Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C66FB899F911F09E5F84A9DAE4EC9C.roa
File: F9C66FB899F911F09E5F84A9DAE4EC9C.roa (raw, json)
Hash identifier: ECp6l36IF5YqhcHqZ+TEKDEMlhRlzL2+6GKtY3TT0dw=
Subject key identifier: 4D:5F:3B:D4:62:31:DB:3C:C0:E8:11:1C:BE:93:A1:FD:09:CA:0E:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A0FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C66FB899F911F09E5F84A9DAE4EC9C.roa
Signing time: Thu 25 Sep 2025 10:25:37 +0000
ROA not before: Thu 25 Sep 2025 10:25:31 +0000
ROA not after: Thu 04 Dec 2025 10:25:31 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
154.94.90.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106747 (0x1a0fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 10:25:31 2025 GMT
Not After : Dec 4 10:25:31 2025 GMT
Subject: CN=68d518a1-0c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:31:55:5a:33:11:05:dd:98:8a:5d:be:8b:
be:94:4d:24:3e:64:c6:6f:e9:29:91:54:18:b7:74:
1c:d8:a9:e9:60:50:93:74:da:28:46:82:e2:9e:da:
26:1a:26:ae:66:ac:47:3f:36:cf:fc:56:9f:19:0e:
aa:4f:2f:90:4d:dc:4a:d8:59:ad:dd:ef:34:7d:bc:
d5:2e:19:fa:20:0f:5e:7a:7e:f9:d9:b0:dc:04:b2:
d5:88:12:e6:5d:bc:8a:89:dc:42:3e:98:84:90:b3:
4b:d8:15:a0:4e:1d:0f:3c:56:a7:c1:95:50:47:95:
8b:32:a4:3b:c7:5d:ee:9c:68:7b:f9:d1:da:73:0a:
e5:1e:a2:b9:c1:30:e3:1e:1f:af:d1:39:3f:3c:70:
bd:62:c2:e8:aa:73:8f:a1:3e:5c:42:67:78:48:46:
db:4e:45:29:cd:64:e4:df:b5:a0:8c:79:4b:0b:ee:
4a:25:11:ad:b2:eb:6c:16:b8:3f:e0:53:70:12:c7:
8b:b3:84:15:90:d9:2c:dc:71:76:52:71:1d:de:a9:
4a:92:19:44:e8:dd:25:d9:0d:3f:4f:c4:96:f1:9e:
b6:a0:10:4a:98:b3:0f:d1:2e:45:0f:de:15:3f:48:
ed:72:6e:99:2a:ec:c3:1a:4e:32:27:19:fb:b3:53:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:3B:D4:62:31:DB:3C:C0:E8:11:1C:BE:93:A1:FD:09:CA:0E:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9C66FB899F911F09E5F84A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.74.255
154.94.86.0-154.94.93.255
154.94.96.0-154.94.100.255
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
60:62:28:d9:97:de:45:cc:70:b8:ac:a7:e8:c9:87:aa:fc:53:
42:a6:f0:6c:1c:2f:8d:9f:6b:82:bf:52:14:cf:d1:76:a8:c9:
a5:06:94:ea:fc:37:25:fb:7a:6e:e0:cc:39:4e:dd:93:28:e6:
07:85:26:ed:9a:25:2a:ab:59:96:17:ea:5a:db:0e:18:a2:5e:
db:91:16:b8:fb:5b:ec:64:08:a6:fd:62:87:cf:4b:8f:c9:cb:
b8:e5:f4:ae:7b:dc:33:49:0d:0c:5d:48:87:cf:ca:48:44:6a:
3e:1c:5d:12:92:7f:2e:b3:f7:d3:ed:1d:3b:bd:13:0c:7b:4a:
82:04:0a:18:c1:7b:78:75:c2:21:5e:d7:d3:4a:6d:65:27:25:
af:a8:e4:ea:7a:13:02:6b:f6:45:25:20:b5:46:8b:65:d8:ab:
29:2b:fa:65:89:e9:13:17:3c:db:69:aa:ad:5f:09:bc:25:ac:
6d:9d:43:69:f4:75:58:ee:c7:18:19:12:74:ca:26:b6:5e:f8:
c5:50:4c:04:5f:9a:4c:8e:6f:7e:b4:21:14:0b:c2:f0:3a:36:
94:90:c0:9f:02:50:0d:af:30:d9:20:05:f2:32:69:5a:36:a8:
2f:da:fc:c8:fe:19:46:14:7b:ea:ee:e7:e8:38:0a:e4:1e:cc:
04:0b:27:3b
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAaD7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI1MTAyNTMxWhcNMjUxMjA0MTAyNTMxWjAYMRYw
FAYDVQQDEw02OGQ1MThhMS0wYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArzwxVVozEQXdmIpdvou+lE0kPmTGb+kpkVQYt3Qc2KnpYFCTdNooRoLi
ntomGiauZqxHPzbP/FafGQ6qTy+QTdxK2Fmt3e80fbzVLhn6IA9een752bDcBLLV
iBLmXbyKidxCPpiEkLNL2BWgTh0PPFanwZVQR5WLMqQ7x13unGh7+dHacwrlHqK5
wTDjHh+v0Tk/PHC9YsLoqnOPoT5cQmd4SEbbTkUpzWTk37WgjHlLC+5KJRGtsuts
Frg/4FNwEseLs4QVkNks3HF2UnEd3qlKkhlE6N0l2Q0/T8SW8Z62oBBKmLMP0S5F
D94VP0jtcm6ZKuzDGk4yJxn7s1OlcwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFE1f
O9RiMds8wOgRHL6Tof0Jyg5mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOUM2NkZCODk5RjkxMUYwOUU1Rjg0QTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBACaXkUDBACaXkowDAME
AZpeVgMEAZpeXDAMAwQFml5gAwQAml5kAwQAml59MA0GCSqGSIb3DQEBCwUAA4IB
AQBgYijZl95FzHC4rKfoyYeq/FNCpvBsHC+Nn2uCv1IUz9F2qMmlBpTq/Dcl+3pu
4Mw5Tt2TKOYHhSbtmiUqq1mWF+pa2w4Yol7bkRa4+1vsZAim/WKHz0uPycu45fSu
e9wzSQ0MXUiHz8pIRGo+HF0Skn8us/fT7R07vRMMe0qCBAoYwXt4dcIhXtfTSm1l
JyWvqOTqehMCa/ZFJSC1Rotl2KspK/pliekTFzzbaaqtXwm8JaxtnUNp9HVY7scY
GRJ0yia2XvjFUEwEX5pMjm9+tCEUC8LwOjaUkMCfAlANrzDZIAXyMmlaNqgv2vzI
/hlGFHvq7ufoOArkHswECyc7
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:15 2025 by rpki-client