Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0AF7DB89D5311F090984AD3DAE4EC9C.roa
File: A0AF7DB89D5311F090984AD3DAE4EC9C.roa (raw, json)
Hash identifier: 7PEbe6IukHqZNQnwrhjWibpsoQDNk+f96WOYYcJDskE=
Subject key identifier: 93:CB:19:54:97:E6:96:03:C5:3D:8A:B5:18:F7:47:4C:00:FF:0D:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A15F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0AF7DB89D5311F090984AD3DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 16:44:56 +0000
ROA not before: Mon 29 Sep 2025 16:44:50 +0000
ROA not after: Fri 31 Oct 2025 16:44:50 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
154.195.1.0/24 maxlen: 24
154.195.100.0/24 maxlen: 24
154.195.126.0/24 maxlen: 24
154.196.16.0/24 maxlen: 24
154.196.17.0/24 maxlen: 24
154.196.19.0/24 maxlen: 24
154.196.47.0/24 maxlen: 24
154.196.48.0/24 maxlen: 24
154.196.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106847 (0x1a15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 16:44:50 2025 GMT
Not After : Oct 31 16:44:50 2025 GMT
Subject: CN=68dab787-778d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:06:08:c8:6c:c3:b7:4d:c7:ba:46:5c:b7:
1e:ef:16:6e:50:d3:35:88:cc:ea:01:45:b6:37:9c:
2a:39:09:e5:87:55:c7:de:d4:c8:96:d7:cd:9c:6d:
2d:73:70:d4:90:79:d0:ae:b9:4c:98:7c:15:1e:7b:
1d:c4:72:31:b9:05:df:f7:aa:ed:f7:af:69:8e:b8:
55:b1:5f:2c:91:2b:67:09:f1:55:49:7c:d1:ec:65:
30:97:f8:a1:91:42:6d:d8:c7:79:e1:2a:de:cc:36:
90:01:66:61:e5:f9:08:bb:ca:ce:b3:f3:0a:cd:c6:
ab:06:6d:dc:53:fe:7a:6a:7b:33:39:fa:8c:ba:0d:
12:b4:ec:45:db:eb:1a:bd:e0:53:64:88:de:88:6c:
4b:8d:71:d2:41:87:ca:7b:04:c8:9d:24:bd:21:dd:
e2:56:76:88:9b:a0:1e:59:3e:13:e4:b1:bb:e0:94:
2c:78:dd:23:62:31:22:32:70:ca:ba:dd:af:19:ac:
5c:4b:1e:00:22:c5:79:01:3b:27:34:0c:db:5c:09:
ba:60:60:f1:0d:6a:6a:04:60:70:e5:38:5c:51:f8:
ee:eb:f4:b0:4e:7f:09:4e:07:f9:0a:7c:ad:e7:e5:
25:63:f5:88:4b:78:84:c1:19:fb:34:f4:cf:f5:19:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:19:54:97:E6:96:03:C5:3D:8A:B5:18:F7:47:4C:00:FF:0D:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0AF7DB89D5311F090984AD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
154.194.7.0/24
154.194.38.0/24
154.194.70.0/23
154.194.86.0-154.194.88.255
154.194.90.0/23
154.195.0.0/23
154.195.100.0/24
154.195.126.0/24
154.196.16.0/23
154.196.19.0/24
154.196.47.0-154.196.49.255
Signature Algorithm: sha256WithRSAEncryption
69:73:77:65:1d:cb:78:90:dd:e1:f7:2d:1f:94:c6:52:52:fd:
09:df:22:93:df:f0:4a:8e:61:8f:d7:ac:de:96:51:4b:74:1c:
27:d5:1c:5a:bc:0c:90:87:46:f5:a5:45:3e:62:6e:6b:1d:79:
3f:f2:6f:26:7d:78:8f:a5:bc:36:0d:c9:77:35:44:6d:17:3b:
0a:11:46:07:34:81:2b:12:b4:eb:22:e5:85:1d:92:d7:d7:af:
14:91:b1:61:3a:bb:b8:f7:c4:92:9a:a5:f9:79:02:3c:c1:27:
ea:0e:8f:5d:a4:3f:d4:03:7c:38:c6:a7:8d:4b:59:b6:64:d8:
3e:10:04:c2:2e:fc:bc:4b:1f:13:5c:13:6c:fe:03:bc:0e:77:
8a:bd:6b:90:39:da:2f:d1:89:65:63:a9:81:09:14:b1:37:66:
94:3f:be:ee:1c:24:75:37:2d:25:75:0a:4a:4a:8a:9b:52:8f:
1e:01:4b:d6:49:06:2f:32:5a:01:a3:33:3d:14:46:c0:fe:c9:
32:30:e2:ff:79:3c:a3:67:05:73:2e:6d:51:ec:c6:6e:d4:0d:
c1:6b:8c:4b:18:2a:1f:dd:f7:4a:e7:92:15:50:06:bb:d9:6d:
c9:e0:eb:a5:dd:d3:10:ad:22:3d:fc:9c:a7:50:61:90:09:96:
99:16:a2:36
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIDAaFfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTI5MTY0NDUwWhcNMjUxMDMxMTY0NDUwWjAYMRYw
FAYDVQQDEw02OGRhYjc4Ny03NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6NcGCMhsw7dNx7pGXLce7xZuUNM1iMzqAUW2N5wqOQnlh1XH3tTIltfN
nG0tc3DUkHnQrrlMmHwVHnsdxHIxuQXf96rt969pjrhVsV8skStnCfFVSXzR7GUw
l/ihkUJt2Md54SrezDaQAWZh5fkIu8rOs/MKzcarBm3cU/56anszOfqMug0StOxF
2+saveBTZIjeiGxLjXHSQYfKewTInSS9Id3iVnaIm6AeWT4T5LG74JQseN0jYjEi
MnDKut2vGaxcSx4AIsV5ATsnNAzbXAm6YGDxDWpqBGBw5ThcUfju6/SwTn8JTgf5
Cnyt5+UlY/WIS3iEwRn7NPTP9Rn8LQIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFJPL
GVSX5pYDxT2KtRj3R0wA/w2RMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMEFGN0RCODlENTMxMUYwOTA5ODRBRDNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAmsIEAwQAmsIHAwQAmsIm
AwQBmsJGMAwDBAGawlYDBACawlgDBAGawloDBAGawwADBACaw2QDBACaw34DBAGa
xBADBACaxBMwDAMEAJrELwMEAZrEMDANBgkqhkiG9w0BAQsFAAOCAQEAaXN3ZR3L
eJDd4fctH5TGUlL9Cd8ik9/wSo5hj9es3pZRS3QcJ9UcWrwMkIdG9aVFPmJuax15
P/JvJn14j6W8Ng3JdzVEbRc7ChFGBzSBKxK06yLlhR2S19evFJGxYTq7uPfEkpql
+XkCPMEn6g6PXaQ/1AN8OManjUtZtmTYPhAEwi78vEsfE1wTbP4DvA53ir1rkDna
L9GJZWOpgQkUsTdmlD++7hwkdTctJXUKSkqKm1KPHgFL1kkGLzJaAaMzPRRGwP7J
MjDi/3k8o2cFcy5tUezGbtQNwWuMSxgqH933SueSFVAGu9ltyeDrpd3TEK0iPfyc
p1BhkAmWmRaiNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:34 2025 by rpki-client