Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E9565F86B8F11F0BC23CEF6DAE4EC9C.roa
File: 2E9565F86B8F11F0BC23CEF6DAE4EC9C.roa (raw, json)
Hash identifier: WMl7bVMR4TquS57FwEbcSF1S9liigJ7I/ti2cU2ygAs=
Subject key identifier: 75:19:63:3A:FF:B6:4A:C8:DC:8C:B7:36:10:3E:D9:3F:0F:6E:31:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018FCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E9565F86B8F11F0BC23CEF6DAE4EC9C.roa
Signing time: Mon 28 Jul 2025 08:45:16 +0000
ROA not before: Mon 28 Jul 2025 08:45:11 +0000
ROA not after: Sun 02 Aug 2026 08:45:11 +0000
asID: 38638
IP address blocks: 154.197.82.0/24 maxlen: 24
154.215.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 01:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102346 (0x18fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:45:11 2025 GMT
Not After : Aug 2 08:45:11 2026 GMT
Subject: CN=6887389c-c0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:93:10:7a:29:49:a4:ad:03:83:50:08:6c:
53:4c:ea:10:c3:3f:7b:13:f0:1f:ae:be:3e:74:88:
67:62:21:d9:53:cb:e3:8a:ea:25:e6:92:1b:43:fd:
45:7b:db:5d:9a:94:3f:ec:48:e6:b0:04:12:e4:53:
0f:a1:54:69:81:6d:ca:5b:4b:76:f4:1c:86:e1:78:
83:0c:14:ec:43:63:f9:84:10:2c:c3:6c:0b:11:3a:
f5:e0:46:1f:9e:a6:12:53:b2:de:74:18:b8:4a:d8:
0c:80:77:88:e3:3b:5c:de:49:ce:8e:dd:94:0b:23:
04:15:ac:51:b5:41:88:c3:df:dc:b1:9f:20:b1:73:
b8:16:f2:1f:b0:9b:d1:82:fa:95:b0:04:ee:db:d7:
36:12:a5:6e:71:30:a9:ce:18:6b:1d:b2:13:38:89:
bb:92:4a:59:72:43:d7:80:2c:e3:dc:a6:3b:64:85:
6d:82:16:6d:f7:87:12:8d:9b:57:88:9b:5e:d5:b6:
9e:4b:c4:20:89:ed:6f:47:9f:8d:78:d3:c6:a7:91:
0f:85:b7:a8:eb:bc:53:7c:7d:d2:3e:81:3d:1c:5b:
d9:2b:89:91:96:87:ca:d4:9e:6e:e4:ce:14:e7:ef:
2b:3c:01:0b:01:41:c5:3a:5d:3d:17:22:af:c8:1b:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:63:3A:FF:B6:4A:C8:DC:8C:B7:36:10:3E:D9:3F:0F:6E:31:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E9565F86B8F11F0BC23CEF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.82.0/24
154.215.1.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d7:e9:60:cf:cc:78:33:bc:82:a3:15:5d:e3:d1:ce:94:1d:
90:4f:f0:9c:5d:7b:bc:55:80:aa:69:74:2a:c2:c9:9e:59:82:
84:60:e4:95:0f:fe:e9:cb:57:a1:e8:5e:26:3e:a8:a2:5b:54:
3c:b5:20:60:2f:a4:da:5e:70:21:f3:55:85:33:60:0d:b8:ec:
66:2b:0a:56:2e:27:3f:7c:41:09:f9:83:0a:d2:f2:93:58:63:
8e:6e:b2:c2:1e:36:c8:9f:3d:40:82:2c:56:83:a8:14:72:62:
80:46:f3:51:bd:e6:4c:42:18:56:ed:05:80:08:ba:68:32:99:
dd:ab:84:1f:8d:c0:19:01:c8:c9:a8:f7:17:81:de:8e:69:59:
51:34:95:64:de:9c:f9:93:06:06:0b:24:74:7b:ca:78:53:88:
f1:48:5b:12:a5:85:5a:35:e7:b2:68:d9:bf:81:e4:e5:27:99:
07:c8:f8:74:c2:d1:d6:10:46:4a:d2:f0:fb:de:e9:8b:ed:c3:
82:d6:5c:be:f8:55:2c:37:62:2c:ea:1c:b7:1a:37:d3:f0:bf:
79:b9:1f:43:98:d2:f4:01:01:80:35:14:82:af:c0:65:90:01:
fe:05:f9:23:06:90:e1:3e:ed:c7:78:a6:80:0d:da:be:7a:1e:
1c:c3:85:f3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAY/KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzI4MDg0NTExWhcNMjYwODAyMDg0NTExWjAYMRYw
FAYDVQQDEw02ODg3Mzg5Yy1jMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzRGTEHopSaStA4NQCGxTTOoQwz97E/Afrr4+dIhnYiHZU8vjiuol5pIb
Q/1Fe9tdmpQ/7EjmsAQS5FMPoVRpgW3KW0t29ByG4XiDDBTsQ2P5hBAsw2wLETr1
4EYfnqYSU7LedBi4StgMgHeI4ztc3knOjt2UCyMEFaxRtUGIw9/csZ8gsXO4FvIf
sJvRgvqVsATu29c2EqVucTCpzhhrHbITOIm7kkpZckPXgCzj3KY7ZIVtghZt94cS
jZtXiJte1baeS8Qgie1vR5+NeNPGp5EPhbeo67xTfH3SPoE9HFvZK4mRlofK1J5u
5M4U5+8rPAELAUHFOl09FyKvyBtj0QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHUZ
Yzr/tkrI3Iy3NhA+2T8PbjGfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTk1NjVGODZCOEYxMUYwQkMyM0NFRjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsVSAwQAmtcBMA0GCSqG
SIb3DQEBCwUAA4IBAQB21+lgz8x4M7yCoxVd49HOlB2QT/CcXXu8VYCqaXQqwsme
WYKEYOSVD/7py1eh6F4mPqiiW1Q8tSBgL6TaXnAh81WFM2ANuOxmKwpWLic/fEEJ
+YMK0vKTWGOObrLCHjbInz1AgixWg6gUcmKARvNRveZMQhhW7QWACLpoMpndq4Qf
jcAZAcjJqPcXgd6OaVlRNJVk3pz5kwYGCyR0e8p4U4jxSFsSpYVaNeeyaNm/geTl
J5kHyPh0wtHWEEZK0vD73umL7cOC1ly++FUsN2Is6hy3GjfT8L95uR9DmNL0AQGA
NRSCr8BlkAH+BfkjBpDhPu3HeKaADdq+eh4cw4Xz
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:09 2025 by rpki-client