Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E9A4FE47EA311F08CE62DDDDAE4EC9C.roa
File: 5E9A4FE47EA311F08CE62DDDDAE4EC9C.roa (raw, json)
Hash identifier: OXx7LP3PE4LkT7NnolAZxz15TMsI+A6QUzq0RqjDjV8=
Subject key identifier: 1C:16:90:08:8C:95:D9:96:E4:0E:BD:8C:6E:C0:55:16:E0:55:2B:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0193BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E9A4FE47EA311F08CE62DDDDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 15:27:39 +0000
ROA not before: Thu 21 Aug 2025 15:27:33 +0000
ROA not after: Wed 21 Aug 2030 15:27:33 +0000
asID: 17561
IP address blocks: 154.211.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103358 (0x193be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 15:27:33 2025 GMT
Not After : Aug 21 15:27:33 2030 GMT
Subject: CN=68a73aea-c3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:9c:61:e4:60:5d:40:be:ce:62:5a:8e:34:
de:7d:4c:52:2f:f0:25:b4:44:7b:90:b1:8b:df:71:
2c:51:18:7a:53:76:7b:09:b4:bb:e0:44:2d:c9:b7:
63:cc:46:13:f8:b6:03:cc:f5:2a:b1:3d:d3:56:3a:
51:b7:38:8e:7e:26:40:7c:f4:04:79:6e:37:6d:53:
89:8b:c2:a8:e3:b8:02:0c:fd:1c:75:5d:e7:81:f4:
45:4c:7c:60:2d:8e:90:19:bd:1e:3a:75:d1:40:80:
77:15:37:97:c8:cc:01:3b:bc:74:28:76:29:62:fb:
07:c7:89:a4:46:ff:c0:31:ce:8b:66:f6:ea:99:6b:
61:ac:a4:6b:b3:ad:99:c6:42:51:db:ee:60:c9:6c:
83:5c:8f:d7:37:05:a3:9a:84:f8:8a:99:1d:5b:67:
8c:48:47:7e:09:7a:3d:91:0e:21:48:f6:38:ba:bb:
47:df:e1:b9:3b:c2:60:95:36:16:5c:ff:19:bd:c1:
60:47:a7:50:f6:f6:dc:1c:eb:9e:58:d2:52:15:33:
7b:f1:da:fe:cf:00:e9:a6:29:7f:9b:8d:92:5c:a7:
51:01:80:5a:35:8e:b4:c1:ae:d9:21:63:c1:4e:b5:
45:04:37:87:05:7a:e9:ef:ba:00:63:8a:76:29:ac:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:90:08:8C:95:D9:96:E4:0E:BD:8C:6E:C0:55:16:E0:55:2B:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E9A4FE47EA311F08CE62DDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.128.0/17
Signature Algorithm: sha256WithRSAEncryption
00:b6:f3:d4:5e:69:31:6c:3f:ee:8f:56:76:d5:85:bb:96:87:
9a:7f:be:70:ce:04:ff:60:c8:21:69:ba:81:08:2c:2c:b0:aa:
7c:9a:53:7f:41:0c:0a:d7:d9:87:3d:2b:23:76:03:f2:c2:f4:
e0:65:bf:5c:9e:dd:8e:5a:32:aa:25:b9:e2:dc:6c:ef:2c:c0:
84:06:82:60:f5:64:f6:6f:db:6a:fe:bc:38:15:b1:7c:1e:f5:
75:dd:e8:38:ea:56:95:9c:77:6a:80:56:be:a9:5a:5c:41:a3:
cb:1f:bc:81:64:62:3b:af:bc:29:b1:bb:dd:13:3a:29:e7:e3:
29:2f:1d:bf:e3:35:82:1e:63:8b:5f:9a:80:ec:6e:b7:e3:aa:
00:9c:1c:4b:06:1e:46:3a:2b:48:ab:87:25:da:4e:cc:85:03:
98:6a:13:f5:ee:58:d7:b4:f0:d7:56:e0:98:18:6c:bc:b5:68:
35:cc:bf:3b:f5:6c:20:93:a6:c1:cb:8b:bf:ba:a1:4b:10:5b:
f5:7e:e3:bb:1b:17:8e:18:63:e1:e5:33:c7:ee:33:7a:d9:db:
cb:86:24:73:8a:66:e4:f6:e7:a2:61:e2:c9:cf:1f:67:e5:2d:
08:28:8e:90:35:c3:75:93:aa:2d:07:39:a1:b8:86:04:9d:0b:
35:bf:3a:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZO+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIxMTUyNzMzWhcNMzAwODIxMTUyNzMzWjAYMRYw
FAYDVQQDEw02OGE3M2FlYS1jM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr5GcYeRgXUC+zmJajjTefUxSL/AltER7kLGL33EsURh6U3Z7CbS74EQt
ybdjzEYT+LYDzPUqsT3TVjpRtziOfiZAfPQEeW43bVOJi8Ko47gCDP0cdV3ngfRF
THxgLY6QGb0eOnXRQIB3FTeXyMwBO7x0KHYpYvsHx4mkRv/AMc6LZvbqmWthrKRr
s62ZxkJR2+5gyWyDXI/XNwWjmoT4ipkdW2eMSEd+CXo9kQ4hSPY4urtH3+G5O8Jg
lTYWXP8ZvcFgR6dQ9vbcHOueWNJSFTN78dr+zwDppil/m42SXKdRAYBaNY60wa7Z
IWPBTrVFBDeHBXrp77oAY4p2KazTFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBwW
kAiMldmW5A69jG7AVRbgVSsyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTlBNEZFNDdFQTMxMUYwOENFNjJEREREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmtOAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAtvPUXmkxbD/uj1Z21YW7loeaf75wzgT/YMghabqBCCwssKp8mlN/
QQwK19mHPSsjdgPywvTgZb9cnt2OWjKqJbni3GzvLMCEBoJg9WT2b9tq/rw4FbF8
HvV13eg46laVnHdqgFa+qVpcQaPLH7yBZGI7r7wpsbvdEzop5+MpLx2/4zWCHmOL
X5qA7G6346oAnBxLBh5GOitIq4cl2k7MhQOYahP17ljXtPDXVuCYGGy8tWg1zL87
9Wwgk6bBy4u/uqFLEFv1fuO7GxeOGGPh5TPH7jN62dvLhiRzimbk9ueiYeLJzx9n
5S0IKI6QNcN1k6otBzmhuIYEnQs1vzqf
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:12:10 2025 by rpki-client