Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9289F27A998111F0821E2391DAE4EC9C.roa
File: 9289F27A998111F0821E2391DAE4EC9C.roa (raw, json)
Hash identifier: AuUFnbYzp+zseQRJoSRdKlxl0SAuFqCihdymW6d1fqg=
Subject key identifier: FE:D6:98:EF:CE:9A:9E:05:BD:B9:77:EB:E2:16:5D:85:B6:1C:34:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9289F27A998111F0821E2391DAE4EC9C.roa
Signing time: Wed 24 Sep 2025 20:03:44 +0000
ROA not before: Wed 24 Sep 2025 20:03:39 +0000
ROA not after: Tue 04 Nov 2025 20:03:39 +0000
asID: 20326
IP address blocks: 154.85.123.0/24 maxlen: 24
154.94.33.0/24 maxlen: 24
154.94.38.0/24 maxlen: 24
154.94.41.0/24 maxlen: 24
154.94.46.0/24 maxlen: 24
154.94.50.0/24 maxlen: 24
154.94.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106690 (0x1a0c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 20:03:39 2025 GMT
Not After : Nov 4 20:03:39 2025 GMT
Subject: CN=68d44ea0-6a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:13:14:7f:51:8a:16:24:35:b3:7d:3e:ef:cb:
c8:5b:2d:fa:03:c4:12:ed:f1:56:68:89:91:2f:6d:
c1:17:10:0f:3c:f2:63:27:e7:31:d9:f5:a4:3b:0c:
6e:bb:85:f2:df:09:52:e1:cc:40:f2:39:e2:7d:63:
a3:fd:32:31:5e:e2:ae:2e:5a:74:c7:be:f3:70:8e:
b6:40:3d:2c:07:58:53:fe:04:74:dc:fe:0a:e9:39:
d0:af:5b:e4:52:8a:ba:d2:5a:24:a2:8a:0f:af:05:
b9:c3:06:e5:fa:00:70:af:df:63:4f:5d:89:a4:88:
42:3f:6c:e6:32:62:9f:ec:ef:39:07:85:c4:8e:8f:
c3:a2:96:4d:53:5e:f5:75:f0:c2:af:b1:f2:3a:9d:
77:c7:34:1f:1c:8a:98:86:41:ad:0b:a5:41:59:77:
8a:5e:02:1f:e7:7a:62:72:12:33:9e:32:9c:41:46:
ae:c3:7a:84:45:a3:c2:03:e5:9b:24:41:be:fc:70:
85:40:2e:94:d9:5b:ed:b9:ba:ad:bd:67:f3:a7:8d:
23:30:99:00:fa:42:62:e9:9b:f5:37:74:34:af:0f:
a1:73:af:d5:d1:42:7d:87:e2:fd:73:ce:f6:16:1a:
f2:c9:33:40:61:92:7b:cd:81:17:54:3c:ff:e5:7e:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:98:EF:CE:9A:9E:05:BD:B9:77:EB:E2:16:5D:85:B6:1C:34:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9289F27A998111F0821E2391DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.123.0/24
154.94.33.0/24
154.94.38.0/24
154.94.41.0/24
154.94.46.0/24
154.94.50.0/24
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ad:b4:25:04:72:59:22:0d:c3:d4:ff:4b:fb:e7:8e:69:94:
26:db:22:21:6b:81:89:f7:aa:1d:db:83:13:5f:65:18:a9:8e:
48:88:c4:18:4b:90:90:e7:8c:96:2c:a7:0c:e2:65:73:fd:81:
75:87:cf:a1:0c:82:16:bf:78:c0:9d:e1:0b:74:60:89:20:41:
df:76:79:8e:7d:37:73:c3:a6:d2:4f:6f:67:51:27:51:50:68:
d8:39:81:0a:be:50:4b:68:ad:86:39:2d:07:4e:a3:7e:36:a0:
f5:09:37:6f:e7:6d:48:04:b8:3c:b1:1a:52:a4:e0:70:29:b7:
bf:29:62:c3:ae:fe:45:fb:6a:91:99:ac:51:81:35:3a:60:20:
71:0a:59:56:82:09:43:32:fe:c9:9b:20:dc:85:61:4b:c2:51:
39:a7:48:f4:23:79:09:c4:98:c7:1f:b7:32:68:23:61:dd:d2:
4c:6f:8d:50:d1:1e:f3:19:7f:4a:9c:d4:5a:6d:71:5b:c3:fc:
66:cb:70:5d:d6:f7:84:d1:68:96:98:47:d2:c5:d9:e4:a8:d0:
29:9c:87:7c:3d:ca:12:39:d1:12:9a:fd:b2:7e:ee:7c:a8:10:
a6:d5:92:cf:c2:af:db:8a:1f:84:ce:4f:32:b1:a3:e5:b3:c4:
cd:06:f1:34
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAaDCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI0MjAwMzM5WhcNMjUxMTA0MjAwMzM5WjAYMRYw
FAYDVQQDEw02OGQ0NGVhMC02YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9hMUf1GKFiQ1s30+78vIWy36A8QS7fFWaImRL23BFxAPPPJjJ+cx2fWk
Owxuu4Xy3wlS4cxA8jnifWOj/TIxXuKuLlp0x77zcI62QD0sB1hT/gR03P4K6TnQ
r1vkUoq60lokoooPrwW5wwbl+gBwr99jT12JpIhCP2zmMmKf7O85B4XEjo/DopZN
U171dfDCr7HyOp13xzQfHIqYhkGtC6VBWXeKXgIf53pichIznjKcQUauw3qERaPC
A+WbJEG+/HCFQC6U2VvtubqtvWfzp40jMJkA+kJi6Zv1N3Q0rw+hc6/V0UJ9h+L9
c872FhryyTNAYZJ7zYEXVDz/5X5L4QIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFP7W
mO/Omp4Fvbl36+IWXYW2HDTWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Mjg5RjI3QTk5ODExMUYwODIxRTIzOTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAmlV7AwQAml4hAwQAml4m
AwQAml4pAwQAml4uAwQAml4yAwQAml48MA0GCSqGSIb3DQEBCwUAA4IBAQCurbQl
BHJZIg3D1P9L++eOaZQm2yIha4GJ96od24MTX2UYqY5IiMQYS5CQ54yWLKcM4mVz
/YF1h8+hDIIWv3jAneELdGCJIEHfdnmOfTdzw6bST29nUSdRUGjYOYEKvlBLaK2G
OS0HTqN+NqD1CTdv521IBLg8sRpSpOBwKbe/KWLDrv5F+2qRmaxRgTU6YCBxCllW
gglDMv7JmyDchWFLwlE5p0j0I3kJxJjHH7cyaCNh3dJMb41Q0R7zGX9KnNRabXFb
w/xmy3Bd1veE0WiWmEfSxdnkqNApnId8PcoSOdESmv2yfu58qBCm1ZLPwq/bih+E
zk8ysaPls8TNBvE0
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:08 2025 by rpki-client