Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7DA52D6B8A211F0B42B39DADAE4EC9C.roa
File: C7DA52D6B8A211F0B42B39DADAE4EC9C.roa (raw, json)
Hash identifier: YOiUXmMfrq7vd00RgnJ+PGDPuWD00brrjpe4iS9zAeA=
Subject key identifier: 1B:3F:E1:31:B4:BB:C9:E8:73:80:A0:1F:7C:2B:7E:7F:8F:06:12:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A726
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7DA52D6B8A211F0B42B39DADAE4EC9C.roa
Signing time: Mon 03 Nov 2025 10:49:33 +0000
ROA not before: Mon 03 Nov 2025 10:49:28 +0000
ROA not after: Wed 10 Dec 2025 10:49:28 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108326 (0x1a726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 10:49:28 2025 GMT
Not After : Dec 10 10:49:28 2025 GMT
Subject: CN=690888bd-c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:73:72:a5:03:35:04:61:5d:dc:51:cc:0e:
6d:5b:56:09:52:fa:ac:44:d8:53:b0:e7:0b:7e:33:
cf:8b:20:fc:de:fb:99:0d:71:94:de:ba:43:45:9d:
16:a2:e3:a7:57:3d:82:57:ae:98:4e:62:f2:97:6f:
a4:81:83:49:72:82:04:f2:33:83:22:dc:92:ed:94:
d2:44:3c:65:c8:f4:f9:91:53:0d:80:b3:7d:47:df:
52:7b:d9:7e:57:1c:db:70:04:19:0e:54:a4:25:3e:
0e:98:4b:5c:19:a0:c5:8e:25:33:74:8a:1e:01:57:
40:7b:74:31:2d:1d:97:24:7c:88:67:b0:cb:d0:f9:
ec:58:b0:da:ee:63:63:fc:f9:5f:b3:77:76:c4:9b:
09:fe:e5:25:ce:ee:b6:ea:c7:86:8d:62:59:c1:95:
06:07:17:99:cc:a4:8a:0c:18:4b:23:02:fc:50:00:
e0:61:27:f5:a4:61:9f:0e:f1:c1:78:d6:98:a8:13:
df:ef:98:89:9b:6e:49:83:ca:55:93:0f:9b:72:13:
3b:e8:93:a2:15:20:dc:8c:e7:57:84:13:c2:e6:a9:
e1:14:a0:b1:bb:ee:0f:42:45:65:62:25:80:cb:f8:
8e:3a:88:42:2d:6c:7e:ba:ad:67:39:74:6c:5a:e0:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3F:E1:31:B4:BB:C9:E8:73:80:A0:1F:7C:2B:7E:7F:8F:06:12:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7DA52D6B8A211F0B42B39DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
28:ea:0d:96:e6:4b:de:57:70:00:24:12:74:92:f2:69:69:f8:
a2:d8:24:fb:64:53:77:ba:53:0e:0b:81:63:83:75:6d:e6:58:
4a:c8:1e:67:75:9d:6d:50:25:81:d1:5a:10:40:c5:c7:71:a9:
1f:e9:04:19:ac:b1:b1:1c:48:b9:d6:6d:9d:a8:b4:b3:11:4d:
b0:c1:30:8f:d3:b9:e7:1a:f5:33:de:0f:a2:e0:73:12:40:c0:
8e:cc:42:61:6b:5b:eb:4b:86:5c:9c:80:63:c9:d2:d3:e1:12:
f2:c9:a2:a9:91:ed:14:27:b4:f0:b0:de:6d:c9:ed:02:26:38:
2c:23:23:c3:a8:c3:13:23:96:0d:0d:d9:1f:fe:5f:74:7c:06:
55:54:25:15:28:b0:59:0a:97:8a:4d:19:27:a3:c3:75:4b:18:
5d:c5:bd:59:b2:3f:f9:69:20:26:b1:36:af:95:f3:a4:5d:5c:
5a:ea:2c:c8:c0:8e:f6:87:82:1c:27:5d:a4:d8:fc:43:67:ec:
6c:4b:c1:11:8c:4b:95:fc:a2:22:2c:20:8f:38:e9:14:2c:c0:
40:46:e2:5f:91:f8:0d:b9:0f:e9:4a:fc:84:55:51:03:11:92:
f8:99:ca:2d:39:96:78:ef:ea:e6:3b:28:57:0c:8a:da:c6:ee:
f7:05:5c:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAacmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTAzMTA0OTI4WhcNMjUxMjEwMTA0OTI4WjAYMRYw
FAYDVQQDEw02OTA4ODhiZC1jMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsXxzcqUDNQRhXdxRzA5tW1YJUvqsRNhTsOcLfjPPiyD83vuZDXGU3rpD
RZ0WouOnVz2CV66YTmLyl2+kgYNJcoIE8jODItyS7ZTSRDxlyPT5kVMNgLN9R99S
e9l+VxzbcAQZDlSkJT4OmEtcGaDFjiUzdIoeAVdAe3QxLR2XJHyIZ7DL0PnsWLDa
7mNj/Plfs3d2xJsJ/uUlzu626seGjWJZwZUGBxeZzKSKDBhLIwL8UADgYSf1pGGf
DvHBeNaYqBPf75iJm25Jg8pVkw+bchM76JOiFSDcjOdXhBPC5qnhFKCxu+4PQkVl
YiWAy/iOOohCLWx+uq1nOXRsWuBNIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBs/
4TG0u8noc4CgH3wrfn+PBhJzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DN0RBNTJENkI4QTIxMUYwQjQyQjM5REFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQAo6g2W5kveV3AAJBJ0kvJpafii2CT7ZFN3ulMOC4Fjg3Vt5lhKyB5n
dZ1tUCWB0VoQQMXHcakf6QQZrLGxHEi51m2dqLSzEU2wwTCP07nnGvUz3g+i4HMS
QMCOzEJha1vrS4ZcnIBjydLT4RLyyaKpke0UJ7TwsN5tye0CJjgsIyPDqMMTI5YN
Ddkf/l90fAZVVCUVKLBZCpeKTRkno8N1Sxhdxb1Zsj/5aSAmsTavlfOkXVxa6izI
wI72h4IcJ12k2PxDZ+xsS8ERjEuV/KIiLCCPOOkULMBARuJfkfgNuQ/pSvyEVVED
EZL4mcotOZZ47+rmOyhXDIraxu73BVxi
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:08 2025 by rpki-client