Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD3919E6D2B11F086E31CF2DAE4EC9C.roa
File: 5DD3919E6D2B11F086E31CF2DAE4EC9C.roa (raw, json)
Hash identifier: Ble8e4noooSUDxUMBsdslS1Mq9rMsLS1K6AdITAhdHY=
Subject key identifier: 8A:A7:93:45:9F:AB:1F:B1:72:FE:1A:D5:FB:BF:77:9C:68:F0:CA:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019007
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD3919E6D2B11F086E31CF2DAE4EC9C.roa
Signing time: Wed 30 Jul 2025 09:55:48 +0000
ROA not before: Wed 30 Jul 2025 09:55:43 +0000
ROA not after: Thu 04 Sep 2025 09:55:43 +0000
asID: 151419
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102407 (0x19007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 09:55:43 2025 GMT
Not After : Sep 4 09:55:43 2025 GMT
Subject: CN=6889ec24-b29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:2d:2f:ac:02:4e:94:bc:ec:de:8d:e6:55:
9c:94:b5:6a:b5:b1:30:00:f1:e8:54:e2:23:0e:d1:
40:e2:91:43:17:71:82:33:6a:9f:45:18:d6:7f:34:
8c:e7:76:71:84:a1:21:fa:34:f0:b8:d6:d6:b8:ed:
cf:f2:b0:19:85:b5:a6:77:96:c8:c0:d2:d6:63:b1:
b9:85:e2:2a:f8:00:cd:ea:e9:fa:99:0b:05:c7:8c:
d4:09:0d:7e:1b:c6:36:53:9a:90:91:88:a7:79:3b:
53:9a:d0:7f:3a:7f:83:36:bc:92:94:61:db:de:05:
48:c9:84:0c:7c:ad:26:14:8b:da:05:4b:77:54:b7:
64:c4:54:a3:06:2e:22:e1:97:46:a3:c6:a0:1d:0c:
4c:75:7d:53:27:63:72:c4:2a:07:b8:ac:c2:c2:d8:
0e:84:6b:a7:2e:c6:57:64:e8:9d:14:83:a0:5b:d4:
2b:0e:6e:2b:4e:e7:7a:88:50:38:91:3f:3a:be:44:
87:81:1c:54:b3:c2:b2:0c:7d:df:f1:d3:1e:d4:2e:
fa:5b:b9:64:c9:aa:18:36:64:f8:0b:b8:85:c7:55:
fa:18:83:e1:37:84:aa:52:ae:ec:71:24:a4:70:bc:
51:82:59:92:24:d8:79:e4:85:09:4c:da:05:d8:f9:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:93:45:9F:AB:1F:B1:72:FE:1A:D5:FB:BF:77:9C:68:F0:CA:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD3919E6D2B11F086E31CF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:41:c8:f8:4e:93:a7:35:21:86:91:fa:f0:40:30:d6:ea:1d:
f8:4c:5d:27:5a:7c:d1:b7:77:93:e1:46:6b:44:6e:a3:ad:bc:
71:76:52:e4:62:7f:01:a4:e7:8b:52:72:5f:f8:5b:af:76:a0:
8a:5e:ae:d8:53:00:e6:41:62:14:0e:b6:d3:de:2c:6a:67:47:
9a:b5:07:f9:6d:2e:33:1a:50:fe:f1:12:b5:fc:52:f3:f4:74:
e9:81:9e:5a:16:53:bd:12:0e:71:f5:bb:1e:59:7a:70:1f:75:
ad:e3:8f:8c:de:17:6e:bb:73:79:dc:f6:af:09:c5:02:a1:ba:
59:56:b9:68:4e:fa:21:0d:60:9a:35:25:d6:4c:f3:8b:a6:fc:
48:28:f3:df:0a:49:17:12:53:fc:5a:9e:08:f0:d8:6d:e7:7b:
e5:26:1d:53:f6:ea:e7:b8:5d:3b:a3:34:da:ad:4e:f4:c5:0a:
33:f6:52:9e:6b:c0:88:0a:7e:c8:00:84:2d:8c:66:0e:44:11:
95:1d:84:9a:2b:a9:81:e6:c4:14:a2:5c:62:56:4a:17:6d:65:
79:52:df:33:d9:6f:3d:70:78:07:80:54:3b:8d:e5:8c:de:37:
70:b8:6c:db:21:61:46:34:8a:6c:37:47:d7:dc:7a:89:66:16:
b7:a8:7e:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZAHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzMwMDk1NTQzWhcNMjUwOTA0MDk1NTQzWjAYMRYw
FAYDVQQDEw02ODg5ZWMyNC1iMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtfYtL6wCTpS87N6N5lWclLVqtbEwAPHoVOIjDtFA4pFDF3GCM2qfRRjW
fzSM53ZxhKEh+jTwuNbWuO3P8rAZhbWmd5bIwNLWY7G5heIq+ADN6un6mQsFx4zU
CQ1+G8Y2U5qQkYineTtTmtB/On+DNrySlGHb3gVIyYQMfK0mFIvaBUt3VLdkxFSj
Bi4i4ZdGo8agHQxMdX1TJ2NyxCoHuKzCwtgOhGunLsZXZOidFIOgW9QrDm4rTud6
iFA4kT86vkSHgRxUs8KyDH3f8dMe1C76W7lkyaoYNmT4C7iFx1X6GIPhN4SqUq7s
cSSkcLxRglmSJNh55IUJTNoF2Pk4UQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIqn
k0Wfqx+xcv4a1fu/d5xo8MoLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81REQzOTE5RTZEMkIxMUYwODZFMzFDRjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlhCMA0GCSqGSIb3DQEB
CwUAA4IBAQDAQcj4TpOnNSGGkfrwQDDW6h34TF0nWnzRt3eT4UZrRG6jrbxxdlLk
Yn8BpOeLUnJf+FuvdqCKXq7YUwDmQWIUDrbT3ixqZ0eatQf5bS4zGlD+8RK1/FLz
9HTpgZ5aFlO9Eg5x9bseWXpwH3Wt44+M3hduu3N53PavCcUCobpZVrloTvohDWCa
NSXWTPOLpvxIKPPfCkkXElP8Wp4I8Nht53vlJh1T9urnuF07ozTarU70xQoz9lKe
a8CICn7IAIQtjGYORBGVHYSaK6mB5sQUolxiVkoXbWV5Ut8z2W89cHgHgFQ7jeWM
3jdwuGzbIWFGNIpsN0fX3HqJZha3qH7y
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:52 2025 by rpki-client