Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1713D11AA5E311F0BEC89ADDDAE4EC9C.roa
File: 1713D11AA5E311F0BEC89ADDDAE4EC9C.roa (raw, json)
Hash identifier: 3CKEW3jLjYrim0sp/uKNuQ5dyJ0PPQiMw1q4awAz8po=
Subject key identifier: 3D:31:A9:09:E9:8D:7D:E3:DD:79:0D:40:B0:18:49:07:56:5E:D6:CB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C50
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1713D11AA5E311F0BEC89ADDDAE4EC9C.roa
Signing time: Fri 10 Oct 2025 14:12:02 +0000
ROA not before: Fri 10 Oct 2025 14:11:57 +0000
ROA not after: Sun 10 Oct 2027 14:11:57 +0000
asID: 397630
IP address blocks: 154.16.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7248 (0x1c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 10 14:11:57 2025 GMT
Not After : Oct 10 14:11:57 2027 GMT
Subject: CN=68e91431-1f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:dc:62:0d:77:e1:6e:35:e0:1d:23:17:40:
88:51:15:77:cc:48:f7:5f:ac:6d:b6:2a:29:98:34:
57:e0:dc:8e:2f:c3:b5:33:9f:8d:ba:47:bc:bd:46:
52:86:d8:f6:36:f6:f6:9e:ae:7b:21:01:90:14:1d:
b1:b9:af:d1:ef:c1:cb:37:8b:5e:f5:2e:44:9e:44:
9e:ac:26:2d:12:d5:9c:25:46:1c:20:d3:99:bf:a0:
1e:49:6b:3e:26:15:4f:a2:c6:c5:30:82:45:10:6d:
19:eb:61:04:71:05:80:cc:7f:f5:ec:f9:6c:2f:27:
1f:50:99:1d:2f:e3:a5:31:e3:62:db:09:35:c2:bc:
ac:55:b3:c7:e6:ff:8e:c6:cf:43:2e:6a:e1:77:4c:
08:1d:c0:c9:a9:13:ae:9c:0d:ea:11:14:86:c0:4f:
84:44:2e:0e:ed:28:2f:f5:ce:1d:75:68:09:ca:5a:
27:a0:98:24:63:db:68:ac:35:c4:84:11:b3:df:67:
a7:c8:39:18:c6:9a:67:65:59:3a:93:07:3f:93:6d:
2c:a6:ff:19:c4:23:03:df:36:37:a9:6f:9e:71:89:
11:ec:ce:e5:b1:fa:31:73:1d:03:ae:10:c8:fb:80:
b9:d5:48:70:de:25:1f:71:d3:bf:0f:ed:43:38:37:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:A9:09:E9:8D:7D:E3:DD:79:0D:40:B0:18:49:07:56:5E:D6:CB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1713D11AA5E311F0BEC89ADDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.246.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0a:6c:e0:aa:0d:eb:c9:c8:86:6c:b9:b6:03:cc:4d:20:69:
92:8d:a2:e2:d0:4e:d9:6c:14:1e:b6:0c:43:24:4d:24:05:c8:
be:b8:39:ca:50:0f:ba:08:64:01:28:c8:c2:b2:a4:4a:cb:f1:
47:52:ed:ae:30:cc:ef:03:90:44:dd:3e:89:61:ee:53:68:77:
89:9b:34:7e:24:6b:01:e8:07:76:93:fa:a3:51:34:aa:80:2c:
20:f9:13:0f:bc:c3:0a:99:11:64:3b:8f:41:9d:f9:88:bd:9e:
86:3f:27:2b:6c:c7:6e:f4:7b:31:02:16:d2:4f:0a:c3:31:db:
92:24:ac:55:48:c3:ed:77:a0:1c:e2:de:24:dd:83:9b:ab:a9:
57:e6:21:28:65:03:7c:bf:86:da:56:6d:38:4f:6f:17:36:60:
f9:06:57:56:98:92:11:81:04:0d:d0:fc:3e:6d:fb:ba:73:36:
1c:06:8e:dd:bc:af:24:ab:a2:c2:74:af:96:fe:a2:fb:df:41:
45:99:44:d1:f8:5d:4a:91:42:9b:ef:99:59:c1:8c:0c:91:0e:
40:ab:b3:d5:69:7e:b1:9f:fe:47:dd:8a:5a:6c:a9:06:07:c9:
98:e8:60:3d:f3:5b:1b:88:4a:40:ea:94:6c:39:67:c8:a2:44:
4e:b4:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:35 2025 by rpki-client