Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39F94ECB36411F083291BDBDAE4EC9C.roa
File: E39F94ECB36411F083291BDBDAE4EC9C.roa (raw, json)
Hash identifier: eKxQth9T44BlhnKQpL8Qea17EbUZUzSSyRKYWCNdQ64=
Subject key identifier: 94:68:24:43:49:CF:40:F9:EA:59:B1:85:D0:E9:DC:BA:4B:17:C9:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A577
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39F94ECB36411F083291BDBDAE4EC9C.roa
Signing time: Mon 27 Oct 2025 18:43:59 +0000
ROA not before: Mon 27 Oct 2025 18:43:44 +0000
ROA not after: Mon 01 Dec 2025 18:43:44 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
154.223.209.0/24 maxlen: 24
154.223.210.0/24 maxlen: 24
154.223.211.0/24 maxlen: 24
154.223.212.0/24 maxlen: 24
154.223.213.0/24 maxlen: 24
154.223.214.0/24 maxlen: 24
154.223.215.0/24 maxlen: 24
154.223.216.0/24 maxlen: 24
154.223.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Oct 2025 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107895 (0x1a577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 18:43:44 2025 GMT
Not After : Dec 1 18:43:44 2025 GMT
Subject: CN=68ffbd6e-8c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:3e:c4:67:87:f6:8b:5b:7b:bb:55:ae:b9:
23:a8:3e:81:13:1d:79:38:d8:1f:cd:0d:bc:9d:16:
76:ff:2e:0d:ec:58:c5:c1:77:24:3a:c5:3d:42:ef:
23:c0:f4:6e:77:cb:7a:5c:41:f5:09:13:04:92:38:
44:e0:78:8a:a9:03:0d:61:92:64:85:74:f5:18:ed:
f1:e5:c7:dd:b3:c8:d6:c3:d2:b7:b5:96:c7:a8:db:
b8:80:f3:e3:ad:c2:1e:a1:44:96:ff:c5:a0:96:74:
1d:8e:c9:4c:7e:cc:f5:d8:a3:d8:66:9d:84:f9:9e:
4f:93:bc:f9:dd:9c:29:2f:ec:e7:cf:c1:91:ed:da:
13:8b:59:5c:40:64:86:4b:d3:89:6b:a4:8f:50:d6:
0f:d8:54:34:29:98:b6:4b:56:b7:62:80:3c:eb:f7:
5c:96:6e:29:cf:87:28:be:17:36:0d:e3:a3:92:03:
ef:fb:18:32:7c:47:89:6a:bf:b7:a1:bb:97:f1:d2:
97:c5:4c:00:be:47:ca:5f:42:ca:f6:aa:c2:dd:8f:
54:97:75:90:4e:94:e2:7d:5f:ae:5f:07:cf:a3:d3:
59:e0:0f:fb:90:1e:45:fa:18:6d:f1:1b:03:5c:05:
91:48:75:dc:09:d7:b8:1c:b8:e1:88:63:7b:38:76:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:68:24:43:49:CF:40:F9:EA:59:B1:85:D0:E9:DC:BA:4B:17:C9:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E39F94ECB36411F083291BDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0-154.223.217.255
Signature Algorithm: sha256WithRSAEncryption
8d:48:ed:3d:1e:6f:0d:9b:37:62:b5:f2:7c:90:5e:66:6f:ba:
47:b5:66:d3:9e:15:13:29:78:ec:9f:1a:b2:3b:f4:6e:8a:f9:
18:50:31:55:2e:0b:f2:27:ed:8d:af:c2:4a:61:0d:0c:ad:31:
bf:d8:07:e4:18:02:de:7f:70:3b:21:cd:13:a9:7f:28:bc:86:
51:17:3e:44:1b:98:0d:a9:e5:73:69:96:de:46:c5:93:d1:4b:
27:33:bb:d6:80:0f:b7:61:2b:f7:ea:37:55:a8:ad:3c:2a:c4:
f6:43:2b:70:5c:33:55:b0:d7:4c:57:5d:ba:e6:15:5a:02:2a:
88:3c:ef:60:8f:0d:3f:0e:02:3e:c4:6f:31:0b:0b:2f:1f:43:
9c:61:cf:97:f5:1f:53:60:04:3c:3e:78:60:1f:a5:7c:b8:60:
53:5d:f8:81:68:69:97:a6:f3:cf:c3:92:f0:7b:f9:0c:c9:87:
75:ad:b3:ce:ef:af:bd:b3:bc:99:bf:b5:44:87:7d:5b:68:4d:
7c:f4:86:13:d1:20:73:95:06:ca:8b:ea:f6:36:f0:70:ff:77:
35:a7:c7:76:5f:40:58:8a:e4:7c:6f:ef:e1:6e:57:38:9b:b6:
00:91:e2:12:96:14:2f:fb:fc:87:f2:77:0f:27:06:67:29:36:
f4:49:54:00
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaV3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI3MTg0MzQ0WhcNMjUxMjAxMTg0MzQ0WjAYMRYw
FAYDVQQDEw02OGZmYmQ2ZS04YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvbA+xGeH9otbe7tVrrkjqD6BEx15ONgfzQ28nRZ2/y4N7FjFwXckOsU9
Qu8jwPRud8t6XEH1CRMEkjhE4HiKqQMNYZJkhXT1GO3x5cfds8jWw9K3tZbHqNu4
gPPjrcIeoUSW/8WglnQdjslMfsz12KPYZp2E+Z5Pk7z53ZwpL+znz8GR7doTi1lc
QGSGS9OJa6SPUNYP2FQ0KZi2S1a3YoA86/dclm4pz4covhc2DeOjkgPv+xgyfEeJ
ar+3obuX8dKXxUwAvkfKX0LK9qrC3Y9Ul3WQTpTifV+uXwfPo9NZ4A/7kB5F+hht
8RsDXAWRSHXcCde4HLjhiGN7OHZ9IQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJRo
JENJz0D56lmxhdDp3LpLF8nxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMzlGOTRFQ0IzNjQxMUYwODMyOTFCREJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASa39ADBAGa39gwDQYJ
KoZIhvcNAQELBQADggEBAI1I7T0ebw2bN2K18nyQXmZvuke1ZtOeFRMpeOyfGrI7
9G6K+RhQMVUuC/In7Y2vwkphDQytMb/YB+QYAt5/cDshzROpfyi8hlEXPkQbmA2p
5XNplt5GxZPRSyczu9aAD7dhK/fqN1WorTwqxPZDK3BcM1Ww10xXXbrmFVoCKog8
72CPDT8OAj7EbzELCy8fQ5xhz5f1H1NgBDw+eGAfpXy4YFNd+IFoaZem88/DkvB7
+QzJh3Wts87vr72zvJm/tUSHfVtoTXz0hhPRIHOVBsqL6vY28HD/dzWnx3ZfQFiK
5Hxv7+FuVzibtgCR4hKWFC/7/Ifydw8nBmcpNvRJVAA=
-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:49 2025 by rpki-client