Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BACB40C76C711F0BD1D3986DAE4EC9C.roa
File: 2BACB40C76C711F0BD1D3986DAE4EC9C.roa (raw, json)
Hash identifier: 06r89F8QMP0ApM7rlZTV8VhGnbzPrGLSxzcSYOshlmA=
Subject key identifier: EF:26:6C:A1:26:51:96:3F:0E:11:5D:50:E8:8D:CE:CA:AF:C3:55:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019155
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BACB40C76C711F0BD1D3986DAE4EC9C.roa
Signing time: Mon 11 Aug 2025 15:23:46 +0000
ROA not before: Mon 11 Aug 2025 15:23:40 +0000
ROA not after: Tue 16 Sep 2025 15:23:40 +0000
asID: 22773
IP address blocks: 154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
154.90.22.0/24 maxlen: 24
154.90.23.0/24 maxlen: 24
154.90.24.0/24 maxlen: 24
154.90.25.0/24 maxlen: 24
154.90.26.0/24 maxlen: 24
154.90.27.0/24 maxlen: 24
154.90.132.0/24 maxlen: 24
154.90.141.0/24 maxlen: 24
154.90.144.0/24 maxlen: 24
154.90.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102741 (0x19155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 15:23:40 2025 GMT
Not After : Sep 16 15:23:40 2025 GMT
Subject: CN=689a0b01-dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:44:b2:01:0b:cb:eb:46:fe:07:0a:77:89:
87:fc:a9:a4:05:65:aa:29:56:c7:d8:a9:02:f3:ae:
73:0b:61:84:f0:e9:ef:09:b0:4b:42:4d:ac:fe:f7:
5c:7b:67:50:39:05:58:7b:ae:b7:1d:72:11:3f:a4:
65:70:1d:c7:18:e6:b4:23:72:e1:0b:fa:c1:df:aa:
f0:ce:78:f7:37:34:c3:cb:ff:90:51:1a:01:07:a7:
53:51:57:fe:71:88:f9:a3:52:ff:ad:62:f0:30:81:
7f:41:f2:e9:6f:47:00:53:36:33:0b:a5:15:09:5b:
da:8f:b0:0c:5b:ee:73:cf:cb:cf:d3:d7:b4:47:60:
e4:38:80:a5:6a:94:28:96:fe:da:e6:97:5e:db:ae:
20:af:a8:b5:48:c1:a7:df:27:68:a0:46:88:2e:b0:
59:6e:60:cf:52:62:ef:fb:a0:50:4c:53:54:d7:79:
69:96:65:bb:ba:74:ab:b0:94:b0:9c:41:cc:e1:cd:
3e:29:e5:5c:9a:4d:8b:20:c7:94:24:a2:14:40:8e:
2a:f0:0f:26:6a:0f:87:4c:1d:dd:a9:c3:10:fc:fc:
35:94:84:97:c4:58:82:ad:18:08:0e:72:dc:88:0d:
91:9c:85:ea:7e:e6:c6:d1:45:4b:d9:df:ae:1c:b4:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:6C:A1:26:51:96:3F:0E:11:5D:50:E8:8D:CE:CA:AF:C3:55:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BACB40C76C711F0BD1D3986DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.116.0/22
154.90.2.0-154.90.7.255
154.90.22.0-154.90.27.255
154.90.132.0/24
154.90.141.0/24
154.90.144.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e6:e5:40:70:f6:59:26:e0:dd:83:bc:1b:6a:35:c7:38:d6:
2a:8a:76:79:71:2f:7f:07:c2:5b:15:b8:8c:35:38:00:90:4c:
f3:54:f0:4f:74:e9:ca:d7:7c:a8:cc:8c:d5:e5:6c:7d:c6:df:
54:d2:c6:c5:1f:53:21:57:c8:61:95:3b:40:a2:8b:fa:6d:83:
db:48:24:c3:c7:6a:23:44:42:72:b8:d9:a4:74:ab:a8:b8:ef:
b4:d7:67:57:b8:88:61:4d:72:b8:fd:d9:7d:c4:90:6b:62:77:
2d:c8:87:4c:89:59:10:23:07:82:18:8b:44:fe:58:46:d7:63:
12:38:94:40:0a:08:a8:e2:05:ae:4a:f9:85:92:a0:79:1f:d7:
53:87:08:60:1b:17:a8:ff:51:67:02:64:bf:78:58:a0:0d:60:
69:b2:3b:8c:73:df:64:b7:d9:fd:7e:fa:33:76:f6:ee:62:98:
1b:3e:fe:23:37:d6:45:98:be:63:10:af:95:64:c0:47:79:4a:
ac:2c:1b:98:61:47:36:d6:51:8f:ac:76:ea:48:9f:a3:4f:21:
f3:49:00:6c:61:35:69:db:15:16:c5:f0:54:7f:85:84:e5:b0:
a7:e2:74:54:09:8f:17:4e:eb:fe:9d:4b:5d:62:d6:16:1f:6e:
45:38:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:19 2025 by rpki-client