Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD683F4995911F0B562988FDAE4EC9C.roa
File: 2BD683F4995911F0B562988FDAE4EC9C.roa (raw, json)
Hash identifier: G7UEdldnBrRpEvO6zm4a4i7debgxniIiSRzfmABRYVQ=
Subject key identifier: 31:1D:F2:D7:5B:94:B8:0F:45:06:8C:8D:84:36:1D:36:1F:EE:C7:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A086
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD683F4995911F0B562988FDAE4EC9C.roa
Signing time: Wed 24 Sep 2025 15:14:32 +0000
ROA not before: Wed 24 Sep 2025 15:14:26 +0000
ROA not after: Thu 30 Oct 2025 15:14:26 +0000
asID: 401783
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.181.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106630 (0x1a086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 24 15:14:26 2025 GMT
Not After : Oct 30 15:14:26 2025 GMT
Subject: CN=68d40ad8-aca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:12:20:89:d3:51:c6:ee:f8:2e:71:ff:94:
b3:59:fd:ba:15:5a:c7:ea:5c:a3:09:ee:54:1d:83:
6d:ff:0f:f5:00:bb:0f:ca:c8:27:04:72:00:56:29:
c6:e8:6a:bd:7f:fc:71:47:3c:df:8f:8c:f8:a3:7e:
b1:47:a3:3d:e3:76:c9:3f:fa:80:ce:1d:69:aa:13:
dc:9d:3f:65:c4:9a:9d:60:37:a8:a0:2d:d6:3b:11:
fb:cb:f9:ad:08:6f:71:b3:ba:ae:ff:64:89:03:12:
2f:c1:4b:94:ca:29:72:74:85:99:0d:e3:dd:f9:31:
59:fa:24:26:f8:95:3c:53:b9:a2:59:e8:1d:bb:42:
f2:27:b4:86:1f:7e:36:fd:c0:a1:1d:0b:b4:5c:77:
e5:49:f2:93:76:82:2a:07:f0:98:05:b3:2a:ea:c9:
fd:40:36:9d:c4:63:33:a8:a0:cf:87:5d:0d:4f:d7:
0d:f9:2d:a9:cd:06:49:67:bd:41:bc:42:41:5f:6a:
26:ac:2e:b7:bd:6f:05:63:4c:53:54:3c:c4:0b:4d:
1e:c1:d1:40:a1:da:40:fd:16:9e:d2:a4:36:a5:0b:
c8:54:f6:c4:da:74:37:1b:d0:02:9e:26:e7:d6:ef:
8e:9b:34:a0:38:62:08:b3:a4:e6:0f:6f:5b:fd:06:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:F2:D7:5B:94:B8:0F:45:06:8C:8D:84:36:1D:36:1F:EE:C7:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BD683F4995911F0B562988FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.181.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
12:30:36:7b:b8:33:7a:2c:b6:0b:cd:eb:10:5a:be:5d:76:24:
f4:5e:ec:71:ac:5e:c5:81:18:c9:47:c8:fb:91:ed:25:de:8d:
ca:c5:e6:93:30:14:7d:dc:e6:42:c2:8d:fb:17:98:20:2d:de:
c3:a8:3f:13:9d:09:25:33:62:03:81:dd:cc:78:70:62:01:26:
20:74:17:35:fc:d1:a3:61:25:4d:05:57:ff:a6:ab:50:37:21:
c2:0b:cb:1e:25:26:a6:4f:ee:b4:33:7a:50:a2:aa:6a:62:81:
de:8a:1b:98:56:92:96:28:ae:6b:82:d4:4f:9d:ff:2b:88:72:
9c:eb:a9:07:8b:f3:17:8d:3e:1f:bc:3a:6d:5c:13:75:e5:51:
d7:e1:c0:23:b7:ed:c1:a0:9e:de:ea:23:ca:82:ef:70:21:f6:
c3:9f:c6:be:73:e9:42:29:92:0b:b3:e9:73:a9:43:57:b6:a3:
fa:63:63:7b:be:f2:65:b2:1f:70:f8:52:cb:54:49:8d:0e:c0:
cd:0f:2e:2c:05:52:06:6c:6b:cd:b0:55:5f:d3:1b:c1:04:e7:
ed:a2:ff:fd:20:33:8f:a4:e3:82:65:50:87:07:55:9c:ba:33:
cc:d3:70:1c:d8:27:1a:1e:c9:f0:4e:49:0b:a9:2c:8b:25:b6:
e1:76:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:34:15 2025 by rpki-client