Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC223A9899F711F08A38839CDAE4EC9C.roa
File: DC223A9899F711F08A38839CDAE4EC9C.roa (raw, json)
Hash identifier: dYZkGMAXcMM4hCYET+SnEa5j4teKRjHzdzmzHVzJCcY=
Subject key identifier: 86:AA:24:39:54:94:0C:CC:17:22:F5:1F:7B:84:79:4D:30:3D:C3:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC223A9899F711F08A38839CDAE4EC9C.roa
Signing time: Thu 25 Sep 2025 10:10:28 +0000
ROA not before: Thu 25 Sep 2025 10:10:23 +0000
ROA not after: Thu 04 Dec 2025 10:10:23 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
154.94.102.0/24 maxlen: 24
154.94.103.0/24 maxlen: 24
154.94.104.0/24 maxlen: 24
154.94.105.0/24 maxlen: 24
154.94.106.0/24 maxlen: 24
154.94.107.0/24 maxlen: 24
154.94.108.0/24 maxlen: 24
154.94.109.0/24 maxlen: 24
154.94.110.0/24 maxlen: 24
154.94.111.0/24 maxlen: 24
154.94.112.0/24 maxlen: 24
154.94.113.0/24 maxlen: 24
154.94.114.0/24 maxlen: 24
154.94.115.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.117.0/24 maxlen: 24
154.94.118.0/24 maxlen: 24
154.94.119.0/24 maxlen: 24
154.94.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106743 (0x1a0f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 10:10:23 2025 GMT
Not After : Dec 4 10:10:23 2025 GMT
Subject: CN=68d51514-89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:af:fd:31:bc:28:13:4e:90:73:f2:d0:21:
5c:f9:3a:e1:68:cc:ba:94:5d:96:d0:3e:a5:7e:77:
d6:93:7e:8d:b2:42:6a:04:60:92:18:d9:7b:d0:92:
57:62:17:ba:47:80:77:37:0b:d0:f2:76:78:d5:81:
df:22:63:d2:fe:d5:34:82:11:77:ee:ce:09:c6:d4:
24:29:e3:37:fc:62:bb:36:73:c0:6f:44:14:91:c3:
ca:52:ef:2c:b3:b8:8c:10:ff:cf:cb:ee:31:c1:25:
1d:da:85:27:94:3f:22:98:cf:5a:e9:a3:0c:2e:fe:
8f:f7:e6:4d:9b:b2:55:14:d1:71:39:5a:a6:81:87:
dc:9e:93:41:24:9c:e2:fc:95:52:ca:98:e8:58:c5:
ff:14:36:b0:bf:d7:11:7a:36:7d:c1:96:c2:e5:80:
c8:58:41:d9:d1:00:68:54:9a:3a:51:ab:2b:d0:e4:
ae:27:30:c4:7f:37:2f:e3:8f:7b:06:75:ae:9a:c3:
41:61:72:71:47:98:21:3f:ba:28:28:6e:6b:8f:19:
c1:2b:ed:73:af:3b:3c:ea:c3:20:2e:b5:23:02:1e:
68:8a:67:df:26:02:ba:e8:75:9c:e0:88:e6:31:e9:
d9:3e:62:13:41:bb:2a:38:75:0d:7d:4c:77:88:71:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:24:39:54:94:0C:CC:17:22:F5:1F:7B:84:79:4D:30:3D:C3:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC223A9899F711F08A38839CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0-154.94.120.255
Signature Algorithm: sha256WithRSAEncryption
47:c6:21:bb:48:1b:bf:a4:67:6c:9a:f8:d5:4c:55:55:0b:bf:
48:d5:15:a5:3e:88:54:ed:c9:4f:26:a1:54:3e:bd:79:0a:a8:
dc:4d:55:6b:61:7e:06:99:61:bd:8b:31:b6:44:c7:bd:e6:57:
b0:d8:91:f1:71:45:d5:3b:b5:16:c7:e1:df:ca:ca:f2:40:c4:
a3:31:84:99:d8:bf:ef:cd:7a:60:60:0f:4c:d2:93:a1:fc:c4:
99:02:a7:42:96:f1:12:92:b7:27:15:8f:14:7d:27:49:48:df:
06:60:90:f9:ee:42:ca:92:e7:12:ce:c5:3b:4e:90:e2:d0:51:
a1:59:15:17:d9:b0:9d:45:25:45:11:2a:1d:15:e9:fb:24:a6:
f8:98:e4:19:74:d7:a1:66:05:35:eb:be:2a:83:0c:9c:a2:e9:
28:d6:3d:84:26:a7:74:59:5d:e1:12:06:8d:0a:bb:47:75:8a:
ce:95:1d:34:7b:fc:27:99:80:6e:3c:18:26:d3:e1:e4:a3:1e:
ba:8b:b2:28:c8:33:77:38:c8:80:3b:24:1b:1e:d5:32:6d:3b:
46:56:b2:7c:4c:5e:0b:93:9c:84:ff:e6:9f:7c:da:a3:bb:50:
dc:ea:fb:fb:11:cb:27:bf:fa:46:aa:c9:8e:cb:9c:76:ba:4b:
08:da:76:e0
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaD3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI1MTAxMDIzWhcNMjUxMjA0MTAxMDIzWjAYMRYw
FAYDVQQDEw02OGQ1MTUxNC04OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtTGv/TG8KBNOkHPy0CFc+TrhaMy6lF2W0D6lfnfWk36NskJqBGCSGNl7
0JJXYhe6R4B3NwvQ8nZ41YHfImPS/tU0ghF37s4JxtQkKeM3/GK7NnPAb0QUkcPK
Uu8ss7iMEP/Py+4xwSUd2oUnlD8imM9a6aMMLv6P9+ZNm7JVFNFxOVqmgYfcnpNB
JJzi/JVSypjoWMX/FDawv9cRejZ9wZbC5YDIWEHZ0QBoVJo6Uasr0OSuJzDEfzcv
4497BnWumsNBYXJxR5ghP7ooKG5rjxnBK+1zrzs86sMgLrUjAh5oimffJgK66HWc
4IjmMenZPmITQbsqOHUNfUx3iHGpVQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIaq
JDlUlAzMFyL1H3uEeU0wPcMBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQzIyM0E5ODk5RjcxMUYwOEEzODgzOUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaXmUDBACaXngwDQYJ
KoZIhvcNAQELBQADggEBAEfGIbtIG7+kZ2ya+NVMVVULv0jVFaU+iFTtyU8moVQ+
vXkKqNxNVWthfgaZYb2LMbZEx73mV7DYkfFxRdU7tRbH4d/KyvJAxKMxhJnYv+/N
emBgD0zSk6H8xJkCp0KW8RKStycVjxR9J0lI3wZgkPnuQsqS5xLOxTtOkOLQUaFZ
FRfZsJ1FJUURKh0V6fskpviY5Bl016FmBTXrviqDDJyi6SjWPYQmp3RZXeESBo0K
u0d1is6VHTR7/CeZgG48GCbT4eSjHrqLsijIM3c4yIA7JBse1TJtO0ZWsnxMXguT
nIT/5p982qO7UNzq+/sRyye/+kaqyY7LnHa6SwjaduA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:38 2025 by rpki-client