Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D18FCF69D4B11F08BB3309FDAE4EC9C.roa
File: 2D18FCF69D4B11F08BB3309FDAE4EC9C.roa (raw, json)
Hash identifier: KNjR+eKcNIKXKzcENrdut5tQ7a/UP1NNIS7fYo19T0g=
Subject key identifier: 78:8A:5A:44:68:51:B3:41:D3:E3:3D:1A:96:65:6F:F0:16:FB:73:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A14F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D18FCF69D4B11F08BB3309FDAE4EC9C.roa
Signing time: Mon 29 Sep 2025 15:44:26 +0000
ROA not before: Mon 29 Sep 2025 15:44:21 +0000
ROA not after: Fri 31 Oct 2025 15:44:21 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106831 (0x1a14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 15:44:21 2025 GMT
Not After : Oct 31 15:44:21 2025 GMT
Subject: CN=68daa959-b087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:18:26:c9:76:b2:54:32:19:63:76:e1:04:
02:8e:24:a2:b5:38:f4:4a:36:9e:32:e7:7a:c8:50:
b9:bb:5e:9d:26:33:e9:66:d4:4c:4d:05:9d:36:c7:
16:c3:98:da:af:f6:f5:d0:76:9a:09:1a:e0:fd:9f:
47:ea:8f:63:a8:e7:94:63:26:2c:c2:3b:df:61:5b:
c5:2e:ad:84:5e:b4:e0:e2:2d:0e:37:0f:ab:cb:b6:
06:64:d3:9d:0f:ae:ec:68:8f:b5:1c:a8:8a:c2:8a:
d5:f3:28:0f:bf:dd:8a:f8:85:7b:ce:e3:82:95:4d:
6b:fc:49:c2:02:20:a7:02:fa:d2:cf:69:72:19:cf:
a1:0b:c7:fd:c9:f6:7a:2b:61:c3:74:3f:ce:2f:46:
9c:b1:d7:38:c9:34:84:7f:ec:9e:ea:2e:e2:a6:1d:
06:42:a1:33:b0:df:28:95:25:26:03:19:3d:3e:02:
a5:c3:ea:83:1f:30:af:36:be:0e:35:4f:34:88:9a:
3b:a1:72:6b:7c:7b:bf:aa:36:08:5f:66:df:75:0d:
2a:72:f8:12:9e:27:01:00:10:2c:0e:c2:e4:43:be:
f7:39:d1:68:b7:43:52:71:59:fd:fd:5f:5c:10:b5:
81:62:62:2a:62:1e:30:61:d7:4f:12:ec:f4:69:85:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8A:5A:44:68:51:B3:41:D3:E3:3D:1A:96:65:6F:F0:16:FB:73:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D18FCF69D4B11F08BB3309FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
154.195.116.0-154.195.118.255
154.195.152.0-154.195.167.255
Signature Algorithm: sha256WithRSAEncryption
0b:9d:aa:5f:e0:b7:d4:00:6e:de:c4:c6:8c:69:36:dd:03:65:
e4:5e:4f:99:b7:a6:9e:58:ca:dc:fe:d3:b7:d1:c6:a2:b5:fc:
19:85:66:67:71:41:ec:c4:a6:70:c3:4b:a6:1f:a5:cc:59:81:
bd:cd:dd:59:40:e1:e2:c8:fc:37:e0:57:3b:57:fe:b1:da:e9:
e7:c5:a3:ba:a7:ec:65:ff:fc:75:d6:db:93:a6:4b:13:0a:32:
b9:34:54:19:b4:8d:4b:21:50:16:17:e2:04:a8:07:4a:df:9f:
aa:df:ba:e3:76:c5:71:46:b3:b0:34:95:ba:01:c9:0c:5d:09:
70:37:3d:e1:26:e8:b4:dc:8a:49:9e:a2:7a:78:4c:e7:a2:3e:
03:fe:31:bb:ae:11:8d:87:07:32:93:2b:a8:be:f3:ab:1f:8c:
3d:d4:91:9f:99:7b:c9:0c:d4:2d:21:23:b0:4c:e7:5f:94:e2:
79:31:c3:6d:ec:a9:0e:ed:73:f3:26:d4:08:49:6b:e6:ee:b2:
2e:87:21:0f:04:21:95:44:73:65:5a:ec:9e:14:ca:93:ed:10:
32:e5:46:b6:41:2a:9c:64:60:29:d5:66:1c:7b:5a:3d:86:c7:
80:d3:8e:c6:f4:ab:49:ec:39:8b:65:69:a1:ae:cc:1f:1f:7c:
7e:ab:f3:55
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAaFPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MTU0NDIxWhcNMjUxMDMxMTU0NDIxWjAYMRYw
FAYDVQQDEw02OGRhYTk1OS1iMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApKkYJsl2slQyGWN24QQCjiSitTj0SjaeMud6yFC5u16dJjPpZtRMTQWd
NscWw5jar/b10HaaCRrg/Z9H6o9jqOeUYyYswjvfYVvFLq2EXrTg4i0ONw+ry7YG
ZNOdD67saI+1HKiKworV8ygPv92K+IV7zuOClU1r/EnCAiCnAvrSz2lyGc+hC8f9
yfZ6K2HDdD/OL0acsdc4yTSEf+ye6i7iph0GQqEzsN8olSUmAxk9PgKlw+qDHzCv
Nr4ONU80iJo7oXJrfHu/qjYIX2bfdQ0qcvgSnicBABAsDsLkQ773OdFot0NScVn9
/V9cELWBYmIqYh4wYddPEuz0aYWt9wIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFHiK
WkRoUbNB0+M9GpZlb/AW+3MtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRDE4RkNGNjlENEIxMUYwOEJCMzMwOUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAmsJSMAwDBAKaw3QDBACa
w3YwDAMEA5rDmAMEA5rDoDANBgkqhkiG9w0BAQsFAAOCAQEAC52qX+C31ABu3sTG
jGk23QNl5F5PmbemnljK3P7Tt9HGorX8GYVmZ3FB7MSmcMNLph+lzFmBvc3dWUDh
4sj8N+BXO1f+sdrp58WjuqfsZf/8ddbbk6ZLEwoyuTRUGbSNSyFQFhfiBKgHSt+f
qt+643bFcUazsDSVugHJDF0JcDc94SbotNyKSZ6ienhM56I+A/4xu64RjYcHMpMr
qL7zqx+MPdSRn5l7yQzULSEjsEznX5TieTHDbeypDu1z8ybUCElr5u6yLochDwQh
lURzZVrsnhTKk+0QMuVGtkEqnGRgKdVmHHtaPYbHgNOOxvSrSew5i2Vpoa7MHx98
fqvzVQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:48 2025 by rpki-client