Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B42CC32AA7111F086A2F7A1DAE4EC9C.roa
File: 0B42CC32AA7111F086A2F7A1DAE4EC9C.roa (raw, json)
Hash identifier: kX8REhMShr3WiRqwXwkdNdy/qFmtm5f7HDjfGyQHCyA=
Subject key identifier: 2A:54:30:6D:CB:0E:3C:F1:87:C3:A9:60:EB:4C:7C:DB:91:24:54:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A3DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B42CC32AA7111F086A2F7A1DAE4EC9C.roa
Signing time: Thu 16 Oct 2025 09:18:15 +0000
ROA not before: Thu 16 Oct 2025 09:18:09 +0000
ROA not after: Thu 04 Dec 2025 09:18:09 +0000
asID: 138915
IP address blocks: 154.94.100.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107485 (0x1a3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 09:18:09 2025 GMT
Not After : Dec 4 09:18:09 2025 GMT
Subject: CN=68f0b857-4efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:9e:b1:c1:91:84:15:42:2d:07:af:e3:5c:
03:39:fb:92:3d:8b:7a:05:59:7a:01:0f:dd:d6:aa:
64:26:60:9f:fd:dc:fe:8c:4d:bc:c5:ca:5b:5e:fb:
64:d7:7d:2d:ce:19:ae:ad:de:d0:23:e2:74:db:b0:
f7:f8:84:8b:a7:6e:1c:3d:c6:13:c2:2d:07:91:26:
78:8a:a1:8b:07:39:fa:22:41:5d:72:be:f6:bc:3c:
04:63:5b:01:25:08:12:f6:55:51:ca:79:6f:9d:f8:
93:3b:9f:d2:9c:4c:06:a2:ed:7d:d9:36:24:b6:cf:
f1:02:b7:c5:00:c4:85:8b:58:53:e1:3b:9c:f2:70:
aa:ac:3e:bd:e0:9f:f3:a2:bd:1e:30:27:a9:08:56:
3d:bb:08:ba:29:4a:bf:2b:ad:3b:41:46:f9:46:bd:
fa:99:0a:93:3e:a9:2d:3a:71:7e:b2:58:ae:99:f4:
2c:4c:e0:99:1c:1b:2e:a3:ee:f2:3d:c7:03:94:23:
11:3f:9c:e7:d4:0c:5b:e8:13:0c:fe:85:a3:d2:97:
b5:d4:62:8b:8c:2e:ee:86:f4:f5:2d:07:f5:92:8b:
c9:c4:2f:d6:e1:40:07:36:ba:7d:c6:aa:eb:d0:35:
1c:7b:74:75:74:93:70:73:39:05:54:cd:eb:fa:d3:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:30:6D:CB:0E:3C:F1:87:C3:A9:60:EB:4C:7C:DB:91:24:54:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B42CC32AA7111F086A2F7A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.100.0/24
154.94.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:69:79:15:93:aa:67:46:d9:00:06:9d:06:6d:8a:d8:7d:85:
83:fc:9e:8f:42:78:3f:15:9d:b5:e2:c6:95:8d:83:3c:c8:3a:
0b:5d:c6:16:50:06:83:d0:0f:0a:1f:64:cc:04:8f:de:a3:1d:
31:9c:0d:f6:4b:16:52:8d:a4:47:cd:c6:20:66:39:fb:ce:5f:
35:ab:7e:4b:92:50:89:58:c3:ee:92:07:a8:a0:1a:fb:3f:3d:
bc:1a:88:fa:a6:4d:a0:fc:88:67:24:0b:11:2e:7c:29:66:47:
06:93:30:05:6a:2f:89:79:46:ae:49:13:6c:5b:4d:78:89:8a:
c2:8f:9b:ba:99:14:76:58:0e:6f:b6:64:1b:eb:b2:22:7b:12:
79:69:a9:24:67:9f:8b:5b:fb:e5:06:94:e9:f7:83:c0:59:e2:
a0:7e:0f:74:96:c2:5d:f0:02:f4:72:10:95:e5:7f:be:19:dd:
d5:f9:bb:05:e7:eb:9b:5d:d0:3c:73:bc:f1:2c:94:96:67:21:
b3:85:9b:fb:c1:04:d0:9f:2b:86:e4:a2:d1:cf:99:f5:c0:01:
2c:ab:b0:f8:b7:f4:b6:07:3d:8b:f8:4d:e8:fc:cc:a3:2e:f9:
67:53:35:9f:d4:59:2c:c0:f3:71:b8:9f:ba:ef:ac:9f:55:d0:
19:dc:db:88
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAaPdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDE2MDkxODA5WhcNMjUxMjA0MDkxODA5WjAYMRYw
FAYDVQQDEw02OGYwYjg1Ny00ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt7CescGRhBVCLQev41wDOfuSPYt6BVl6AQ/d1qpkJmCf/dz+jE28xcpb
Xvtk130tzhmurd7QI+J027D3+ISLp24cPcYTwi0HkSZ4iqGLBzn6IkFdcr72vDwE
Y1sBJQgS9lVRynlvnfiTO5/SnEwGou192TYkts/xArfFAMSFi1hT4Tuc8nCqrD69
4J/zor0eMCepCFY9uwi6KUq/K607QUb5Rr36mQqTPqktOnF+sliumfQsTOCZHBsu
o+7yPccDlCMRP5zn1Axb6BMM/oWj0pe11GKLjC7uhvT1LQf1kovJxC/W4UAHNrp9
xqrr0DUce3R1dJNwczkFVM3r+tOzKQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCpU
MG3LDjzxh8OpYOtMfNuRJFSLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjQyQ0MzMkFBNzExMUYwODZBMkY3QTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAml5kAwQAml57MA0GCSqG
SIb3DQEBCwUAA4IBAQA+aXkVk6pnRtkABp0GbYrYfYWD/J6PQng/FZ214saVjYM8
yDoLXcYWUAaD0A8KH2TMBI/eox0xnA32SxZSjaRHzcYgZjn7zl81q35LklCJWMPu
kgeooBr7Pz28Goj6pk2g/IhnJAsRLnwpZkcGkzAFai+JeUauSRNsW014iYrCj5u6
mRR2WA5vtmQb67IiexJ5aakkZ5+LW/vlBpTp94PAWeKgfg90lsJd8AL0chCV5X++
Gd3V+bsF5+ubXdA8c7zxLJSWZyGzhZv7wQTQnyuG5KLRz5n1wAEsq7D4t/S2Bz2L
+E3o/MyjLvlnUzWf1FkswPNxuJ+676yfVdAZ3NuI
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:43 2025 by rpki-client