Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4CEBF609ACC11F09BC29A80DAE4EC9C.roa
File: E4CEBF609ACC11F09BC29A80DAE4EC9C.roa (raw, json)
Hash identifier: lt5DbSGSABkuI/4t5J+VIGjnbzfXY+xRhxp0jwpJIsU=
Subject key identifier: FB:BC:2A:72:63:51:41:8D:35:6E:AB:09:02:39:C8:C5:9E:93:33:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A135
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4CEBF609ACC11F09BC29A80DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 11:35:25 +0000
ROA not before: Fri 26 Sep 2025 11:35:18 +0000
ROA not after: Sun 09 Nov 2025 11:35:18 +0000
asID: 138915
IP address blocks: 154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.24.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106805 (0x1a135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 11:35:18 2025 GMT
Not After : Nov 9 11:35:18 2025 GMT
Subject: CN=68d67a7d-cd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:ae:a7:f2:0d:39:51:04:93:90:8c:b1:55:
8d:92:77:ca:ff:28:c4:95:66:96:68:42:b8:c0:1e:
55:5e:b4:63:68:3e:cf:37:db:0c:79:d0:59:bf:16:
39:0a:69:8d:0c:d1:d3:e7:1c:23:df:b9:92:0e:38:
fc:0a:e5:50:4c:66:b9:e2:d1:50:fa:7a:b0:23:7e:
16:0e:7c:42:80:e6:20:c7:aa:2a:f8:8f:9f:be:d4:
c5:1d:e4:5a:bf:3f:d6:59:5e:a5:9b:df:5e:2e:60:
df:1f:85:0c:19:40:31:82:3c:14:06:12:d0:c8:6b:
c0:5d:91:29:c6:22:f5:02:00:86:66:b8:41:64:4d:
d8:35:3d:00:96:04:c8:f1:bb:46:c5:70:42:5b:83:
dd:5c:8b:04:88:13:aa:38:b5:1d:ad:cc:0c:71:5d:
ae:57:b9:f2:3c:f1:30:e8:a1:ec:17:c5:b7:8e:ce:
ed:a8:11:b6:bd:0e:17:08:91:ff:d9:6b:79:f0:bd:
b2:bf:2e:4d:0b:de:90:05:b1:fd:e0:d6:e5:cf:06:
9b:62:1a:79:fc:7c:17:6c:29:37:38:cb:ae:c7:5f:
84:c7:0a:95:00:00:7d:02:22:ff:54:95:a6:d5:97:
77:63:12:dc:24:5f:e5:5b:f7:53:36:61:e9:79:a9:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:2A:72:63:51:41:8D:35:6E:AB:09:02:39:C8:C5:9E:93:33:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4CEBF609ACC11F09BC29A80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.17.0-154.223.24.255
154.223.26.0-154.223.30.255
154.223.32.0/22
154.223.37.0/24
154.223.40.0-154.223.45.255
Signature Algorithm: sha256WithRSAEncryption
c1:3b:0d:e9:82:fb:8a:58:86:8f:74:8c:de:8a:4a:95:31:21:
6b:db:22:56:5d:23:ad:cd:d7:7a:d8:5b:d1:a3:35:0d:18:ea:
3b:56:7c:d8:97:86:31:14:42:bc:c1:a1:20:dd:3b:4d:34:91:
6b:e8:3b:3d:6e:8c:e4:05:b5:71:dd:ee:74:9c:fc:5f:ad:09:
d1:1e:4f:04:b9:e0:1f:38:2b:5d:08:6b:11:b5:69:7c:50:4d:
a4:d2:94:7b:b0:e7:43:77:c0:38:63:0d:70:76:89:9a:3d:fb:
f9:4e:f8:1f:79:04:83:4e:d4:03:97:4d:08:ee:aa:fa:ec:a0:
13:eb:4e:da:d6:5d:6e:48:35:04:ec:33:6e:01:b4:8d:ec:8d:
ec:90:93:78:42:e7:19:ae:1a:ac:91:fe:bc:3c:15:53:73:d5:
ce:d8:e3:60:57:35:15:26:21:8c:bf:47:c4:75:84:37:7f:c5:
ee:15:d8:73:ed:64:f0:f4:22:87:6d:20:75:bc:d0:db:2c:fa:
bf:f3:b8:43:e1:23:6f:4b:d0:28:49:39:a6:a4:89:a3:cc:b2:
04:67:6c:cd:44:1c:4a:70:32:be:1f:74:7a:8b:f9:5d:10:61:
17:ae:1e:5e:7e:c9:3d:51:70:0e:77:09:69:11:6a:2e:e2:f6:
19:87:94:45
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIDAaE1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI2MTEzNTE4WhcNMjUxMTA5MTEzNTE4WjAYMRYw
FAYDVQQDEw02OGQ2N2E3ZC1jZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7fyup/INOVEEk5CMsVWNknfK/yjElWaWaEK4wB5VXrRjaD7PN9sMedBZ
vxY5CmmNDNHT5xwj37mSDjj8CuVQTGa54tFQ+nqwI34WDnxCgOYgx6oq+I+fvtTF
HeRavz/WWV6lm99eLmDfH4UMGUAxgjwUBhLQyGvAXZEpxiL1AgCGZrhBZE3YNT0A
lgTI8btGxXBCW4PdXIsEiBOqOLUdrcwMcV2uV7nyPPEw6KHsF8W3js7tqBG2vQ4X
CJH/2Wt58L2yvy5NC96QBbH94NblzwabYhp5/HwXbCk3OMuux1+ExwqVAAB9AiL/
VJWm1Zd3YxLcJF/lW/dTNmHpeaketQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFPu8
KnJjUUGNNW6rCQI5yMWekzM9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNENFQkY2MDlBQ0MxMUYwOUJDMjlBODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBACa3xEDBACa3xgwDAME
AZrfGgMEAJrfHgMEAprfIAMEAJrfJTAMAwQDmt8oAwQBmt8sMA0GCSqGSIb3DQEB
CwUAA4IBAQDBOw3pgvuKWIaPdIzeikqVMSFr2yJWXSOtzdd62FvRozUNGOo7VnzY
l4YxFEK8waEg3TtNNJFr6Ds9bozkBbVx3e50nPxfrQnRHk8EueAfOCtdCGsRtWl8
UE2k0pR7sOdDd8A4Yw1wdomaPfv5TvgfeQSDTtQDl00I7qr67KAT607a1l1uSDUE
7DNuAbSN7I3skJN4QucZrhqskf68PBVTc9XO2ONgVzUVJiGMv0fEdYQ3f8XuFdhz
7WTw9CKHbSB1vNDbLPq/87hD4SNvS9AoSTmmpImjzLIEZ2zNRBxKcDK+H3R6i/ld
EGEXrh5efsk9UXAOdwlpEWou4vYZh5RF
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:50 2025 by rpki-client