Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9948847CE411F0B3D9BFEADAE4EC9C.roa
File: 5F9948847CE411F0B3D9BFEADAE4EC9C.roa (raw, json)
Hash identifier: 2OFNFO09paK5MxM1nzjRCIqXzaEndOLr1Y5rVl08UFE=
Subject key identifier: 50:D0:B4:3E:33:62:F9:9C:61:48:D2:DB:66:71:F6:F5:00:48:65:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019240
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9948847CE411F0B3D9BFEADAE4EC9C.roa
Signing time: Tue 19 Aug 2025 10:07:55 +0000
ROA not before: Tue 19 Aug 2025 10:07:48 +0000
ROA not after: Mon 29 Sep 2025 10:07:48 +0000
asID: 20326
IP address blocks: 154.193.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102976 (0x19240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 19 10:07:48 2025 GMT
Not After : Sep 29 10:07:48 2025 GMT
Subject: CN=68a44cfb-33f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:da:8b:8d:3e:bd:d7:73:c1:07:a1:f6:a4:
f2:c1:f9:b6:ca:ac:e7:35:cc:4b:c4:11:cb:b5:0c:
d1:66:74:91:cd:b5:a8:63:d5:4e:94:7e:76:73:ce:
01:52:11:1a:c6:e1:f0:9d:38:a7:89:b3:57:ca:f7:
0d:04:52:07:99:98:3b:8f:c2:56:88:05:aa:1a:1a:
68:bf:2e:e1:e3:6c:37:49:80:0b:f8:91:14:2c:35:
e1:0b:f2:ba:5f:af:91:7d:6b:36:5d:b5:c2:58:05:
29:de:ef:58:dc:42:93:be:5e:b6:ff:1d:18:f4:47:
48:e6:70:6f:fa:8d:fa:e1:4e:70:78:f3:42:2f:a0:
a5:6c:18:0a:e8:37:67:74:e0:6e:af:56:c4:9d:5d:
aa:d8:6a:88:39:1d:1d:43:a4:61:cd:a0:a8:1c:fa:
e4:0c:4e:5c:10:59:be:d5:06:f7:0d:31:54:a5:a1:
65:a1:e6:51:1d:6e:c0:7c:3a:92:2a:c1:70:ea:3e:
12:a6:a5:c5:7e:00:22:3e:06:12:42:26:87:99:c2:
0b:7d:d6:11:8d:d3:d9:7b:d0:ec:a5:f5:a1:84:eb:
2d:8d:6b:e3:ae:2e:9f:c2:d2:c7:67:94:84:89:78:
3a:86:90:47:8a:e9:8b:bf:f5:ad:3c:37:ce:f1:10:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D0:B4:3E:33:62:F9:9C:61:48:D2:DB:66:71:F6:F5:00:48:65:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9948847CE411F0B3D9BFEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:83:26:ec:86:c4:14:c3:3a:89:e8:3e:e4:00:61:96:b4:9d:
be:28:f0:bd:76:ef:09:e4:d8:8d:4c:34:bc:96:8e:f0:56:ec:
58:d8:9f:4c:49:ca:1c:73:ff:ea:07:77:ca:40:34:dd:0d:81:
6f:46:41:34:d5:15:0e:ab:e6:80:91:9f:f8:52:a2:8f:89:6d:
20:f4:7a:1b:26:e8:2c:31:92:d3:e1:e8:11:ed:21:23:34:b2:
fb:e7:b2:a5:69:2a:ee:ad:a6:43:f5:97:5c:3b:fe:39:49:aa:
ba:0a:26:5e:27:90:c5:02:1d:75:57:18:01:65:05:bc:4f:07:
23:a1:eb:3a:d0:85:dc:70:82:ae:aa:c7:00:c3:a5:b3:f6:06:
4b:bb:e0:57:fe:d1:e8:d9:2f:5c:3f:85:8f:f3:aa:ca:11:e5:
b0:e3:b4:f6:78:47:39:59:a2:91:26:2f:f5:90:9b:42:4a:53:
e4:15:1a:9d:22:f6:b3:16:8c:33:67:53:21:55:3f:ac:b4:01:
3a:a0:f0:58:57:97:22:cf:f7:b0:c7:4a:71:2d:61:d4:9a:04:
ef:ac:e7:79:63:32:a9:6e:29:d2:57:e5:4e:cc:64:c0:78:6c:
13:12:38:40:12:3f:cc:34:7e:b0:06:3d:c5:28:13:4d:93:e4:
e8:59:59:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZJAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODE5MTAwNzQ4WhcNMjUwOTI5MTAwNzQ4WjAYMRYw
FAYDVQQDEw02OGE0NGNmYi0zM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApavai40+vddzwQeh9qTywfm2yqznNcxLxBHLtQzRZnSRzbWoY9VOlH52
c84BUhEaxuHwnTinibNXyvcNBFIHmZg7j8JWiAWqGhpovy7h42w3SYAL+JEULDXh
C/K6X6+RfWs2XbXCWAUp3u9Y3EKTvl62/x0Y9EdI5nBv+o364U5wePNCL6ClbBgK
6DdndOBur1bEnV2q2GqIOR0dQ6RhzaCoHPrkDE5cEFm+1Qb3DTFUpaFloeZRHW7A
fDqSKsFw6j4SpqXFfgAiPgYSQiaHmcILfdYRjdPZe9DspfWhhOstjWvjri6fwtLH
Z5SEiXg6hpBHiumLv/WtPDfO8RB0gQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFDQ
tD4zYvmcYUjS22Zx9vUASGU2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Rjk5NDg4NDdDRTQxMUYwQjNEOUJGRUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGDMA0GCSqGSIb3DQEB
CwUAA4IBAQDBgybshsQUwzqJ6D7kAGGWtJ2+KPC9du8J5NiNTDS8lo7wVuxY2J9M
Scocc//qB3fKQDTdDYFvRkE01RUOq+aAkZ/4UqKPiW0g9HobJugsMZLT4egR7SEj
NLL757KlaSruraZD9ZdcO/45Saq6CiZeJ5DFAh11VxgBZQW8Twcjoes60IXccIKu
qscAw6Wz9gZLu+BX/tHo2S9cP4WP86rKEeWw47T2eEc5WaKRJi/1kJtCSlPkFRqd
IvazFowzZ1MhVT+stAE6oPBYV5ciz/ewx0pxLWHUmgTvrOd5YzKpbinSV+VOzGTA
eGwTEjhAEj/MNH6wBj3FKBNNk+ToWVnZ
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:27 2025 by rpki-client