Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A613D709D6311F0BEC4C0B9DAE4EC9C.roa
File: 8A613D709D6311F0BEC4C0B9DAE4EC9C.roa (raw, json)
Hash identifier: 0vqsPoY6Lhjzn1nJYaijU9rB/RsNz/7pSNOWadRGBng=
Subject key identifier: 6D:7D:5F:4B:0B:11:A7:A3:65:D1:38:72:2F:56:82:0E:72:04:64:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A177
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A613D709D6311F0BEC4C0B9DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 18:38:50 +0000
ROA not before: Mon 29 Sep 2025 18:38:44 +0000
ROA not after: Wed 05 Nov 2025 18:38:44 +0000
asID: 44559
IP address blocks: 154.209.136.0/24 maxlen: 24
154.209.137.0/24 maxlen: 24
154.209.138.0/24 maxlen: 24
154.209.139.0/24 maxlen: 24
154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106871 (0x1a177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 18:38:44 2025 GMT
Not After : Nov 5 18:38:44 2025 GMT
Subject: CN=68dad23a-4622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:09:de:72:4c:6f:98:26:a6:ba:c3:f5:a2:9e:
51:67:0d:f6:ff:dd:2d:b2:34:98:c0:4b:74:2b:00:
db:2b:43:3b:aa:4b:00:46:b2:21:c6:ee:90:2d:29:
2f:00:df:92:d8:04:70:c3:a1:ce:92:d6:98:a7:7a:
de:1b:97:27:55:65:07:18:cf:bb:54:db:6c:3f:77:
52:1c:a7:50:9f:88:44:7d:48:95:3f:4d:1f:62:bb:
f0:a9:44:cc:0e:cb:f2:64:7a:41:16:53:d7:00:91:
78:c1:ad:32:d4:d2:1c:ff:89:d8:6c:46:2b:6c:38:
0c:f2:7d:6c:a3:52:8f:45:70:87:8c:22:ff:0d:8d:
af:68:04:60:af:6a:e5:66:bc:62:19:11:40:ec:71:
6b:a7:bf:fe:ae:b0:ff:56:af:bd:e0:cf:e9:46:93:
b8:5c:54:fa:62:cb:de:e2:43:d7:55:33:05:03:db:
88:b1:75:52:d7:8d:ba:a8:b4:76:f3:fb:51:35:ad:
5f:7b:e5:50:41:31:a3:0a:3f:88:54:95:07:59:52:
1b:a4:fe:84:45:7b:ab:36:22:27:03:7f:41:57:b5:
34:09:94:f4:4d:79:2a:ca:3a:64:1e:9d:5d:9c:61:
da:44:54:c5:b9:ea:dc:82:d9:1f:33:d2:98:9c:86:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:5F:4B:0B:11:A7:A3:65:D1:38:72:2F:56:82:0E:72:04:64:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A613D709D6311F0BEC4C0B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0/21
154.209.150.0/23
154.209.193.0-154.209.194.255
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0-154.219.206.255
Signature Algorithm: sha256WithRSAEncryption
07:04:23:bc:b5:61:a6:02:e8:60:68:f3:3d:b0:bc:0b:50:af:
a4:9b:25:64:d9:65:79:03:dc:7b:f9:67:fa:04:ab:52:76:a4:
cf:a4:e5:95:c0:98:d2:57:2b:cd:54:8d:7a:99:1d:a7:35:06:
1f:ea:16:87:71:a4:e2:7f:a0:f7:ea:49:21:28:8b:e5:9c:63:
ef:98:67:d9:34:1a:75:0f:af:ba:2d:c7:8c:c0:98:3e:c5:a0:
ca:66:96:2d:ca:b0:4f:fc:3a:3e:0a:9c:d2:51:d5:b5:30:02:
79:e8:43:10:5e:9e:57:84:d4:cc:8f:ec:87:de:0e:fd:50:64:
73:15:8d:f9:5c:b2:92:e4:28:30:7a:85:91:09:18:dc:75:de:
71:34:06:4e:34:30:db:a3:2e:28:df:0f:47:5a:16:fb:d2:4f:
b5:3c:5b:64:c9:f2:c7:b3:39:42:df:11:f1:dd:37:16:54:7c:
ee:ad:34:56:03:7e:3d:95:26:97:3e:76:ed:69:b0:3b:a8:4f:
d9:04:14:be:aa:79:d6:fa:5b:bf:bb:09:0f:73:a0:27:7c:db:
c9:54:33:08:af:b7:fe:a7:44:39:29:61:c1:0f:60:3b:7e:9d:
a5:64:f8:57:15:8e:38:40:39:f4:1a:2a:49:4c:45:9e:bc:9c:
a3:8b:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:27 2025 by rpki-client