Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A4C97F0370911F0AC7512ACDAE4EC9C.roa
File: 8A4C97F0370911F0AC7512ACDAE4EC9C.roa (raw, json)
Hash identifier: AJaN1y/lUgBgeFTeFTKF4ZCfI7FGMvslXGJU83eiljw=
Subject key identifier: 12:F4:BE:A9:E9:89:DA:B2:8C:A3:D8:35:9D:80:4B:E0:5A:74:15:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A4C97F0370911F0AC7512ACDAE4EC9C.roa
Signing time: Thu 22 May 2025 12:37:37 +0000
ROA not before: Thu 22 May 2025 12:37:32 +0000
ROA not after: Fri 04 Jul 2025 12:37:32 +0000
asID: 140666
IP address blocks: 154.93.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 11:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98789 (0x181e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 12:37:32 2025 GMT
Not After : Jul 4 12:37:32 2025 GMT
Subject: CN=682f1a91-1b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:99:d8:d1:ec:6d:b1:d7:21:92:b8:19:12:
1d:95:a6:cc:3e:cd:50:7c:68:dd:20:32:97:ce:2c:
32:9c:33:a5:6c:c7:83:64:7a:db:ae:21:35:e1:56:
ce:44:d7:84:f6:57:90:82:ed:2f:3f:4b:34:ad:11:
80:91:32:1c:cb:ea:76:58:51:5d:78:0f:9c:9f:f2:
b2:52:ca:dc:ad:20:0e:e9:20:48:4d:71:84:a2:85:
51:cc:60:dc:3f:99:61:db:a9:b2:3f:95:85:ae:35:
c2:d2:a2:a2:f0:08:ea:65:2e:a5:db:63:35:02:66:
d3:8e:db:98:38:cf:55:08:73:ef:b9:1d:8d:4d:c8:
36:b5:4c:c0:97:bc:f2:79:6f:ad:cb:76:0b:e8:19:
e0:d1:c9:83:4e:f3:7d:a6:23:b3:66:97:bf:53:f9:
9e:4d:7b:04:97:67:9e:3b:2a:0b:ef:6b:04:55:85:
0b:3e:12:5f:7c:5f:3f:84:2c:50:0f:26:44:a3:3d:
13:29:af:fd:63:bc:95:f6:b2:0f:79:cb:f8:53:97:
15:11:11:de:ec:e4:e3:39:49:09:cb:85:b2:70:99:
d1:84:63:0c:83:71:8f:74:dd:04:8b:fb:1a:ba:ba:
6d:b9:0c:db:23:a6:ae:98:d1:c5:70:1b:69:a6:11:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:BE:A9:E9:89:DA:B2:8C:A3:D8:35:9D:80:4B:E0:5A:74:15:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A4C97F0370911F0AC7512ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5a:1c:09:f4:bc:f6:78:8b:4a:e4:fa:c3:9a:de:4b:93:b8:
63:40:f3:f5:9e:2a:13:35:d3:4f:ac:34:ec:94:63:3b:29:3a:
09:88:66:9e:56:c2:8f:a4:79:c2:85:15:61:2f:54:7f:ff:80:
25:7c:bf:07:43:75:22:67:3c:6d:1e:37:6f:4a:e7:5d:16:d9:
ae:97:f0:a6:4f:b8:07:37:73:a3:d7:db:79:af:e9:c8:25:d8:
89:c7:e6:97:19:1f:b7:52:b0:de:f1:a3:17:08:dd:28:bf:a3:
b4:76:45:d2:5e:c1:f1:06:fa:86:55:50:7a:e2:4f:fc:94:0f:
ce:f6:ae:cf:79:14:8d:36:bf:3a:8e:69:e9:51:0d:00:1e:ac:
dd:d5:77:a3:bd:b2:c6:50:6f:61:08:f1:4d:d9:66:95:99:b4:
70:84:1a:83:6c:c4:31:cb:b4:bc:bf:9f:54:15:c5:8f:3c:39:
0d:c0:23:1d:6a:e3:2e:43:7c:cf:58:6c:45:73:93:82:5c:e5:
9b:78:27:54:29:7d:8f:b0:97:00:3b:be:db:e5:5c:cd:9b:ca:
7f:03:c9:e1:15:30:3f:a8:4e:47:fd:02:d0:25:99:1f:9f:90:
fd:62:e1:67:bb:0e:13:69:32:86:1f:b5:32:c1:41:24:95:40:
8c:7b:9a:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYHlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIyMTIzNzMyWhcNMjUwNzA0MTIzNzMyWjAYMRYw
FAYDVQQDEw02ODJmMWE5MS0xYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnmeZ2NHsbbHXIZK4GRIdlabMPs1QfGjdIDKXziwynDOlbMeDZHrbriE1
4VbORNeE9leQgu0vP0s0rRGAkTIcy+p2WFFdeA+cn/KyUsrcrSAO6SBITXGEooVR
zGDcP5lh26myP5WFrjXC0qKi8AjqZS6l22M1AmbTjtuYOM9VCHPvuR2NTcg2tUzA
l7zyeW+ty3YL6Bng0cmDTvN9piOzZpe/U/meTXsEl2eeOyoL72sEVYULPhJffF8/
hCxQDyZEoz0TKa/9Y7yV9rIPecv4U5cVERHe7OTjOUkJy4WycJnRhGMMg3GPdN0E
i/saurptuQzbI6aumNHFcBtpphE1yQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBL0
vqnpidqyjKPYNZ2AS+BadBUTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTRDOTdGMDM3MDkxMUYwQUM3NTEyQUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1eMA0GCSqGSIb3DQEB
CwUAA4IBAQCdWhwJ9Lz2eItK5PrDmt5Lk7hjQPP1nioTNdNPrDTslGM7KToJiGae
VsKPpHnChRVhL1R//4AlfL8HQ3UiZzxtHjdvSuddFtmul/CmT7gHN3Oj19t5r+nI
JdiJx+aXGR+3UrDe8aMXCN0ov6O0dkXSXsHxBvqGVVB64k/8lA/O9q7PeRSNNr86
jmnpUQ0AHqzd1XejvbLGUG9hCPFN2WaVmbRwhBqDbMQxy7S8v59UFcWPPDkNwCMd
auMuQ3zPWGxFc5OCXOWbeCdUKX2PsJcAO77b5VzNm8p/A8nhFTA/qE5H/QLQJZkf
n5D9YuFnuw4TaTKGH7UywUEklUCMe5oD
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:03:11 2025 by rpki-client