Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B292C687E7E11F0B9AA98EADAE4EC9C.roa
File: 2B292C687E7E11F0B9AA98EADAE4EC9C.roa (raw, json)
Hash identifier: MXpEI/FX7H73HIKQWQCZ72SRyyz85Yx7w00Y3KgugvE=
Subject key identifier: A4:64:D4:0B:CB:2D:79:7A:BF:FB:11:A7:B9:97:2D:6E:FE:BF:DC:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01931A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B292C687E7E11F0B9AA98EADAE4EC9C.roa
Signing time: Thu 21 Aug 2025 11:01:21 +0000
ROA not before: Thu 21 Aug 2025 11:01:16 +0000
ROA not after: Thu 25 Sep 2025 11:01:16 +0000
asID: 203020
IP address blocks: 154.90.176.0/21 maxlen: 24
154.94.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103194 (0x1931a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 11:01:16 2025 GMT
Not After : Sep 25 11:01:16 2025 GMT
Subject: CN=68a6fc81-3836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:53:98:12:ef:49:21:f7:c3:4a:e6:d1:ce:
11:1e:02:53:87:25:0f:b9:2b:7f:94:6f:42:e5:f6:
8f:50:70:f6:70:49:12:0c:38:e5:cd:49:65:88:c3:
b7:22:b9:c0:10:ee:14:e8:a9:c7:62:3b:48:c5:a3:
30:15:16:17:6f:72:b4:0c:b1:72:61:ca:a6:e2:df:
5a:69:34:75:48:06:3b:91:0e:7e:1f:75:29:42:c2:
9e:db:d5:98:60:9c:c8:5a:57:ad:d7:a6:2b:05:5b:
15:47:53:55:1b:d5:79:80:3c:9a:a0:74:8a:ec:e5:
b7:c6:d0:f3:87:79:11:76:ba:15:9e:0a:cb:ab:68:
42:6f:ee:0f:5a:15:4f:64:62:7a:49:72:2f:15:4f:
f2:4e:aa:fb:06:c1:db:0d:0c:6c:2c:41:b9:df:df:
cb:57:89:03:0c:51:e7:1c:43:1e:19:79:49:7c:d2:
a3:5a:56:96:eb:16:ac:c6:ce:ae:7d:40:f1:ee:3b:
b9:c7:4c:68:01:f4:fb:a7:3a:25:f1:c8:cc:f8:0f:
6f:74:63:34:71:4e:74:ff:91:dc:9a:a5:47:ca:35:
5f:66:4a:94:81:59:1f:51:cf:2a:28:be:78:b9:ff:
65:d1:7f:fc:62:89:a8:ad:20:a2:61:11:8a:89:f9:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:D4:0B:CB:2D:79:7A:BF:FB:11:A7:B9:97:2D:6E:FE:BF:DC:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B292C687E7E11F0B9AA98EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.176.0/21
154.94.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:ed:95:da:38:d8:f3:40:f5:40:27:e7:54:e9:72:32:9b:c2:
9f:7e:87:52:8a:0b:71:ed:a8:4a:92:32:6c:71:f6:88:ae:d3:
9a:37:4e:25:7b:f2:58:3a:f3:99:27:1a:03:f2:3d:3b:48:23:
0a:56:bb:ba:39:c2:19:e2:e1:d5:ee:1e:eb:a9:66:28:35:d8:
04:4a:99:e8:39:18:54:33:36:49:53:f1:1e:f1:bb:7f:ae:f8:
d2:1b:62:2e:77:51:f1:53:0b:df:5e:52:b7:14:ca:b7:28:c9:
50:1c:9d:bf:61:f5:0b:d4:78:10:69:11:27:1d:cc:b8:07:1c:
3e:c4:c5:c4:a1:6f:2d:3b:e7:5f:6d:ed:2c:7a:41:d3:e1:37:
af:b2:1e:bd:ab:cf:42:d2:94:38:8d:78:47:6d:ce:ef:90:09:
6b:a4:a6:6f:73:d9:ef:04:5e:59:9a:84:03:b7:c6:7f:68:0d:
20:ad:eb:85:30:09:9c:57:41:7e:33:b5:a2:b2:a6:72:d9:40:
80:8d:d7:2d:89:40:72:6f:6e:45:33:d8:e9:e6:f9:fd:3a:89:
e4:af:36:98:4b:e2:dd:18:2a:9f:1b:23:89:ab:68:1b:11:97:
57:9c:31:25:8e:7f:47:06:c0:bc:98:fd:a6:50:d3:d8:b9:5e:
a0:51:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:34 2025 by rpki-client