Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEBD4530B4C711F08672039CDAE4EC9C.roa
File: FEBD4530B4C711F08672039CDAE4EC9C.roa (raw, json)
Hash identifier: g4JWAt0FAoSevmeAHbvwvHvia8N0jEOiphfvcGdsWQ8=
Subject key identifier: FC:3E:16:10:64:F6:7B:06:C4:DA:3A:5D:7E:74:E1:F4:FB:25:5D:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEBD4530B4C711F08672039CDAE4EC9C.roa
Signing time: Wed 29 Oct 2025 13:05:52 +0000
ROA not before: Wed 29 Oct 2025 13:05:44 +0000
ROA not after: Fri 05 Dec 2025 13:05:44 +0000
asID: 36137
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108082 (0x1a632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 13:05:44 2025 GMT
Not After : Dec 5 13:05:44 2025 GMT
Subject: CN=69021130-49ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:8a:17:14:38:48:ec:47:70:f9:e9:7d:c4:
45:0e:b1:5f:1e:ca:80:04:8b:7e:e6:cf:5e:e7:4b:
0f:da:c3:1f:b2:9f:9c:b7:72:49:a3:70:b2:27:71:
a0:e8:69:23:c6:01:6e:9c:ce:32:a5:9d:08:6c:56:
83:14:4b:71:6d:7c:97:bd:ac:c0:77:af:76:d4:83:
92:e9:88:c5:25:87:2a:75:75:6c:13:9c:1c:21:f4:
a0:9c:02:6c:ea:d3:2b:d6:f5:7d:d7:22:e2:f2:31:
f4:e8:b6:54:76:63:de:fc:2e:38:10:b7:11:b9:c7:
4b:bb:65:74:67:0a:8a:5c:4b:05:f3:c1:57:b6:5d:
7c:c6:21:91:63:50:f5:00:94:b1:f7:8f:49:d3:d1:
05:b3:97:db:7e:85:c7:e5:44:1b:fe:b0:4e:e5:9b:
e7:4c:27:d9:3b:32:13:f5:74:40:d6:db:b2:32:4c:
d8:61:41:52:e4:08:fb:2f:79:df:c0:7c:b4:02:20:
4c:bf:1f:31:6b:2e:9e:29:5d:f9:66:39:25:51:ae:
10:02:7b:af:79:d9:87:01:57:f4:b5:e7:a8:ec:ca:
35:85:de:bc:39:33:69:53:0e:a2:75:08:25:b8:30:
3e:ad:a6:2c:f9:71:43:84:d4:ae:08:42:13:f6:b5:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:16:10:64:F6:7B:06:C4:DA:3A:5D:7E:74:E1:F4:FB:25:5D:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEBD4530B4C711F08672039CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
53:a9:2d:e3:c8:2a:2d:ad:86:e4:92:da:ec:29:1b:a7:7d:40:
7d:60:4f:0b:5c:2c:4c:7c:9e:e7:46:68:da:ba:31:14:c7:6c:
21:57:09:35:93:fe:49:3b:ca:26:6c:35:7b:2c:48:f9:f9:57:
c2:d4:c6:5d:86:31:65:0a:de:89:c9:f7:84:0d:14:a1:f9:5a:
16:c8:d2:24:85:c4:ef:4b:51:ee:0b:98:fe:89:2e:44:2e:fe:
14:37:89:e8:c8:95:0c:7c:48:1a:5e:9c:8e:9c:c2:4a:ec:7f:
03:24:c4:ee:47:9f:4c:01:a1:d2:2d:69:f9:e0:38:b0:97:a5:
a4:3d:4a:f9:36:77:87:ef:c5:0f:bc:00:5e:d7:fd:93:a6:86:
72:8f:bc:ad:6c:b9:5c:25:4b:01:1e:bf:b6:86:b5:b9:2b:58:
6a:d4:9d:97:1c:d3:f2:5f:3e:98:fb:9d:9e:e4:92:59:69:42:
bb:c0:75:b3:46:87:a5:fc:63:50:70:65:03:87:79:e8:24:71:
f1:a9:fc:7e:db:15:d8:00:ab:fc:8b:59:a9:cd:c8:30:0d:5b:
b9:4a:69:e7:69:62:2f:1c:38:6e:98:22:14:97:c9:40:43:0d:
c9:55:12:0a:76:cf:49:f9:df:67:f1:55:de:c8:4a:be:e8:c0:
59:63:3d:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaYyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI5MTMwNTQ0WhcNMjUxMjA1MTMwNTQ0WjAYMRYw
FAYDVQQDEw02OTAyMTEzMC00OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxeqKFxQ4SOxHcPnpfcRFDrFfHsqABIt+5s9e50sP2sMfsp+ct3JJo3Cy
J3Gg6GkjxgFunM4ypZ0IbFaDFEtxbXyXvazAd6921IOS6YjFJYcqdXVsE5wcIfSg
nAJs6tMr1vV91yLi8jH06LZUdmPe/C44ELcRucdLu2V0ZwqKXEsF88FXtl18xiGR
Y1D1AJSx949J09EFs5fbfoXH5UQb/rBO5ZvnTCfZOzIT9XRA1tuyMkzYYUFS5Aj7
L3nfwHy0AiBMvx8xay6eKV35ZjklUa4QAnuvedmHAVf0teeo7Mo1hd68OTNpUw6i
dQgluDA+raYs+XFDhNSuCEIT9rVPCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPw+
FhBk9nsGxNo6XX504fT7JV2DMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRUJENDUzMEI0QzcxMUYwODY3MjAzOUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQBTqS3jyCotrYbkktrsKRunfUB9YE8LXCxMfJ7nRmjaujEUx2whVwk1
k/5JO8ombDV7LEj5+VfC1MZdhjFlCt6JyfeEDRSh+VoWyNIkhcTvS1HuC5j+iS5E
Lv4UN4noyJUMfEgaXpyOnMJK7H8DJMTuR59MAaHSLWn54Diwl6WkPUr5NneH78UP
vABe1/2TpoZyj7ytbLlcJUsBHr+2hrW5K1hq1J2XHNPyXz6Y+52e5JJZaUK7wHWz
Roel/GNQcGUDh3noJHHxqfx+2xXYAKv8i1mpzcgwDVu5SmnnaWIvHDhumCIUl8lA
Qw3JVRIKds9J+d9n8VXeyEq+6MBZYz3B
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:05 2025 by rpki-client