Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF69ACE68B4E11F0AB5BA4EEDAE4EC9C.roa
File: FF69ACE68B4E11F0AB5BA4EEDAE4EC9C.roa (raw, json)
Hash identifier: 23/CAgCSXmAWXL/SQlHKAUCu+ja+JO2VqLD7D+tYmUA=
Subject key identifier: F1:74:6D:D9:B8:1E:62:6F:36:2D:B3:6A:49:62:89:36:D6:E6:85:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019E6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF69ACE68B4E11F0AB5BA4EEDAE4EC9C.roa
Signing time: Sat 06 Sep 2025 18:26:26 +0000
ROA not before: Sat 06 Sep 2025 18:26:21 +0000
ROA not after: Fri 05 Dec 2025 18:26:21 +0000
asID: 18229
IP address blocks: 154.210.192.0/24 maxlen: 24
154.210.193.0/24 maxlen: 24
154.210.194.0/24 maxlen: 24
154.210.195.0/24 maxlen: 24
154.210.196.0/24 maxlen: 24
154.210.197.0/24 maxlen: 24
154.210.198.0/24 maxlen: 24
154.210.199.0/24 maxlen: 24
154.210.200.0/24 maxlen: 24
154.210.201.0/24 maxlen: 24
154.210.202.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.205.0/24 maxlen: 24
154.210.206.0/24 maxlen: 24
154.210.207.0/24 maxlen: 24
154.210.208.0/24 maxlen: 24
154.210.209.0/24 maxlen: 24
154.210.210.0/24 maxlen: 24
154.210.211.0/24 maxlen: 24
154.210.212.0/24 maxlen: 24
154.210.214.0/24 maxlen: 24
154.210.215.0/24 maxlen: 24
154.210.216.0/24 maxlen: 24
154.210.217.0/24 maxlen: 24
154.210.218.0/24 maxlen: 24
154.210.219.0/24 maxlen: 24
154.210.221.0/24 maxlen: 24
154.210.223.0/24 maxlen: 24
154.210.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106092 (0x19e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 18:26:21 2025 GMT
Not After : Dec 5 18:26:21 2025 GMT
Subject: CN=68bc7cd2-3333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:f0:b5:7b:47:e1:69:23:ed:e7:83:37:c9:
02:ad:d2:4b:b8:40:53:d0:8a:0b:6d:2a:bf:7d:89:
31:9b:db:f9:08:91:9f:a0:c2:a3:9c:df:4f:69:0b:
e8:ac:c8:02:b2:3c:19:e3:f9:d9:ba:54:b7:3d:73:
63:a2:cc:e9:f6:73:ab:5b:9a:b5:e1:74:3c:37:e5:
74:19:08:46:60:bb:50:45:5b:df:2d:05:db:8c:f7:
5b:82:89:9d:e9:94:66:7b:91:9c:78:bb:bd:e9:be:
7d:3c:f8:a2:67:79:04:65:96:e5:02:ce:80:e6:2b:
7a:cc:e1:1c:d4:06:22:c7:b4:0c:a1:4e:fc:c5:75:
60:48:a0:11:3a:c5:7a:41:2c:0b:51:8b:ed:61:79:
d6:ec:03:2d:68:5f:fc:43:3f:0d:53:b6:45:0d:f6:
31:57:48:f6:e7:18:f2:87:ca:b1:42:7d:72:b0:34:
22:14:93:90:2c:97:51:14:c8:6c:df:e3:ce:7b:04:
5f:24:25:c4:1f:02:f7:b8:7e:c0:d2:88:fe:0d:2b:
0b:1a:2e:b2:83:7b:4c:a1:07:10:9e:37:b3:f6:ff:
da:01:cf:7e:a6:b0:02:4f:96:42:bb:e1:0d:67:24:
