Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4E661AC87F211F0B37166A8DAE4EC9C.roa
File: E4E661AC87F211F0B37166A8DAE4EC9C.roa (raw, json)
Hash identifier: 6znDnSVXnBoDdEOnDjlGM0Ow/qjSMvJ1zqFuT6zektU=
Subject key identifier: C7:7D:3E:D9:81:A3:E8:DB:03:1F:7A:7F:FD:F6:0F:B2:D3:16:4D:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019C1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4E661AC87F211F0B37166A8DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 11:49:34 +0000
ROA not before: Tue 02 Sep 2025 11:49:29 +0000
ROA not after: Fri 10 Oct 2025 11:49:29 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Sep 2025 09:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105502 (0x19c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 2 11:49:29 2025 GMT
Not After : Oct 10 11:49:29 2025 GMT
Subject: CN=68b6d9ce-d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:19:01:3f:68:c0:16:67:04:37:64:19:3d:
99:88:74:b0:b3:1b:8c:c7:8d:62:8e:65:f3:98:8d:
7b:3c:a2:4c:24:68:f7:9f:ae:74:00:31:26:e3:c3:
35:63:d0:04:4d:c7:4d:df:6f:01:20:92:36:f9:69:
09:e6:18:3b:f3:fe:11:90:4e:3e:7a:13:31:cd:14:
2c:2a:c3:20:d6:d7:2b:4f:71:38:27:8c:04:f7:18:
32:ac:ba:6e:10:d6:5a:cf:94:41:69:c5:03:a6:86:
37:fa:78:ec:45:e3:f7:d7:a2:ce:fb:2c:a4:01:2a:
5e:dc:5e:4b:0a:7a:6e:9b:a8:d5:a5:70:31:df:ee:
aa:2a:54:a3:4e:f7:02:ca:10:07:82:f4:03:67:55:
93:b1:7e:7d:c9:0c:e0:aa:45:ea:7e:68:6f:6e:57:
22:ed:c1:af:2d:f0:6e:ce:db:e2:90:1b:90:fa:9a:
a6:c4:50:bd:c7:52:a7:38:e6:62:93:91:1f:6f:ce:
bd:c3:ac:1f:3f:31:53:d2:f1:7a:48:51:be:46:06:
bf:d8:99:5b:d0:18:3e:06:57:9d:62:00:23:e5:96:
13:74:4f:06:40:c6:04:90:39:1e:ef:18:22:c2:84:
48:31:9c:24:e6:41:9d:37:89:7d:fa:f3:55:fe:9d:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:3E:D9:81:A3:E8:DB:03:1F:7A:7F:FD:F6:0F:B2:D3:16:4D:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4E661AC87F211F0B37166A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:df:74:f7:e0:7e:b1:af:f1:7b:67:5c:91:51:31:cb:d6:ff:
33:a0:02:35:08:88:4e:91:89:3e:ba:3d:fd:c9:83:c7:e4:12:
c8:f0:bf:f8:2e:bc:d9:34:16:4f:d9:6b:af:70:88:3a:3b:58:
1f:12:1a:3c:f3:0d:3a:4c:11:64:1b:79:c4:54:c1:a6:3b:aa:
6a:e7:25:38:50:3b:65:ea:db:b9:b5:40:9a:90:cb:e5:ae:bd:
31:38:47:32:c8:05:cc:88:9a:01:4c:e2:3b:6b:90:05:5a:2c:
ac:ab:9d:a1:cf:a4:b3:96:3b:43:bd:cd:64:66:56:38:25:ae:
18:c2:74:d6:23:98:fc:29:88:ab:fe:27:00:72:e5:df:ac:54:
be:e6:a8:52:6b:4b:b0:30:d7:34:15:70:3e:0e:70:3a:28:e3:
e0:fb:49:cb:8d:f4:db:6e:a6:56:15:98:e7:c5:ef:1f:de:8d:
70:2f:74:0e:0e:c2:9a:a8:5b:4d:f3:46:11:5c:2c:19:7a:93:
39:a1:11:00:1e:ad:78:ba:62:75:2d:e1:49:b4:cd:b7:15:3e:
25:00:02:97:e6:05:8e:b0:11:59:0d:6a:43:f4:43:0e:25:f0:
a4:a8:d0:cc:ec:bd:ac:a4:33:25:52:f2:f5:47:e4:7f:6c:8c:
cb:e2:54:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZweMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTAyMTE0OTI5WhcNMjUxMDEwMTE0OTI5WjAYMRYw
FAYDVQQDEw02OGI2ZDljZS1kMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1fwZAT9owBZnBDdkGT2ZiHSwsxuMx41ijmXzmI17PKJMJGj3n650ADEm
48M1Y9AETcdN328BIJI2+WkJ5hg78/4RkE4+ehMxzRQsKsMg1tcrT3E4J4wE9xgy
rLpuENZaz5RBacUDpoY3+njsReP316LO+yykASpe3F5LCnpum6jVpXAx3+6qKlSj
TvcCyhAHgvQDZ1WTsX59yQzgqkXqfmhvblci7cGvLfBuztvikBuQ+pqmxFC9x1Kn
OOZik5Efb869w6wfPzFT0vF6SFG+Rga/2Jlb0Bg+BledYgAj5ZYTdE8GQMYEkDke
7xgiwoRIMZwk5kGdN4l9+vNV/p3YRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMd9
PtmBo+jbAx96f/32D7LTFk02MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNEU2NjFBQzg3RjIxMUYwQjM3MTY2QThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQCm33T34H6xr/F7Z1yRUTHL1v8zoAI1CIhOkYk+uj39yYPH5BLI8L/4
LrzZNBZP2WuvcIg6O1gfEho88w06TBFkG3nEVMGmO6pq5yU4UDtl6tu5tUCakMvl
rr0xOEcyyAXMiJoBTOI7a5AFWiysq52hz6SzljtDvc1kZlY4Ja4YwnTWI5j8KYir
/icAcuXfrFS+5qhSa0uwMNc0FXA+DnA6KOPg+0nLjfTbbqZWFZjnxe8f3o1wL3QO
DsKaqFtN80YRXCwZepM5oREAHq14umJ1LeFJtM23FT4lAAKX5gWOsBFZDWpD9EMO
JfCkqNDM7L2spDMlUvL1R+R/bIzL4lRN
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:37 2025 by rpki-client