Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39B605A9ACB11F091868679DAE4EC9C.roa
File: D39B605A9ACB11F091868679DAE4EC9C.roa (raw, json)
Hash identifier: NOEPuoHMn9Kb6T8Mn1DOR+0e3+zEOeQ0AOV6Z/smdDU=
Subject key identifier: C7:C7:8E:19:CF:9B:FF:67:B2:C3:ED:A4:1D:92:67:5B:04:39:15:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A133
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39B605A9ACB11F091868679DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 11:27:47 +0000
ROA not before: Fri 26 Sep 2025 11:27:39 +0000
ROA not after: Sun 09 Nov 2025 11:27:39 +0000
asID: 138915
IP address blocks: 154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.65.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106803 (0x1a133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 11:27:39 2025 GMT
Not After : Nov 9 11:27:39 2025 GMT
Subject: CN=68d678b3-f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:ee:b1:cb:68:58:0d:2b:75:41:95:32:ea:
64:64:01:cf:87:96:1f:7e:44:29:04:7c:42:8e:9a:
73:fd:7f:ed:c8:31:23:2c:51:09:6c:1b:9f:6f:bd:
e4:4d:0e:1f:32:e2:5b:65:30:2c:94:33:ce:68:62:
c9:2b:b4:0b:88:7b:24:0b:03:15:c3:54:70:bc:71:
5a:67:3e:55:dc:13:ed:db:fa:29:37:8a:1f:ef:77:
55:e0:51:b3:49:10:de:68:c8:dd:09:fb:5b:47:86:
33:09:4c:a2:c1:90:4b:1d:9b:ae:12:9c:39:ec:cf:
1b:ac:c9:4c:1d:52:5e:d4:4f:7b:0f:6c:05:40:70:
b3:df:0d:bf:69:22:8a:fe:9b:ca:9c:f2:64:e5:14:
98:0a:03:bf:ee:3c:81:d5:9c:e4:ae:9b:af:03:10:
1f:43:43:48:e6:79:a4:29:55:3a:ff:ec:07:b9:b7:
35:5d:b6:d4:87:d8:28:db:a2:2f:af:59:70:53:02:
4b:a7:95:fd:37:d8:22:7d:f7:2f:af:8d:39:6d:ff:
c3:3b:1f:39:65:f3:fa:6c:57:e7:2a:93:49:ff:3f:
f8:08:a6:93:ea:0f:a4:c8:f8:b7:d9:75:fa:15:ea:
77:09:df:5c:36:8f:ef:33:d2:e6:d4:6a:45:40:61:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C7:8E:19:CF:9B:FF:67:B2:C3:ED:A4:1D:92:67:5B:04:39:15:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39B605A9ACB11F091868679DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.46.0-154.223.49.255
154.223.51.0-154.223.79.255
Signature Algorithm: sha256WithRSAEncryption
45:95:3d:f4:17:52:74:60:d2:d6:12:45:dd:3a:41:84:ed:89:
1c:70:7d:28:52:d1:f1:48:dd:70:8b:ee:26:ef:a1:4c:7c:0a:
87:b3:a1:37:0e:b4:3f:b8:43:5e:4b:55:be:08:3d:c0:24:4d:
f7:38:fd:6b:81:6f:ee:e0:d5:5b:b7:ad:32:5a:88:f9:47:1e:
55:22:2e:e0:3a:75:ae:ca:57:d1:93:3b:e6:62:86:bc:7e:23:
ca:ab:19:dc:c8:a0:66:4b:38:56:77:78:ee:9e:c2:b5:92:fc:
de:c6:1b:fc:00:b9:3c:35:da:aa:7c:28:02:b6:4e:1e:d1:8b:
a6:ad:d6:f0:eb:a0:2b:2f:d2:bb:1f:3b:a7:af:31:e9:75:fc:
06:11:dd:5e:91:f1:08:02:0a:03:83:9d:03:71:da:22:f7:2f:
91:d0:95:17:b7:9d:7b:02:4e:a7:11:53:3d:ba:42:c8:e4:c1:
29:66:87:2d:d9:02:62:db:77:47:26:86:2e:53:07:0b:9c:54:
3f:cf:05:75:16:33:b2:94:a7:25:d1:92:f6:9a:a8:39:0e:bc:
b2:fc:be:79:16:b9:ba:06:f5:af:76:ad:89:10:b1:ef:54:5f:
24:4c:ba:29:82:19:74:c9:d8:b2:76:b0:7b:fa:85:83:31:0f:
ba:f9:9a:c6
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAaEzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI2MTEyNzM5WhcNMjUxMTA5MTEyNzM5WjAYMRYw
FAYDVQQDEw02OGQ2NzhiMy1mOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu+rusctoWA0rdUGVMupkZAHPh5YffkQpBHxCjppz/X/tyDEjLFEJbBuf
b73kTQ4fMuJbZTAslDPOaGLJK7QLiHskCwMVw1RwvHFaZz5V3BPt2/opN4of73dV
4FGzSRDeaMjdCftbR4YzCUyiwZBLHZuuEpw57M8brMlMHVJe1E97D2wFQHCz3w2/
aSKK/pvKnPJk5RSYCgO/7jyB1ZzkrpuvAxAfQ0NI5nmkKVU6/+wHubc1XbbUh9go
26Ivr1lwUwJLp5X9N9giffcvr405bf/DOx85ZfP6bFfnKpNJ/z/4CKaT6g+kyPi3
2XX6Fep3Cd9cNo/vM9Lm1GpFQGF9JwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMfH
jhnPm/9nssPtpB2SZ1sEORW0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMzlCNjA1QTlBQ0IxMUYwOTE4Njg2NzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGa3y4DBAGa3zAwDAME
AJrfMwMEBJrfQDANBgkqhkiG9w0BAQsFAAOCAQEARZU99BdSdGDS1hJF3TpBhO2J
HHB9KFLR8UjdcIvuJu+hTHwKh7OhNw60P7hDXktVvgg9wCRN9zj9a4Fv7uDVW7et
MlqI+UceVSIu4Dp1rspX0ZM75mKGvH4jyqsZ3MigZks4Vnd47p7CtZL83sYb/AC5
PDXaqnwoArZOHtGLpq3W8OugKy/Sux87p68x6XX8BhHdXpHxCAIKA4OdA3HaIvcv
kdCVF7edewJOpxFTPbpCyOTBKWaHLdkCYtt3RyaGLlMHC5xUP88FdRYzspSnJdGS
9pqoOQ68svy+eRa5ugb1r3atiRCx71RfJEy6KYIZdMnYsnawe/qFgzEPuvmaxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:07 2025 by rpki-client