Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA17A2089ABD11F093E654A0DAE4EC9C.roa
File: DA17A2089ABD11F093E654A0DAE4EC9C.roa (raw, json)
Hash identifier: Jl5GGVoclX8+sotlAMLb+TRKv2tn3tFekhYf7chSr5Q=
Subject key identifier: 93:F4:4A:CA:81:08:60:E1:AF:66:43:76:22:67:72:E2:75:F2:CB:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A123
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA17A2089ABD11F093E654A0DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 09:47:45 +0000
ROA not before: Fri 26 Sep 2025 09:47:40 +0000
ROA not after: Sun 09 Nov 2025 09:47:40 +0000
asID: 138915
IP address blocks: 154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
154.93.46.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.66.0/24 maxlen: 24
154.95.67.0/24 maxlen: 24
154.95.68.0/24 maxlen: 24
154.95.70.0/23 maxlen: 24
154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106787 (0x1a123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 09:47:40 2025 GMT
Not After : Nov 9 09:47:40 2025 GMT
Subject: CN=68d66141-2fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a4:10:68:dd:8c:0f:30:ab:30:3e:34:20:08:
6e:63:fd:cc:16:c7:5f:a0:43:fd:c2:3a:b2:54:10:
a1:66:31:45:4b:50:00:98:02:1d:7e:f0:91:93:c5:
dc:74:dc:5e:8a:f0:dd:25:9f:97:5b:1b:88:55:ca:
ea:5d:21:f6:ab:9f:5e:f8:a0:16:a8:87:dd:d6:da:
f5:39:61:c1:49:4b:f0:a5:5a:8c:15:20:c5:ad:73:
23:f6:de:80:de:5a:e1:db:70:d0:c0:a3:6f:ec:57:
b6:b1:c5:1e:e6:76:9f:97:6b:18:01:6d:39:4f:a6:
2d:27:9c:c9:37:1c:32:2f:cc:d0:16:42:2c:a3:f7:
9f:17:ce:57:84:fc:ae:8d:e9:27:ce:e1:8f:b1:e9:
7c:03:e6:77:0a:64:fc:1e:e4:d5:2f:e3:cc:3a:47:
08:3d:51:c7:3d:86:6f:1f:ca:9c:f1:2f:bc:8e:77:
4e:46:de:2b:0c:5f:64:38:2f:3b:78:cb:cb:f2:78:
53:0f:48:a8:66:58:df:a1:52:21:04:13:a3:bb:dd:
f7:5d:5b:5b:23:b0:44:a0:a5:fb:23:d4:b4:23:3d:
6e:0f:67:49:0f:b5:df:1d:db:8a:a7:db:b2:cd:2d:
f9:25:cc:14:cd:91:6e:c7:4a:79:82:86:04:90:92:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:4A:CA:81:08:60:E1:AF:66:43:76:22:67:72:E2:75:F2:CB:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA17A2089ABD11F093E654A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.42.0-154.93.46.255
154.93.48.0/24
154.95.64.0-154.95.68.255
154.95.70.0-154.95.75.255
154.95.96.0-154.95.119.255
154.95.122.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:0b:f3:70:94:02:4d:71:fc:4f:4b:ca:c8:2c:bb:1b:8e:04:
0a:92:c7:ed:8e:cc:40:da:22:c6:df:33:06:f7:c5:98:7c:bd:
5d:67:18:d2:6f:23:bf:61:8f:b7:d6:13:87:b5:34:97:22:46:
36:e7:a3:95:27:59:a5:41:c5:d1:dd:75:dd:ce:db:69:b5:fe:
4e:5d:d8:42:5c:29:66:78:d9:a6:f2:d1:6e:3a:09:20:ae:46:
50:3f:f0:5f:b5:18:4d:5f:67:c7:02:5e:c8:40:68:c4:5c:7d:
8a:18:5f:87:98:85:1f:23:94:64:45:42:22:94:07:1b:1d:10:
b0:b1:b5:7c:cb:5b:e9:01:51:9e:ec:c8:98:9b:dd:bf:c0:c8:
90:65:c1:89:68:4e:9d:4c:33:33:af:a4:6c:7f:a9:68:f9:1e:
75:aa:f9:65:28:9f:ef:8b:02:18:6e:96:b6:68:e9:bd:b5:f9:
b8:df:c8:9e:46:28:9e:8b:48:27:2a:ac:fb:0e:7c:27:20:18:
1f:cf:c5:99:61:1d:25:fc:bc:31:d7:ff:d2:42:14:28:20:cb:
1b:9c:d5:4f:2b:ba:85:98:05:d2:01:73:b1:49:af:f1:95:6d:
5a:1c:ea:00:98:c1:c6:2b:58:39:37:77:b4:a8:bd:7c:94:04:
a4:c8:57:f2
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIDAaEjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI2MDk0NzQwWhcNMjUxMTA5MDk0NzQwWjAYMRYw
FAYDVQQDEw02OGQ2NjE0MS0yZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3aQQaN2MDzCrMD40IAhuY/3MFsdfoEP9wjqyVBChZjFFS1AAmAIdfvCR
k8XcdNxeivDdJZ+XWxuIVcrqXSH2q59e+KAWqIfd1tr1OWHBSUvwpVqMFSDFrXMj
9t6A3lrh23DQwKNv7Fe2scUe5nafl2sYAW05T6YtJ5zJNxwyL8zQFkIso/efF85X
hPyujeknzuGPsel8A+Z3CmT8HuTVL+PMOkcIPVHHPYZvH8qc8S+8jndORt4rDF9k
OC87eMvL8nhTD0ioZljfoVIhBBOju933XVtbI7BEoKX7I9S0Iz1uD2dJD7XfHduK
p9uyzS35JcwUzZFux0p5goYEkJL/YQIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFJP0
SsqBCGDhr2ZDdiJncuJ18ss9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQTE3QTIwODlBQkQxMUYwOTNFNjU0QTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAGaXSoDBACaXS4DBACa
XTAwDAMEBppfQAMEAJpfRDAMAwQBml9GAwQCml9IMAwDBAWaX2ADBAOaX3ADBAGa
X3owDQYJKoZIhvcNAQELBQADggEBABoL83CUAk1x/E9LysgsuxuOBAqSx+2OzEDa
IsbfMwb3xZh8vV1nGNJvI79hj7fWE4e1NJciRjbno5UnWaVBxdHddd3O22m1/k5d
2EJcKWZ42aby0W46CSCuRlA/8F+1GE1fZ8cCXshAaMRcfYoYX4eYhR8jlGRFQiKU
BxsdELCxtXzLW+kBUZ7syJib3b/AyJBlwYloTp1MMzOvpGx/qWj5HnWq+WUon++L
AhhulrZo6b21+bjfyJ5GKJ6LSCcqrPsOfCcgGB/PxZlhHSX8vDHX/9JCFCggyxuc
1U8ruoWYBdIBc7FJr/GVbVoc6gCYwcYrWDk3d7SovXyUBKTIV/I=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:48 2025 by rpki-client