Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92B9F00C504711F0A36256F4DAE4EC9C.roa
File: 92B9F00C504711F0A36256F4DAE4EC9C.roa (raw, json)
Hash identifier: 2cfD48bnaY+6ejqPrBhWPUl6k8fT/DJ8Qdi39YYV35k=
Subject key identifier: AC:DE:68:DA:53:D0:0D:41:DD:AA:7E:8A:05:3D:FB:10:F1:36:82:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01881D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92B9F00C504711F0A36256F4DAE4EC9C.roa
Signing time: Mon 23 Jun 2025 15:34:38 +0000
ROA not before: Mon 23 Jun 2025 15:34:34 +0000
ROA not after: Wed 30 Jul 2025 15:34:34 +0000
asID: 401075
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100381 (0x1881d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 15:34:34 2025 GMT
Not After : Jul 30 15:34:34 2025 GMT
Subject: CN=6859740e-9713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:49:95:3a:0f:48:fa:13:13:b8:4b:a1:11:
28:61:62:87:11:51:fe:ed:2a:86:b7:d7:33:39:38:
d3:7c:72:b5:c9:a7:7a:a2:fb:85:84:3e:34:2c:7a:
41:99:b8:8d:8c:01:f0:e0:f2:0e:1b:3f:34:7d:6c:
a6:a6:eb:40:82:f4:a6:ed:30:50:ce:9d:68:cd:c0:
97:35:9f:a7:a8:04:3c:df:98:a3:a1:63:c5:f8:46:
68:b9:92:93:7b:3e:1b:aa:f4:65:4f:ac:24:0a:1c:
96:90:69:89:cf:f8:c3:1e:33:8f:d8:55:ea:49:63:
2c:64:86:f2:44:34:3b:9e:2d:16:14:73:4b:cb:be:
dd:d5:7f:04:b0:b9:6d:35:05:36:a0:01:2d:71:c5:
90:5b:68:bc:9f:88:84:4c:bb:06:fc:cc:85:2b:a1:
9e:b3:ce:2a:e6:3b:09:b0:97:f6:a6:3c:9f:a9:e7:
b0:1c:8c:d6:44:01:d8:1a:b3:b9:2a:ba:e1:64:56:
2d:d4:93:f6:cd:9a:59:ce:65:3c:d6:2e:c0:da:68:
c2:0e:06:5b:e1:be:83:ab:eb:cf:96:41:0e:fb:7c:
9a:73:c8:42:26:24:98:c8:49:e8:76:f5:61:da:a5:
a4:4b:f6:0a:c1:14:ed:df:0c:77:81:8f:87:eb:34:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:68:DA:53:D0:0D:41:DD:AA:7E:8A:05:3D:FB:10:F1:36:82:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92B9F00C504711F0A36256F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:ad:b3:9a:66:10:79:e2:c6:46:4b:1b:89:ee:bc:16:59:7d:
ac:cd:bb:c8:a4:bf:df:98:9c:ec:ec:b1:bb:28:2c:eb:cd:25:
54:2a:29:8b:3f:95:fc:53:c7:36:b2:00:ea:7e:4c:c1:5d:28:
9c:c2:ae:63:86:94:70:3a:4d:3c:3c:4b:b1:eb:5d:ec:74:72:
24:7d:77:0a:ad:3f:c4:e2:4b:9c:86:77:52:31:d8:4c:4a:3b:
59:f3:1d:b1:84:ac:23:00:15:7a:6a:b8:84:19:85:88:fc:59:
d4:6e:4b:5d:38:7b:3d:5c:20:2d:42:07:7b:92:e9:d5:3b:18:
0f:37:fc:48:75:66:65:86:4f:fa:5e:b8:ad:be:d8:7f:41:f4:
7f:b6:3f:51:92:de:ad:87:2b:13:ee:57:0b:5e:4c:c8:76:48:
fd:c7:f1:70:69:9a:ae:00:c8:11:f3:72:34:0a:ca:d3:43:f4:
d0:c6:4b:20:9c:77:1a:52:05:b6:4f:9e:42:67:0c:42:fd:a1:
4f:7e:4e:d9:ab:d4:f7:d4:4f:e6:0c:dd:b8:2e:24:8c:39:f5:
ec:2b:14:3f:b7:3b:aa:4f:29:6d:44:93:e3:0d:6a:75:52:16:
7a:77:cb:97:dc:7f:dc:d0:9a:e4:42:d3:18:f2:e9:8a:4e:fd:
c0:0f:47:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYgdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjIzMTUzNDM0WhcNMjUwNzMwMTUzNDM0WjAYMRYw
FAYDVQQDEw02ODU5NzQwZS05NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAykZJlToPSPoTE7hLoREoYWKHEVH+7SqGt9czOTjTfHK1yad6ovuFhD40
LHpBmbiNjAHw4PIOGz80fWymputAgvSm7TBQzp1ozcCXNZ+nqAQ835ijoWPF+EZo
uZKTez4bqvRlT6wkChyWkGmJz/jDHjOP2FXqSWMsZIbyRDQ7ni0WFHNLy77d1X8E
sLltNQU2oAEtccWQW2i8n4iETLsG/MyFK6Ges84q5jsJsJf2pjyfqeewHIzWRAHY
GrO5KrrhZFYt1JP2zZpZzmU81i7A2mjCDgZb4b6Dq+vPlkEO+3yac8hCJiSYyEno
dvVh2qWkS/YKwRTt3wx3gY+H6zR7FQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKze
aNpT0A1B3ap+igU9+xDxNoLoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MkI5RjAwQzUwNDcxMUYwQTM2MjU2RjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsleMA0GCSqGSIb3DQEB
CwUAA4IBAQDUrbOaZhB54sZGSxuJ7rwWWX2szbvIpL/fmJzs7LG7KCzrzSVUKimL
P5X8U8c2sgDqfkzBXSicwq5jhpRwOk08PEux613sdHIkfXcKrT/E4kuchndSMdhM
SjtZ8x2xhKwjABV6ariEGYWI/FnUbktdOHs9XCAtQgd7kunVOxgPN/xIdWZlhk/6
Xritvth/QfR/tj9Rkt6thysT7lcLXkzIdkj9x/FwaZquAMgR83I0CsrTQ/TQxksg
nHcaUgW2T55CZwxC/aFPfk7Zq9T31E/mDN24LiSMOfXsKxQ/tzuqTyltRJPjDWp1
UhZ6d8uX3H/c0JrkQtMY8umKTv3AD0cC
-----END CERTIFICATE-----
Generated at Fri Jul 4 09:55:59 2025 by rpki-client