRTgyNTMxMUYwOTI2QjQwRUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBml1kAwQBml1oMA0GCSqG
SIb3DQEBCwUAA4IBAQCtyDgxHojwdX/0sl8PNCvf4RHee7dVAja3voN3rdYlBPzK
yLIHcg6dCnBEWmWrDpqkrdbqRzaSAksrjQG2NkR5mgsMyP4+reny6xUTAGBhG+Pz
Ko+J4gOv9JLlVHnVC/rjkpo977PDNY3reRitXBRPLJEDdWwetqp+dKp2Iztd5ymm
0Zm6mrVMO3cJStGIo4dO77FVyejbszlXvpGxEw9Vsk1N4xrWNqlLxeoMUEDM19DS
QYSDdgH44F2cvLjcwfXH/ScKXVKbu0Nk/TW8FNpRCk534tY+pL7nJo3YkLYVn4yZ
iy43gMMAwGofWLR0LiAd9UbxqsnAqr7UELlPP3HD
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:32:17 2025 by rpki-client