Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A01ABAB4C811F090003BA0DAE4EC9C.roa
File: B1A01ABAB4C811F090003BA0DAE4EC9C.roa (raw, json)
Hash identifier: KzwxAGQ1GbB54rhIdv03czWWEwUtCgF6NdgWXQusDbg=
Subject key identifier: 9C:80:CC:CE:4F:37:8E:A2:A5:44:EB:42:C6:DE:45:2C:02:E5:BF:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A634
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A01ABAB4C811F090003BA0DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 13:10:52 +0000
ROA not before: Wed 29 Oct 2025 13:10:47 +0000
ROA not after: Fri 05 Dec 2025 13:10:47 +0000
asID: 54600
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108084 (0x1a634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 13:10:47 2025 GMT
Not After : Dec 5 13:10:47 2025 GMT
Subject: CN=6902125c-3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:1d:f8:24:17:6e:50:f2:30:07:b1:d4:4c:
16:4a:ef:59:89:7c:8a:85:b9:b2:82:97:3d:6d:a9:
ea:a3:f4:d2:6c:11:72:c1:42:6e:31:b2:09:35:31:
10:9b:82:20:dc:af:31:61:75:1d:0f:ae:9f:66:dc:
3b:8c:64:f4:c0:ce:20:1c:6d:c2:a8:d8:8e:e5:d7:
af:78:43:2b:d5:2f:0d:f5:1e:f5:b4:48:f6:71:93:
24:e8:ee:ef:cd:39:be:0c:49:2e:58:91:51:77:dc:
fc:6f:c3:a0:9e:c2:5b:23:4a:75:b0:ac:f0:34:fd:
d0:fe:f6:59:04:69:b0:1d:0a:9e:b4:e4:4f:a3:1f:
9a:f9:21:f3:8a:85:98:2c:ba:8a:48:a2:5c:6e:8c:
45:a1:8e:fb:a9:29:fd:52:89:68:35:09:0e:63:b3:
f9:0e:8a:cd:01:74:cd:a1:66:b0:b1:72:27:71:c8:
cc:47:20:1e:50:ba:f7:80:fc:e5:93:ce:4a:6c:17:
27:cb:75:67:0d:6d:ef:dc:04:95:24:99:09:9a:1a:
bf:e0:2c:c0:5c:63:89:1a:78:96:e5:f7:2d:b4:2b:
0b:57:4f:e4:da:8a:66:9b:0f:7c:6b:77:a2:bc:0a:
92:5d:f2:56:6b:3c:90:3c:8a:53:f8:48:cb:83:0b:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:CC:CE:4F:37:8E:A2:A5:44:EB:42:C6:DE:45:2C:02:E5:BF:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A01ABAB4C811F090003BA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
09:c4:57:23:ba:c0:5f:c5:1c:a3:a5:2f:45:ac:04:df:a6:7c:
79:5b:9a:33:b9:6c:07:79:ee:ae:2d:44:3d:cc:9f:44:91:39:
bb:5c:e9:d2:ca:98:d9:fa:d6:f6:1d:28:6d:84:6d:f0:da:55:
cf:d0:46:8a:7c:38:77:71:7e:43:4b:d9:80:76:3b:ca:1b:81:
c6:f0:77:35:be:ea:04:43:5c:22:63:c9:0c:e4:8b:8d:ad:21:
50:9e:2d:6c:06:ba:e1:99:c6:15:a6:38:c2:15:ff:28:22:fe:
eb:70:ce:88:40:31:c5:db:0b:50:2c:45:41:4f:1d:05:97:58:
5e:37:74:e6:5f:21:7a:b4:a2:8e:b2:a9:bf:22:71:45:a4:47:
77:b8:4c:9d:54:40:e4:2e:4c:db:ea:15:02:92:a6:ce:f0:80:
04:20:81:e3:b8:dd:4c:af:97:1d:d8:44:ca:23:0b:9e:78:8d:
03:02:0a:ba:22:cd:3b:3a:e2:0d:f0:66:fe:77:88:0f:a4:a4:
7f:f0:79:21:8a:cc:ed:68:cc:df:f7:9c:b9:51:0e:92:de:94:
cf:6a:5d:2a:bc:ae:7b:34:87:75:f5:7f:47:eb:9d:4f:bb:95:
ff:26:00:42:5d:a3:58:23:1a:8f:5c:bb:8b:6f:6e:66:dd:c5:
75:f8:a5:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaY0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTMxMDQ3WhcNMjUxMjA1MTMxMDQ3WjAYMRYw
FAYDVQQDEw02OTAyMTI1Yy0zODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs5sd+CQXblDyMAex1EwWSu9ZiXyKhbmygpc9banqo/TSbBFywUJuMbIJ
NTEQm4Ig3K8xYXUdD66fZtw7jGT0wM4gHG3CqNiO5deveEMr1S8N9R71tEj2cZMk
6O7vzTm+DEkuWJFRd9z8b8OgnsJbI0p1sKzwNP3Q/vZZBGmwHQqetORPox+a+SHz
ioWYLLqKSKJcboxFoY77qSn9UoloNQkOY7P5DorNAXTNoWawsXInccjMRyAeULr3
gPzlk85KbBcny3VnDW3v3ASVJJkJmhq/4CzAXGOJGniW5fcttCsLV0/k2opmmw98
a3eivAqSXfJWazyQPIpT+EjLgwudzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJyA
zM5PN46ipUTrQsbeRSwC5b9sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMUEwMUFCQUI0QzgxMUYwOTAwMDNCQTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQAJxFcjusBfxRyjpS9FrATfpnx5W5ozuWwHee6uLUQ9zJ9EkTm7XOnS
ypjZ+tb2HShthG3w2lXP0EaKfDh3cX5DS9mAdjvKG4HG8Hc1vuoEQ1wiY8kM5IuN
rSFQni1sBrrhmcYVpjjCFf8oIv7rcM6IQDHF2wtQLEVBTx0Fl1heN3TmXyF6tKKO
sqm/InFFpEd3uEydVEDkLkzb6hUCkqbO8IAEIIHjuN1Mr5cd2ETKIwueeI0DAgq6
Is07OuIN8Gb+d4gPpKR/8HkhisztaMzf95y5UQ6S3pTPal0qvK57NId19X9H651P
u5X/JgBCXaNYIxqPXLuLb25m3cV1+KWO
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:35:42 2025 by rpki-client