Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F2FD3EAF1B11F085694BCFDAE4EC9C.roa
File: 14F2FD3EAF1B11F085694BCFDAE4EC9C.roa (raw, json)
Hash identifier: vzucJxcwVKChYevvq6ox9/F9nFEzqPHnXjJJNcRFeDA=
Subject key identifier: 60:AC:CD:8E:A3:76:D5:30:86:AE:8B:20:26:11:56:49:51:EA:CA:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A499
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F2FD3EAF1B11F085694BCFDAE4EC9C.roa
Signing time: Wed 22 Oct 2025 07:45:30 +0000
ROA not before: Wed 22 Oct 2025 07:45:23 +0000
ROA not after: Sun 25 Jan 2026 07:45:23 +0000
asID: 140570
IP address blocks: 154.91.5.0/24 maxlen: 24
154.91.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107673 (0x1a499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 07:45:23 2025 GMT
Not After : Jan 25 07:45:23 2026 GMT
Subject: CN=68f88b9a-a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:6d:2b:5c:41:e7:a3:54:88:72:75:e1:90:
71:ee:0f:81:c9:ad:c4:13:7e:31:c8:00:ad:e2:96:
ca:de:fc:31:cc:83:28:29:34:ae:48:be:58:1e:7f:
4b:a6:95:24:f1:10:34:83:2c:a8:31:6c:4d:16:23:
67:de:d9:56:11:eb:3e:d5:a4:b3:96:78:4f:e5:56:
78:1d:74:e8:7d:00:5a:e2:e3:5d:ff:be:03:ee:80:
5c:04:35:17:e1:a1:8b:ef:4d:02:1f:b6:69:ae:c4:
c4:dc:5f:6e:dd:1f:b6:f9:bc:65:ff:27:c7:0f:95:
e4:1e:83:fd:cd:9f:c5:9a:a4:ec:03:27:00:74:34:
e8:36:26:36:9b:ef:af:03:1b:36:db:af:e5:c4:34:
5e:90:b6:bf:23:0b:4e:ac:68:b4:16:87:65:db:56:
f3:31:6a:80:2b:8c:6a:2e:62:61:01:8b:46:0f:c4:
67:5c:83:32:e5:5f:9e:65:da:91:c5:44:0f:2e:b2:
30:86:f4:70:dd:ed:81:0c:1a:c3:ae:44:03:fd:52:
08:e3:ac:3e:69:a4:c1:1d:39:d3:48:c4:33:d9:d1:
07:50:03:45:93:1e:f5:f6:47:01:62:df:8c:35:a0:
9d:79:e6:44:47:40:f1:5f:61:17:05:ea:7a:20:d2:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:CD:8E:A3:76:D5:30:86:AE:8B:20:26:11:56:49:51:EA:CA:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14F2FD3EAF1B11F085694BCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.5.0/24
154.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4a:d6:2a:39:d7:7b:09:94:6c:f9:a3:39:ed:9d:0b:4e:13:
0a:0f:84:a8:7a:6b:af:bb:42:8b:62:4d:13:9e:79:bb:8d:40:
ab:3b:32:6d:d5:4f:24:6d:b2:c4:8f:29:62:6f:23:94:4f:38:
8d:35:ec:ba:0c:4a:8b:e6:2b:4a:72:33:ea:e7:58:24:12:45:
b0:bb:e7:87:86:51:99:42:45:cf:90:c3:0a:2a:3d:56:17:dd:
d4:79:a5:e0:d4:cf:09:1d:d0:1e:92:b0:e0:6f:74:02:6c:96:
2e:06:75:1b:7f:1d:12:ed:f8:a3:dc:b3:c3:34:2c:7f:cd:d7:
74:3e:f7:b9:60:19:67:5b:66:aa:77:f9:e1:5f:fc:58:d4:29:
fc:31:40:99:37:38:1f:86:8a:75:b1:8e:7e:91:55:cf:94:bd:
77:db:5d:8b:bf:78:44:cb:df:69:24:d2:59:cc:cc:5d:f0:33:
56:dc:31:92:72:ca:db:0a:8f:7a:ff:0c:4d:46:5d:5f:5a:a2:
e2:0e:0e:fe:67:71:a5:8e:4e:9f:f4:7d:d3:a4:f2:a3:ca:3a:
49:a3:e3:82:0d:0e:2f:58:c3:4f:7b:cb:70:61:ce:89:21:c9:
5d:17:24:f3:87:a7:87:ce:01:ec:99:38:91:77:b4:33:92:f3:
87:3a:6e:3d
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAaSZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDIyMDc0NTIzWhcNMjYwMTI1MDc0NTIzWjAYMRYw
FAYDVQQDEw02OGY4OGI5YS1hMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3J9tK1xB56NUiHJ14ZBx7g+Bya3EE34xyACt4pbK3vwxzIMoKTSuSL5Y
Hn9LppUk8RA0gyyoMWxNFiNn3tlWEes+1aSzlnhP5VZ4HXTofQBa4uNd/74D7oBc
BDUX4aGL700CH7ZprsTE3F9u3R+2+bxl/yfHD5XkHoP9zZ/FmqTsAycAdDToNiY2
m++vAxs226/lxDRekLa/IwtOrGi0Fodl21bzMWqAK4xqLmJhAYtGD8RnXIMy5V+e
ZdqRxUQPLrIwhvRw3e2BDBrDrkQD/VII46w+aaTBHTnTSMQz2dEHUANFkx719kcB
Yt+MNaCdeeZER0DxX2EXBep6INLMIwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGCs
zY6jdtUwhq6LICYRVklR6soGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNEYyRkQzRUFGMUIxMUYwODU2OTRCQ0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlsFAwQAmlsHMA0GCSqG
SIb3DQEBCwUAA4IBAQCaStYqOdd7CZRs+aM57Z0LThMKD4Soemuvu0KLYk0Tnnm7
jUCrOzJt1U8kbbLEjylibyOUTziNNey6DEqL5itKcjPq51gkEkWwu+eHhlGZQkXP
kMMKKj1WF93UeaXg1M8JHdAekrDgb3QCbJYuBnUbfx0S7fij3LPDNCx/zdd0Pve5
YBlnW2aqd/nhX/xY1Cn8MUCZNzgfhop1sY5+kVXPlL13212Lv3hEy99pJNJZzMxd
8DNW3DGScsrbCo96/wxNRl1fWqLiDg7+Z3Gljk6f9H3TpPKjyjpJo+OCDQ4vWMNP
e8twYc6JIcldFyTzh6eHzgHsmTiRd7QzkvOHOm49
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:01:17 2025 by rpki-client