Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B86C969DE111F0B4E127F2DAE4EC9C.roa
File: 41B86C969DE111F0B4E127F2DAE4EC9C.roa (raw, json)
Hash identifier: 6EWbFzmxZvWh42itGAs0E9pdWoFvbJJhXKTtdptWPp4=
Subject key identifier: 6A:74:78:11:51:36:A8:67:01:43:42:79:33:76:11:29:4B:5D:0D:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A1CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B86C969DE111F0B4E127F2DAE4EC9C.roa
Signing time: Tue 30 Sep 2025 09:38:45 +0000
ROA not before: Tue 30 Sep 2025 09:38:40 +0000
ROA not after: Mon 17 Nov 2025 09:38:40 +0000
asID: 138915
IP address blocks: 154.203.143.0/24 maxlen: 24
154.206.64.0/24 maxlen: 24
154.206.65.0/24 maxlen: 24
154.206.66.0/24 maxlen: 24
154.206.67.0/24 maxlen: 24
154.206.68.0/23 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.72.0/23 maxlen: 24
154.206.74.0/23 maxlen: 24
154.206.76.0/23 maxlen: 24
154.206.78.0/24 maxlen: 24
154.206.90.0/23 maxlen: 24
154.206.92.0/23 maxlen: 24
154.206.94.0/23 maxlen: 24
154.206.98.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106954 (0x1a1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:38:40 2025 GMT
Not After : Nov 17 09:38:40 2025 GMT
Subject: CN=68dba525-f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:33:c8:33:c3:5f:85:24:de:5f:45:b2:36:
38:df:7e:23:b1:90:37:6a:15:12:09:67:cb:0f:b7:
d7:db:97:9d:6d:82:dc:e2:75:70:04:4d:c8:18:72:
4b:52:aa:e4:f9:4f:cb:2a:b5:4d:00:10:6d:f7:61:
e2:b4:c7:c2:37:ff:fa:fd:de:81:5e:2b:56:b9:2d:
a9:dd:11:e0:a6:f3:ce:7f:50:84:c0:13:6f:c9:0f:
54:e7:b2:39:1c:f6:07:f0:fd:e1:3c:e9:8b:3a:17:
b4:c1:cb:b6:01:33:82:07:ee:e9:9f:50:54:ca:45:
26:18:73:f0:42:58:f2:b2:cc:67:7b:cc:22:46:98:
0c:fa:1e:96:7a:21:1f:fa:13:a4:79:99:8e:13:32:
09:df:ec:e1:b3:8e:b2:29:92:1c:6f:fd:3a:2c:c6:
30:44:c5:86:96:b9:ca:a1:f0:bf:fa:39:0a:a9:6c:
26:11:99:b7:28:f1:0f:4e:ed:94:c8:5d:a1:74:0a:
ee:33:2b:43:08:95:09:17:b7:8c:b5:f3:2b:af:14:
4b:63:99:f2:62:de:a8:59:72:37:b0:6f:b4:4c:09:
10:4f:a4:dd:cf:4b:4b:f8:77:3e:07:80:a7:85:56:
a8:14:03:34:d8:70:93:2d:3f:8b:33:d4:bb:1b:9e:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:78:11:51:36:A8:67:01:43:42:79:33:76:11:29:4B:5D:0D:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B86C969DE111F0B4E127F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.143.0/24
154.206.64.0-154.206.78.255
154.206.90.0-154.206.95.255
154.206.98.0/23
154.206.102.0-154.206.106.255
154.206.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:fb:1c:a6:af:4f:49:2b:2b:ac:75:f1:fd:19:ca:ca:7a:b9:
98:e6:70:48:95:7e:49:20:77:cb:48:bf:f6:8b:ba:67:75:53:
50:65:15:5e:01:67:17:8f:78:00:aa:37:ff:0b:ec:89:58:73:
11:b6:38:76:9f:05:a6:b0:8a:dc:2e:82:63:67:1a:b9:59:6a:
08:5a:9e:72:b6:08:b1:0e:fa:bb:52:e3:22:9f:91:03:85:4d:
9a:97:ed:06:35:a8:f1:7e:75:50:f0:09:df:7d:fd:c4:50:b0:
4e:8f:f7:3a:03:26:dc:5f:b3:52:f7:25:3f:3b:ef:ee:d9:83:
58:6a:9e:2a:32:53:04:39:32:de:91:3a:59:e5:3a:c6:cc:71:
36:df:23:97:f7:2a:88:f5:dc:f8:da:7c:6e:52:96:d9:dc:bb:
ff:9c:2d:7c:9d:d8:b7:0d:23:ff:1b:e2:56:d0:ff:f5:04:4f:
ae:9f:a0:f6:2c:7d:f8:a0:a1:e8:fa:ab:c1:9c:54:2d:49:cc:
e3:d1:58:1e:b4:65:2a:fc:c6:75:03:f6:57:24:cb:9c:d5:75:
1b:aa:1a:eb:42:49:6d:0b:df:1b:4d:6a:eb:8e:3f:71:9c:ca:
47:cd:bd:de:19:65:81:d9:3c:bc:45:34:69:4c:7d:8a:12:c8:
fe:7f:93:15
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAaHKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTMwMDkzODQwWhcNMjUxMTE3MDkzODQwWjAYMRYw
FAYDVQQDEw02OGRiYTUyNS1mOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA42AzyDPDX4Uk3l9FsjY4334jsZA3ahUSCWfLD7fX25edbYLc4nVwBE3I
GHJLUqrk+U/LKrVNABBt92HitMfCN//6/d6BXitWuS2p3RHgpvPOf1CEwBNvyQ9U
57I5HPYH8P3hPOmLOhe0wcu2ATOCB+7pn1BUykUmGHPwQljyssxne8wiRpgM+h6W
eiEf+hOkeZmOEzIJ3+zhs46yKZIcb/06LMYwRMWGlrnKofC/+jkKqWwmEZm3KPEP
Tu2UyF2hdAruMytDCJUJF7eMtfMrrxRLY5nyYt6oWXI3sG+0TAkQT6Tdz0tL+Hc+
B4CnhVaoFAM02HCTLT+LM9S7G559EQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFGp0
eBFRNqhnAUNCeTN2ESlLXQ3wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MUI4NkM5NjlERTExMUYwQjRFMTI3RjJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmsuPMAwDBAaazkADBACa
zk4wDAMEAZrOWgMEBZrOQAMEAZrOYjAMAwQBms5mAwQAms5qAwQCms5sMA0GCSqG
SIb3DQEBCwUAA4IBAQAt+xymr09JKyusdfH9GcrKermY5nBIlX5JIHfLSL/2i7pn
dVNQZRVeAWcXj3gAqjf/C+yJWHMRtjh2nwWmsIrcLoJjZxq5WWoIWp5ytgixDvq7
UuMin5EDhU2al+0GNajxfnVQ8Anfff3EULBOj/c6AybcX7NS9yU/O+/u2YNYap4q
MlMEOTLekTpZ5TrGzHE23yOX9yqI9dz42nxuUpbZ3Lv/nC18ndi3DSP/G+JW0P/1
BE+un6D2LH34oKHo+qvBnFQtSczj0VgetGUq/MZ1A/ZXJMuc1XUbqhrrQkltC98b
TWrrjj9xnMpHzb3eGWWB2Ty8RTRpTH2KEsj+f5MV
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:12 2025 by rpki-client