Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/145F20BCB4F411F0AA379AADDAE4EC9C.roa
File: 145F20BCB4F411F0AA379AADDAE4EC9C.roa (raw, json)
Hash identifier: NjIbY75ZrbRbVVCVk7x+sB2XlnU2U7NTNm6nAfgM7kI=
Subject key identifier: 0F:5B:77:BF:19:A9:4B:01:FF:C4:62:F5:91:AE:31:EE:11:56:39:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A68C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/145F20BCB4F411F0AA379AADDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 18:21:26 +0000
ROA not before: Wed 29 Oct 2025 18:21:20 +0000
ROA not after: Sat 03 Jan 2026 18:21:20 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108172 (0x1a68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 18:21:20 2025 GMT
Not After : Jan 3 18:21:20 2026 GMT
Subject: CN=69025b26-ab83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:f1:a3:b7:d5:38:6f:93:3a:b9:d5:fa:b9:
ba:ee:bc:45:a0:c3:b0:89:4f:c2:31:46:d9:a8:cc:
e2:8c:75:e9:33:ed:7b:a2:e6:01:ce:dd:4a:84:43:
8c:0c:90:c9:ad:81:8e:88:d9:b4:17:70:48:6e:ad:
b2:3f:34:8e:01:e2:79:3a:27:d7:d7:d2:6c:2f:3b:
54:e6:1a:5c:b1:ac:58:a6:3e:72:c4:ae:dd:7e:5a:
d3:43:11:0e:25:e8:80:a8:45:3f:69:25:d1:aa:95:
15:5b:6f:a8:b1:6b:7e:4f:2e:ea:3b:a4:b4:6f:7e:
97:9f:2b:5c:57:7c:2f:a0:8d:01:2c:15:95:c8:f2:
cf:6f:bb:f1:bc:62:77:7d:8b:40:ec:46:15:05:e5:
94:f6:76:91:5e:00:b7:dd:0f:99:03:db:c7:13:85:
43:eb:ab:18:55:69:d9:15:8b:3d:d2:a4:54:63:dd:
f5:64:b7:0c:53:99:8a:a7:ad:07:5c:63:07:58:eb:
66:27:f9:cc:30:79:a7:3f:25:95:25:0c:ca:28:a1:
cc:fb:67:0e:63:11:61:76:1b:bc:a0:90:ba:69:13:
52:d3:aa:bc:a4:f4:58:64:5b:a2:0a:29:7a:15:50:
75:64:f0:58:90:9e:4a:56:b5:4a:e0:d5:bd:a0:37:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:77:BF:19:A9:4B:01:FF:C4:62:F5:91:AE:31:EE:11:56:39:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/145F20BCB4F411F0AA379AADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.86.0/23
154.94.100.0/24
154.94.116.0/24
154.94.123.0/24
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
69:dc:48:10:dc:a9:ae:72:c0:a1:70:92:3a:c6:7c:9a:e3:f7:
1e:b8:9a:3e:5a:71:d1:ae:97:00:5c:11:70:a9:d1:f5:0f:d5:
68:b0:68:76:da:5d:18:14:fc:6d:5d:8d:1c:8a:58:9f:b0:7e:
8d:0a:bf:40:4b:1f:0f:8e:3d:7f:a1:df:69:ad:a8:de:a6:e1:
14:45:fd:64:c5:b0:0f:df:d5:6c:56:ee:0b:2f:36:2f:21:e7:
7e:1c:f9:26:cb:b1:8c:a4:b8:43:cb:7a:7d:65:92:0c:36:76:
a4:bd:20:a3:c6:fd:8b:8d:a8:37:d5:1e:75:4f:c8:2a:a2:72:
5b:8c:d5:c4:13:93:54:2e:68:66:c3:45:5b:ff:a6:b4:25:fc:
d0:ee:d0:0e:e0:ae:c2:52:8e:62:17:c9:43:2e:6c:bd:18:79:
cd:33:1e:19:79:53:90:c2:ad:1c:24:b4:c8:da:c8:2f:f7:3e:
be:57:14:63:bd:64:fc:b8:df:55:db:29:1f:b1:60:79:99:4a:
44:9b:9e:8c:52:5b:80:b1:23:8b:69:2f:ff:4d:20:f4:eb:ae:
fe:5e:6d:09:56:3b:d4:72:2a:26:d5:59:7f:60:8e:f2:2f:b2:
51:09:ea:b2:aa:93:fd:5f:c5:3d:d1:f7:17:91:1c:b0:9f:89:
2c:19:7b:dd
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIDAaaMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTgyMTIwWhcNMjYwMTAzMTgyMTIwWjAYMRYw
FAYDVQQDEw02OTAyNWIyNi1hYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxZnxo7fVOG+TOrnV+rm67rxFoMOwiU/CMUbZqMzijHXpM+17ouYBzt1K
hEOMDJDJrYGOiNm0F3BIbq2yPzSOAeJ5OifX19JsLztU5hpcsaxYpj5yxK7dflrT
QxEOJeiAqEU/aSXRqpUVW2+osWt+Ty7qO6S0b36XnytcV3wvoI0BLBWVyPLPb7vx
vGJ3fYtA7EYVBeWU9naRXgC33Q+ZA9vHE4VD66sYVWnZFYs90qRUY931ZLcMU5mK
p60HXGMHWOtmJ/nMMHmnPyWVJQzKKKHM+2cOYxFhdhu8oJC6aRNS06q8pPRYZFui
Cil6FVB1ZPBYkJ5KVrVK4NW9oDcc/wIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFA9b
d78ZqUsB/8Ri9ZGuMe4RVjnrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNDVGMjBCQ0I0RjQxMUYwQUEzNzlBQUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBml5CAwQBml5WAwQAml5k
AwQAml50AwQAml57AwQAml59MA0GCSqGSIb3DQEBCwUAA4IBAQBp3EgQ3KmucsCh
cJI6xnya4/ceuJo+WnHRrpcAXBFwqdH1D9VosGh22l0YFPxtXY0cilifsH6NCr9A
Sx8Pjj1/od9prajepuEURf1kxbAP39VsVu4LLzYvIed+HPkmy7GMpLhDy3p9ZZIM
NnakvSCjxv2Ljag31R51T8gqonJbjNXEE5NULmhmw0Vb/6a0JfzQ7tAO4K7CUo5i
F8lDLmy9GHnNMx4ZeVOQwq0cJLTI2sgv9z6+VxRjvWT8uN9V2ykfsWB5mUpEm56M
UluAsSOLaS//TSD0667+Xm0JVjvUciom1Vl/YI7yL7JRCeqyqpP9X8U90fcXkRyw
n4ksGXvd
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:33 2025 by rpki-client