Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F144E0B40D11F0AC221387DAE4EC9C.roa
File: 30F144E0B40D11F0AC221387DAE4EC9C.roa (raw, json)
Hash identifier: yG+V5+oWyOaLMOG6GTRYVPwoAfg5rUmko9IxalUOWWc=
Subject key identifier: E7:87:1E:32:9E:74:66:03:4B:F6:58:76:16:E5:72:26:CA:9A:5E:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A609
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F144E0B40D11F0AC221387DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 14:48:40 +0000
ROA not before: Tue 28 Oct 2025 14:48:35 +0000
ROA not after: Mon 15 Dec 2025 14:48:35 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108041 (0x1a609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 14:48:35 2025 GMT
Not After : Dec 15 14:48:35 2025 GMT
Subject: CN=6900d7c8-b3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:18:52:52:1c:26:77:7c:08:c7:76:c5:57:
c4:c4:0b:b9:de:44:0c:f7:1d:01:85:7b:a8:4d:26:
37:90:35:4e:bc:7d:50:47:60:ac:91:12:19:b6:46:
09:96:b6:d5:1f:f0:f3:7c:89:4f:4e:9e:c2:85:62:
65:2c:8a:79:28:57:1d:89:dd:28:b0:bf:54:01:52:
27:51:8e:26:ef:fb:e9:8d:e2:5d:ca:d5:0f:f0:b9:
fa:5b:eb:7e:44:e6:f0:5e:8b:7d:2c:c5:97:9f:b6:
c5:51:7a:d2:07:e6:fb:51:c7:10:4c:85:05:8c:57:
83:09:87:88:76:13:76:51:b1:d8:d5:66:95:bc:9f:
c9:03:f9:af:7d:10:99:ed:90:54:0a:fb:8a:f2:92:
8e:71:18:93:96:52:53:bd:1e:1e:b2:5c:23:73:d3:
8f:36:f7:86:8c:66:7b:0c:84:5a:25:3f:cf:78:cf:
7a:84:b9:86:71:df:5d:07:f2:51:e9:60:90:38:d4:
08:a5:33:47:d2:62:7f:b1:46:b8:f0:b5:5d:aa:67:
12:fb:76:bb:6a:49:7a:35:a2:03:16:56:3e:80:d5:
b4:fa:f8:e8:88:32:8b:ae:8a:27:e4:e2:57:5d:ba:
21:b9:8a:fb:74:13:07:59:11:e7:a1:f2:56:75:68:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:1E:32:9E:74:66:03:4B:F6:58:76:16:E5:72:26:CA:9A:5E:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F144E0B40D11F0AC221387DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/24
154.203.162.0-154.203.170.255
Signature Algorithm: sha256WithRSAEncryption
23:46:2e:81:e4:1b:ee:16:45:41:aa:56:ed:6e:ce:89:d6:e6:
35:84:1a:55:f1:35:f7:84:b7:8f:65:be:30:a3:94:f3:3c:31:
92:99:21:2e:7c:9f:17:0f:bc:84:0c:65:52:ac:f6:b7:5a:1c:
26:8d:72:cd:ec:5a:2c:71:5c:fa:24:67:15:1b:54:9b:62:ba:
61:d0:fc:ca:5c:69:46:dd:60:fd:f5:9f:ef:1d:9f:ca:82:eb:
1b:03:4f:96:0d:45:b2:1e:da:2a:9d:34:b0:e7:e5:c6:9d:78:
67:1c:0c:29:0b:19:b3:bc:df:c9:e5:52:b1:db:3f:00:f0:c1:
14:84:fb:7d:eb:ca:84:85:09:1f:45:22:11:9e:bb:e8:1b:15:
c1:1f:ee:96:ae:90:b9:be:d3:69:2b:6e:e2:e5:5b:cf:30:bd:
ed:06:0a:cc:f5:ad:e1:79:d0:2e:75:9d:07:8f:0b:3b:8c:5d:
27:9c:01:d7:60:c0:3d:75:30:ab:bf:47:ea:d1:9a:07:b1:a8:
6a:30:33:f8:ed:86:67:12:e0:a8:b9:33:10:aa:a1:97:19:39:
69:4e:3d:3c:55:0e:c1:80:86:da:20:b8:40:b9:18:66:c4:d2:
c9:e4:4e:47:83:a7:8a:af:c6:dd:dc:62:bd:c0:f1:11:f5:a4:
a2:95:07:e3
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAaYJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI4MTQ0ODM1WhcNMjUxMjE1MTQ0ODM1WjAYMRYw
FAYDVQQDEw02OTAwZDdjOC1iM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtYsYUlIcJnd8CMd2xVfExAu53kQM9x0BhXuoTSY3kDVOvH1QR2CskRIZ
tkYJlrbVH/DzfIlPTp7ChWJlLIp5KFcdid0osL9UAVInUY4m7/vpjeJdytUP8Ln6
W+t+RObwXot9LMWXn7bFUXrSB+b7UccQTIUFjFeDCYeIdhN2UbHY1WaVvJ/JA/mv
fRCZ7ZBUCvuK8pKOcRiTllJTvR4eslwjc9OPNveGjGZ7DIRaJT/PeM96hLmGcd9d
B/JR6WCQONQIpTNH0mJ/sUa48LVdqmcS+3a7akl6NaIDFlY+gNW0+vjoiDKLroon
5OJXXbohuYr7dBMHWRHnofJWdWhlZwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOeH
HjKedGYDS/ZYdhblcibKml5PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMEYxNDRFMEI0MEQxMUYwQUMyMjEzODdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsugMAwDBAGay6IDBACa
y6owDQYJKoZIhvcNAQELBQADggEBACNGLoHkG+4WRUGqVu1uzonW5jWEGlXxNfeE
t49lvjCjlPM8MZKZIS58nxcPvIQMZVKs9rdaHCaNcs3sWixxXPokZxUbVJtiumHQ
/MpcaUbdYP31n+8dn8qC6xsDT5YNRbIe2iqdNLDn5cadeGccDCkLGbO838nlUrHb
PwDwwRSE+33ryoSFCR9FIhGeu+gbFcEf7paukLm+02krbuLlW88wve0GCsz1reF5
0C51nQePCzuMXSecAddgwD11MKu/R+rRmgexqGowM/jthmcS4Ki5MxCqoZcZOWlO
PTxVDsGAhtoguEC5GGbE0snkTkeDp4qvxt3cYr3A8RH1pKKVB+M=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:26:46 2025 by rpki-client