e1:54:0a:5b:df:52:56:05:4f:e7:35:23:27:02:41:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:6D:D9:B8:1E:62:6F:36:2D:B3:6A:49:62:89:36:D6:E6:85:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF69ACE68B4E11F0AB5BA4EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.192.0-154.210.202.255
154.210.204.0-154.210.212.255
154.210.214.0-154.210.219.255
154.210.221.0/24
154.210.223.0/24
154.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:80:a6:62:8a:e5:bd:ff:4c:28:2c:ba:20:6e:6c:92:55:27:
b8:24:f2:3c:d9:80:2e:c4:83:a1:9f:37:96:38:31:76:93:3d:
fb:5f:9a:b0:6f:4d:13:ac:49:bb:b7:64:3b:b9:da:de:4c:a7:
61:6d:3d:35:37:52:c5:06:01:54:ce:99:cf:bd:a6:d5:37:31:
e2:3c:3e:e6:ed:c7:bc:20:5f:46:87:7e:86:36:e8:e0:df:49:
9c:c6:48:94:f0:28:db:0d:df:79:da:18:3e:61:33:58:ff:2d:
3e:f9:20:80:1e:04:b7:ec:13:12:b6:c7:3d:7c:b1:1e:70:f9:
a7:57:80:d4:cd:8d:e5:83:4b:df:d6:4b:dc:bd:38:bc:4b:f3:
30:d5:9c:8a:57:ab:4a:12:79:15:a7:35:54:2c:1e:9c:bb:e8:
7a:7f:46:db:72:93:04:da:72:b4:30:58:a4:88:45:a7:4d:10:
5e:fa:75:6b:ed:53:44:16:d6:e5:74:08:30:ac:4c:c6:f4:59:
0a:a8:06:dc:45:a8:ac:01:80:fe:47:c6:f7:c1:95:7c:29:26:
1f:b5:a1:b7:94:14:22:62:16:bf:37:1b:d0:c8:02:9e:a8:e4:
e2:f5:62:23:70:6a:42:c1:a8:bc:c0:2a:33:f8:2b:6e:11:32:
a8:3e:e7:4f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAZ5sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTA2MTgyNjIxWhcNMjUxMjA1MTgyNjIxWjAYMRYw
FAYDVQQDEw02OGJjN2NkMi0zMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsR7wtXtH4Wkj7eeDN8kCrdJLuEBT0IoLbSq/fYkxm9v5CJGfoMKjnN9P
aQvorMgCsjwZ4/nZulS3PXNjoszp9nOrW5q14XQ8N+V0GQhGYLtQRVvfLQXbjPdb
gomd6ZRme5GceLu96b59PPiiZ3kEZZblAs6A5it6zOEc1AYix7QMoU78xXVgSKAR
OsV6QSwLUYvtYXnW7AMtaF/8Qz8NU7ZFDfYxV0j25xjyh8qxQn1ysDQiFJOQLJdR
FMhs3+POewRfJCXEHwL3uH7A0oj+DSsLGi6yg3tMoQcQnjez9v/aAc9+prACT5ZC
u+ENZyThVApb31JWBU/nNSMnAkEzTQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFPF0
bdm4HmJvNi2zakliiTbW5oXMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjY5QUNFNjhCNEUxMUYwQUI1QkE0RUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBAaa0sADBACa0sowDAME
AprSzAMEAJrS1DAMAwQBmtLWAwQCmtLYAwQAmtLdAwQAmtLfAwQAmtLqMA0GCSqG
SIb3DQEBCwUAA4IBAQA7gKZiiuW9/0woLLogbmySVSe4JPI82YAuxIOhnzeWODF2
kz37X5qwb00TrEm7t2Q7udreTKdhbT01N1LFBgFUzpnPvabVNzHiPD7m7ce8IF9G
h36GNujg30mcxkiU8CjbDd952hg+YTNY/y0++SCAHgS37BMStsc9fLEecPmnV4DU
zY3lg0vf1kvcvTi8S/Mw1ZyKV6tKEnkVpzVULB6cu+h6f0bbcpME2nK0MFikiEWn
TRBe+nVr7VNEFtbldAgwrEzG9FkKqAbcRaisAYD+R8b3wZV8KSYftaG3lBQiYha/
NxvQyAKeqOTi9WIjcGpCwai8wCoz+CtuETKoPudP
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:55 2025 by rpki-client