Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92FFFEBE9D5211F095897FCEDAE4EC9C.roa
File: 92FFFEBE9D5211F095897FCEDAE4EC9C.roa (raw, json)
Hash identifier: MdCdjWY/e4r2r4ZBg+XkdVGusJmqCfvp9g7skH/mBQA=
Subject key identifier: 14:4E:30:87:7F:9B:25:5B:00:2F:FE:DF:F3:98:FA:A0:72:48:58:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A15D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92FFFEBE9D5211F095897FCEDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 16:37:23 +0000
ROA not before: Mon 29 Sep 2025 16:37:18 +0000
ROA not after: Fri 31 Oct 2025 16:37:18 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
154.196.43.0/24 maxlen: 24
154.196.44.0/24 maxlen: 24
154.196.45.0/24 maxlen: 24
154.196.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106845 (0x1a15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 16:37:18 2025 GMT
Not After : Oct 31 16:37:18 2025 GMT
Subject: CN=68dab5c3-614d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:0f:ab:7b:96:cc:9f:e1:bb:4b:ab:a5:63:
e1:e4:ac:70:b2:b7:e6:89:de:de:91:09:02:e2:fe:
6a:da:06:9a:95:61:b1:5e:7a:c1:a1:4d:73:28:dc:
da:2a:f4:33:6e:1b:5c:43:ec:6c:ef:7a:dc:af:25:
64:bb:6b:ce:7a:7c:d2:a2:bd:9e:51:4f:de:ed:5f:
a8:e3:45:0e:3b:f7:2f:19:c4:03:b9:8d:2d:97:e7:
e6:27:cf:2d:34:ff:ce:e6:ac:0c:56:32:e4:cf:c5:
da:8f:36:40:c9:a9:be:11:95:dd:16:2b:45:5a:4c:
58:97:41:e1:17:c3:43:ea:cd:c2:c6:28:58:81:41:
c4:4f:b2:e8:0f:16:70:8f:d8:18:72:8c:22:a6:e1:
3d:74:a6:43:ea:2a:c4:88:8a:e5:6e:1d:c0:ea:d9:
09:cb:35:ad:31:03:c9:02:52:c2:e0:1d:f4:b9:52:
d7:b7:21:ed:77:ae:22:d3:d7:dd:75:c0:39:66:bb:
29:47:89:78:34:f6:5f:d3:26:8b:4d:76:b6:03:5a:
d8:63:01:57:2c:7a:b7:88:2c:d0:f8:ae:92:41:24:
12:d5:4b:d7:ae:9a:03:53:da:a8:fb:e9:fa:9c:4d:
97:db:be:05:e5:5a:d6:23:da:05:15:2b:e1:08:c4:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4E:30:87:7F:9B:25:5B:00:2F:FE:DF:F3:98:FA:A0:72:48:58:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92FFFEBE9D5211F095897FCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
154.195.111.0-154.195.112.255
154.195.120.0/24
154.195.124.0/24
154.195.136.0-154.195.138.255
154.195.140.0/24
154.196.30.0/23
154.196.33.0/24
154.196.36.0/24
154.196.40.0-154.196.46.255
Signature Algorithm: sha256WithRSAEncryption
4f:9c:ed:25:67:9b:64:9d:74:70:2b:b5:f8:5f:4d:70:6e:d9:
cb:a4:96:88:d1:07:2a:86:cd:2f:0d:70:46:31:7c:f2:4e:c5:
e0:d5:ee:82:9a:28:82:5d:6b:9e:d0:78:6d:7e:b4:9e:73:93:
85:46:e9:37:ed:05:2c:44:b8:a7:90:12:08:2b:26:e4:34:7a:
df:0d:ad:32:96:12:4f:09:76:a2:96:a6:62:fe:44:80:88:4f:
fd:69:09:86:36:0a:0c:3f:a2:f7:9d:b4:16:dd:67:f7:f0:e8:
23:ef:9d:58:97:1d:a6:82:b3:74:65:f6:72:e7:fb:48:56:9d:
aa:75:7c:63:84:2b:53:e5:f4:93:b4:89:1b:ac:9b:9b:f4:3f:
8a:c1:6d:f7:c5:2d:65:98:d3:a5:40:d1:11:17:0d:3f:6d:6b:
34:94:fc:a5:55:74:45:ba:8d:08:5c:f2:1b:28:8e:66:45:4d:
e1:9f:68:b8:f6:9a:d3:70:8b:2a:20:79:dc:69:da:96:99:36:
02:9a:ad:30:0d:b6:15:1c:06:cb:0c:5f:ad:8a:aa:04:14:8f:
b5:b9:3b:98:07:e3:f3:f8:ca:98:3b:11:83:e4:9e:06:c1:00:
5e:60:99:eb:97:2c:1c:96:0a:04:5b:10:6c:cf:74:5d:44:8d:
7e:ef:94:ab
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIDAaFdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MTYzNzE4WhcNMjUxMDMxMTYzNzE4WjAYMRYw
FAYDVQQDEw02OGRhYjVjMy02MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAovsPq3uWzJ/hu0urpWPh5Kxwsrfmid7ekQkC4v5q2gaalWGxXnrBoU1z
KNzaKvQzbhtcQ+xs73rcryVku2vOenzSor2eUU/e7V+o40UOO/cvGcQDuY0tl+fm
J88tNP/O5qwMVjLkz8XajzZAyam+EZXdFitFWkxYl0HhF8ND6s3CxihYgUHET7Lo
DxZwj9gYcowipuE9dKZD6irEiIrlbh3A6tkJyzWtMQPJAlLC4B30uVLXtyHtd64i
09fddcA5ZrspR4l4NPZf0yaLTXa2A1rYYwFXLHq3iCzQ+K6SQSQS1UvXrpoDU9qo
++n6nE2X274F5VrWI9oFFSvhCMQ0AQIDAQABo4IC8zCCAu8wHQYDVR0OBBYEFBRO
MId/myVbAC/+3/OY+qBySFh1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MkZGRkVCRTlENTIxMUYwOTU4OTdGQ0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAmsNsMAwDBACaw28DBACa
w3ADBACaw3gDBACaw3wwDAMEA5rDiAMEAJrDigMEAJrDjAMEAZrEHgMEAJrEIQME
AJrEJDAMAwQDmsQoAwQAmsQuMA0GCSqGSIb3DQEBCwUAA4IBAQBPnO0lZ5tknXRw
K7X4X01wbtnLpJaI0Qcqhs0vDXBGMXzyTsXg1e6CmiiCXWue0HhtfrSec5OFRuk3
7QUsRLinkBIIKybkNHrfDa0ylhJPCXailqZi/kSAiE/9aQmGNgoMP6L3nbQW3Wf3
8Ogj751Ylx2mgrN0ZfZy5/tIVp2qdXxjhCtT5fSTtIkbrJub9D+KwW33xS1lmNOl
QNERFw0/bWs0lPylVXRFuo0IXPIbKI5mRU3hn2i49prTcIsqIHncadqWmTYCmq0w
DbYVHAbLDF+tiqoEFI+1uTuYB+Pz+MqYOxGD5J4GwQBeYJnrlywclgoEWxBsz3Rd
RI1+75Sr
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:26 2025 by rpki-client