Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/629B965A7E9B11F0B2B1C7AADAE4EC9C.roa
File: 629B965A7E9B11F0B2B1C7AADAE4EC9C.roa (raw, json)
Hash identifier: pTUcYCzr5NK4jG24H57a2wLiEmGmGri2bvPmNq4yqVg=
Subject key identifier: B0:0A:28:CB:94:3D:D7:F3:9E:1A:C4:C5:F2:FF:A8:7B:3B:72:CA:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019397
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/629B965A7E9B11F0B2B1C7AADAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:30:29 +0000
ROA not before: Thu 21 Aug 2025 14:30:24 +0000
ROA not after: Wed 21 Aug 2030 14:30:24 +0000
asID: 17561
IP address blocks: 154.200.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103319 (0x19397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:30:24 2025 GMT
Not After : Aug 21 14:30:24 2030 GMT
Subject: CN=68a72d85-1396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:c9:43:a2:d9:c1:39:e5:2b:83:32:7a:44:
cb:58:c4:08:bc:4a:7f:48:40:80:78:9c:9c:c0:97:
c8:ed:1e:13:e6:ac:a2:2f:24:b5:9d:4c:6f:e4:74:
f1:ab:9c:b8:84:c3:8d:b6:36:b0:60:fc:a7:92:4b:
12:75:e1:11:54:6e:36:4d:5f:e8:27:55:6d:c2:14:
92:43:22:ef:52:c7:ea:a9:85:64:4c:88:11:1f:5e:
82:0e:10:bf:bf:92:b7:73:77:30:72:d5:46:87:f3:
75:eb:03:99:75:b5:81:26:a9:c8:c3:78:a0:e2:6f:
27:88:b8:4a:46:18:42:4b:be:c9:54:99:2f:27:e7:
e9:be:27:86:14:41:32:9c:71:ae:30:6a:8d:be:c8:
14:91:2a:bb:9e:cd:f6:28:4c:6d:8c:63:60:b3:e0:
a4:7d:65:d3:3b:38:46:fe:b9:3f:e9:15:cb:90:16:
95:3a:b3:2a:82:81:6a:9d:82:57:75:a3:46:00:c4:
eb:2d:55:ef:58:e1:b2:8f:43:a3:e0:34:ff:ad:8f:
f7:f1:b2:fb:8b:ae:be:8c:60:78:36:55:fe:84:40:
84:ac:2d:01:55:26:b6:dd:6a:71:2c:90:5a:c9:6d:
38:b5:d2:41:7d:44:cd:90:6d:27:d8:a5:9c:4c:42:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:28:CB:94:3D:D7:F3:9E:1A:C4:C5:F2:FF:A8:7B:3B:72:CA:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/629B965A7E9B11F0B2B1C7AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
be:f3:10:57:e3:e9:64:cf:09:64:42:da:46:a6:2b:35:36:02:
89:a3:e2:6a:df:33:63:46:85:fa:42:22:30:6b:04:7e:b3:1d:
85:07:95:94:b2:2b:17:2d:fe:f4:0b:86:d6:8c:39:93:27:92:
fe:b1:63:0d:2b:a0:60:f9:5f:6b:b6:39:9f:19:4b:f8:1b:fe:
71:89:d2:b0:4d:a3:71:fe:b4:bf:62:3f:53:6a:d5:34:c9:af:
f7:a4:34:0b:be:01:da:0c:e9:5d:28:9d:96:56:79:4c:8e:b2:
ac:7f:d4:18:dd:7d:55:52:75:d3:fc:85:b2:7d:99:c9:99:61:
fb:2f:00:39:af:f2:d2:2d:95:9a:21:77:c9:1c:30:07:4c:54:
1e:13:9e:81:06:2f:07:05:52:3d:93:d8:62:f5:7e:90:7b:25:
ec:8f:d3:e8:3f:8b:f1:79:86:a6:9d:79:69:8f:68:be:b8:da:
a8:62:6a:13:59:88:ef:15:a2:d7:fd:63:40:1f:09:59:37:56:
e0:25:f8:56:ef:38:b8:30:80:00:69:ed:20:a3:4a:82:83:76:
1b:17:80:17:23:fe:d0:35:51:d5:86:a4:29:9b:e8:9a:80:47:
43:cd:9c:68:03:70:c1:a9:53:5c:70:3c:bc:c6:68:d9:50:90:
b0:fd:a7:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZOXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODIxMTQzMDI0WhcNMzAwODIxMTQzMDI0WjAYMRYw
FAYDVQQDEw02OGE3MmQ4NS0xMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6iXJQ6LZwTnlK4MyekTLWMQIvEp/SECAeJycwJfI7R4T5qyiLyS1nUxv
5HTxq5y4hMONtjawYPynkksSdeERVG42TV/oJ1VtwhSSQyLvUsfqqYVkTIgRH16C
DhC/v5K3c3cwctVGh/N16wOZdbWBJqnIw3ig4m8niLhKRhhCS77JVJkvJ+fpvieG
FEEynHGuMGqNvsgUkSq7ns32KExtjGNgs+CkfWXTOzhG/rk/6RXLkBaVOrMqgoFq
nYJXdaNGAMTrLVXvWOGyj0Oj4DT/rY/38bL7i66+jGB4NlX+hECErC0BVSa23Wpx
LJBayW04tdJBfUTNkG0n2KWcTEK6ewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLAK
KMuUPdfznhrExfL/qHs7csrVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MjlCOTY1QTdFOUIxMUYwQjJCMUM3QUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsjAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+8xBX4+lkzwlkQtpGpis1NgKJo+Jq3zNjRoX6QiIwawR+sx2FB5WU
sisXLf70C4bWjDmTJ5L+sWMNK6Bg+V9rtjmfGUv4G/5xidKwTaNx/rS/Yj9TatU0
ya/3pDQLvgHaDOldKJ2WVnlMjrKsf9QY3X1VUnXT/IWyfZnJmWH7LwA5r/LSLZWa
IXfJHDAHTFQeE56BBi8HBVI9k9hi9X6QeyXsj9PoP4vxeYamnXlpj2i+uNqoYmoT
WYjvFaLX/WNAHwlZN1bgJfhW7zi4MIAAae0go0qCg3YbF4AXI/7QNVHVhqQpm+ia
gEdDzZxoA3DBqVNccDy8xmjZUJCw/adv
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:18:35 2025 by rpki-client