Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FFD2D16753111F09BBEDEAEDAE4EC9C.roa
File: 3FFD2D16753111F09BBEDEAEDAE4EC9C.roa (raw, json)
Hash identifier: UybdrWa5Vwmm6fsztvisYk9O8LX1k9/1cc9uf69+P/w=
Subject key identifier: 63:38:8F:20:9D:B5:86:35:E8:0F:36:3B:42:6B:AD:FB:2D:30:C5:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01912B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FFD2D16753111F09BBEDEAEDAE4EC9C.roa
Signing time: Sat 09 Aug 2025 14:58:04 +0000
ROA not before: Sat 09 Aug 2025 14:57:59 +0000
ROA not after: Sat 27 Sep 2025 14:57:59 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102699 (0x1912b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 9 14:57:59 2025 GMT
Not After : Sep 27 14:57:59 2025 GMT
Subject: CN=689761fc-977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0e:5d:2b:b7:54:03:dc:fe:db:25:68:c0:e0:
b4:8e:70:97:41:44:ba:ad:10:86:c3:1d:10:03:cd:
11:8e:54:e1:f6:ed:2b:3a:31:20:3a:9b:5b:b1:78:
8d:45:37:d9:3e:9d:fd:a6:40:f2:7d:a8:a2:7e:3c:
23:0b:ba:54:9c:6b:5a:8b:49:ae:10:6c:1b:87:b6:
75:0a:3d:d2:39:a4:8e:c9:40:ee:f4:b7:87:f7:4a:
2a:bc:a4:92:78:25:d0:35:fb:18:68:9c:16:fa:c5:
bb:ce:16:b5:bd:5a:6f:a8:6f:cf:32:64:fe:9d:70:
c2:51:dd:5a:5c:50:36:0b:c0:16:3f:ea:3a:8e:49:
5c:6f:04:3e:ff:d2:02:7c:a2:e1:56:98:f2:7f:28:
76:8c:f6:e9:c7:8f:df:1e:25:19:e3:46:ea:c4:44:
29:c9:0b:f3:72:64:6c:2e:5c:26:f6:30:51:5d:48:
c8:4e:71:bf:18:aa:74:56:ce:a1:e0:71:34:bb:a6:
c9:e0:c9:c5:90:15:c7:eb:2d:af:5b:43:6e:30:c9:
49:21:b6:37:b4:68:36:92:cc:76:b2:51:e4:50:25:
c7:b4:b4:cf:05:b0:0e:35:e8:19:8a:ba:c2:03:30:
b4:c7:5b:0f:a1:04:19:b5:5a:d3:46:d5:9f:83:ec:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:8F:20:9D:B5:86:35:E8:0F:36:3B:42:6B:AD:FB:2D:30:C5:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FFD2D16753111F09BBEDEAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:f7:e4:9d:f0:79:de:e6:19:e0:13:9d:79:a8:8f:08:28:33:
6c:7b:74:2c:b5:23:9d:24:3f:66:d0:1a:4f:1f:52:db:3d:46:
4e:f0:82:1d:6a:aa:9d:87:62:5c:b7:0f:a4:8a:cc:2c:b3:ec:
f3:41:7c:e0:bc:12:90:1e:38:52:60:0a:08:33:09:ec:9b:12:
49:fa:44:58:2e:22:7c:96:e2:b5:15:5e:d3:4c:96:54:86:2f:
64:0f:fa:91:62:df:4a:de:a0:92:7f:09:2e:c1:46:04:d6:9e:
b5:da:72:79:60:cf:46:a5:75:27:27:f6:88:5e:25:3e:a6:ae:
52:33:77:08:c4:8c:4a:df:49:f3:c2:61:bf:d7:99:5c:b4:8e:
9b:5d:1f:1f:a7:17:c9:0d:c5:f4:b4:e0:43:ee:94:b0:2c:41:
33:eb:9a:33:92:5d:3b:13:41:a2:9f:2e:e4:61:d8:7e:da:a6:
6a:61:7b:86:18:5d:29:c7:d3:64:36:6e:f3:0c:c1:43:c6:1e:
3a:fa:82:be:72:17:fd:5e:30:51:31:2e:67:4e:12:8e:37:30:
b8:cc:f2:10:5b:32:dc:28:3e:64:d7:3b:68:62:ad:e3:a6:72:
44:83:9b:5e:95:01:dd:32:71:ae:8c:3f:ad:36:84:47:af:f7:
57:8a:82:08
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAZErMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODA5MTQ1NzU5WhcNMjUwOTI3MTQ1NzU5WjAYMRYw
FAYDVQQDEw02ODk3NjFmYy05NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9g5dK7dUA9z+2yVowOC0jnCXQUS6rRCGwx0QA80RjlTh9u0rOjEgOptb
sXiNRTfZPp39pkDyfaiifjwjC7pUnGtai0muEGwbh7Z1Cj3SOaSOyUDu9LeH90oq
vKSSeCXQNfsYaJwW+sW7zha1vVpvqG/PMmT+nXDCUd1aXFA2C8AWP+o6jklcbwQ+
/9ICfKLhVpjyfyh2jPbpx4/fHiUZ40bqxEQpyQvzcmRsLlwm9jBRXUjITnG/GKp0
Vs6h4HE0u6bJ4MnFkBXH6y2vW0NuMMlJIbY3tGg2ksx2slHkUCXHtLTPBbAONegZ
irrCAzC0x1sPoQQZtVrTRtWfg+woowIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGM4
jyCdtYY16A82O0JrrfstMMWGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRkZEMkQxNjc1MzExMUYwOUJCRURFQUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmttgAwQEmt4QMA0GCSqG
SIb3DQEBCwUAA4IBAQCz9+Sd8Hne5hngE515qI8IKDNse3QstSOdJD9m0BpPH1Lb
PUZO8IIdaqqdh2Jctw+kiswss+zzQXzgvBKQHjhSYAoIMwnsmxJJ+kRYLiJ8luK1
FV7TTJZUhi9kD/qRYt9K3qCSfwkuwUYE1p612nJ5YM9GpXUnJ/aIXiU+pq5SM3cI
xIxK30nzwmG/15lctI6bXR8fpxfJDcX0tOBD7pSwLEEz65ozkl07E0Giny7kYdh+
2qZqYXuGGF0px9NkNm7zDMFDxh46+oK+chf9XjBRMS5nThKONzC4zPIQWzLcKD5k
1ztoYq3jpnJEg5telQHdMnGujD+tNoRHr/dXioII
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:48 2025 by rpki-client