Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/17B8B552A68A11F09DE9FD9BDAE4EC9C.roa
File: 17B8B552A68A11F09DE9FD9BDAE4EC9C.roa (raw, json)
Hash identifier: 4s3ChOlagzbsU6Kx1ygCGPF22G2E7UBqSBcVeiNcuv8=
Subject key identifier: B4:17:BE:01:F0:1D:6C:C9:7F:D6:CC:74:9A:BB:15:FC:AB:17:3F:60
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C59
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/17B8B552A68A11F09DE9FD9BDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 10:07:29 +0000
ROA not before: Sat 11 Oct 2025 10:07:24 +0000
ROA not after: Mon 11 Oct 2027 10:07:24 +0000
asID: 205886
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7257 (0x1c59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 11 10:07:24 2025 GMT
Not After : Oct 11 10:07:24 2027 GMT
Subject: CN=68ea2c60-3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:85:c0:ec:c2:df:64:55:c8:4c:9d:3f:38:
17:0a:f3:47:5c:c3:3e:0e:1b:d6:91:5e:b5:a9:93:
cf:8d:d2:a7:56:43:f3:94:da:f9:b5:e4:bb:8e:c1:
ab:ee:0e:d0:f7:87:f2:12:b5:a0:e4:0f:5d:40:55:
e7:57:3b:d7:1e:65:dc:14:0a:a1:c9:2d:f6:86:e6:
d2:09:43:53:3f:70:58:67:71:f0:7d:92:1f:fa:10:
c8:e6:8c:c8:17:0b:bd:44:8b:bb:8d:00:32:37:f7:
59:65:2e:9d:4a:b6:4c:94:90:be:a7:45:f4:e7:a2:
c7:4c:7e:74:14:de:dc:95:cb:1e:ba:fa:d2:72:1e:
80:ee:5c:c2:c1:03:27:28:c1:93:cc:de:67:8b:2b:
cf:7a:ad:d9:7f:87:07:f9:75:59:8d:12:c3:c8:03:
37:b9:a2:1d:02:65:e9:e2:22:72:10:e9:2b:0a:44:
d9:2b:47:8f:09:eb:41:d6:01:f1:5b:1a:31:70:d4:
e5:09:a4:7b:d0:ad:5a:f7:b2:ea:49:fa:e3:bc:63:
b3:0d:10:b1:03:c4:24:3d:f3:d9:66:cd:ac:96:d1:
1f:a2:7c:4f:d4:b0:fe:73:1c:63:53:3d:b6:39:d1:
f6:47:c0:5a:4d:56:f6:57:5a:ac:48:a1:46:63:d2:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:17:BE:01:F0:1D:6C:C9:7F:D6:CC:74:9A:BB:15:FC:AB:17:3F:60
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/17B8B552A68A11F09DE9FD9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2b:91:13:f8:3e:10:93:89:43:b8:d2:17:57:03:a7:00:5d:
dc:45:14:de:18:fb:0a:2c:3c:b9:26:75:4b:84:66:99:e3:78:
14:aa:8d:75:90:f5:62:88:33:b6:20:89:a4:cc:c8:01:69:7d:
dc:bd:51:e9:3b:55:c7:89:df:e6:0d:f8:2d:de:f1:78:80:be:
e9:23:e8:b6:9d:9c:e8:62:04:be:94:20:6b:7e:7d:d2:53:82:
50:38:e7:13:0f:cf:9f:34:b0:c7:8e:bc:d1:26:22:1b:d3:33:
ff:cf:3e:7b:cc:e1:a7:12:c2:5f:47:f7:dd:94:34:bd:97:c4:
30:9d:05:b4:72:ea:ae:28:55:53:ee:c0:34:d7:80:a0:48:9e:
ad:f9:50:40:77:45:46:15:6d:93:7f:de:2c:9b:19:65:6a:8b:
60:0b:fd:67:32:2f:a1:38:f9:38:1d:72:1c:44:5e:31:59:d1:
09:2f:e4:09:02:0d:86:cb:22:d0:0d:b0:0c:a1:4b:90:38:9c:
68:d8:cc:1e:f0:82:3d:01:a9:10:42:0d:44:8d:31:4f:6c:2b:
6d:6c:f8:37:d6:b0:1b:f3:4f:e0:04:c4:da:93:fd:4b:4a:7b:
81:5c:77:8e:5e:9c:4c:c3:55:e1:04:8d:b2:52:6a:7c:30:76:
a1:30:37:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHFkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTEwMTExMDA3MjRaFw0yNzEwMTExMDA3MjRaMBgxFjAU
BgNVBAMTDTY4ZWEyYzYwLTMyODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+u4XA7MLfZFXITJ0/OBcK80dcwz4OG9aRXrWpk8+N0qdWQ/OU2vm15LuO
wavuDtD3h/IStaDkD11AVedXO9ceZdwUCqHJLfaG5tIJQ1M/cFhncfB9kh/6EMjm
jMgXC71Ei7uNADI391llLp1KtkyUkL6nRfTnosdMfnQU3tyVyx66+tJyHoDuXMLB
AycowZPM3meLK896rdl/hwf5dVmNEsPIAze5oh0CZeniInIQ6SsKRNkrR48J60HW
AfFbGjFw1OUJpHvQrVr3supJ+uO8Y7MNELEDxCQ989lmzayW0R+ifE/UsP5zHGNT
PbY50fZHwFpNVvZXWqxIoUZj0g7fAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtBe+
AfAdbMl/1sx0mrsV/KsXP2AwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzE3QjhCNTUyQTY4QTExRjA5REU5RkQ5QkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGAwDQYJKoZIhvcNAQEL
BQADggEBAKwrkRP4PhCTiUO40hdXA6cAXdxFFN4Y+wosPLkmdUuEZpnjeBSqjXWQ
9WKIM7YgiaTMyAFpfdy9Uek7VceJ3+YN+C3e8XiAvukj6LadnOhiBL6UIGt+fdJT
glA45xMPz580sMeOvNEmIhvTM//PPnvM4acSwl9H992UNL2XxDCdBbRy6q4oVVPu
wDTXgKBInq35UEB3RUYVbZN/3iybGWVqi2AL/WcyL6E4+TgdchxEXjFZ0Qkv5AkC
DYbLItANsAyhS5A4nGjYzB7wgj0BqRBCDUSNMU9sK21s+DfWsBvzT+AExNqT/UtK
e4Fcd45enEzDVeEEjbJSanwwdqEwN3c=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:02 2025 by rpki-client