
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2B761362961011F08FDB04D0DAE4EC9C.roa
File: 2B761362961011F08FDB04D0DAE4EC9C.roa (raw, json)
Hash identifier: QAURpZeLWDiRyJ0LpyQ/dRlXffhm2wqfK93Rvv8WuyI=
Subject key identifier: 07:F0:E6:EB:24:98:F6:75:DE:09:FB:41:05:63:94:60:73:80:B3:15
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C17
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2B761362961011F08FDB04D0DAE4EC9C.roa
Signing time: Sat 20 Sep 2025 10:54:24 +0000
ROA not before: Sat 20 Sep 2025 10:54:19 +0000
ROA not after: Mon 20 Sep 2027 10:54:19 +0000
asID: 834
IP address blocks: 154.16.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7191 (0x1c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 20 10:54:19 2025 GMT
Not After : Sep 20 10:54:19 2027 GMT
Subject: CN=68ce87e0-0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:b3:0a:09:46:b9:d0:9a:5a:d5:c8:a8:92:
13:67:d3:ce:6e:1d:6f:e0:4c:f2:5b:d5:1a:97:55:
19:c7:d6:17:4c:9b:ca:e8:7c:06:b6:cd:23:5a:bc:
b8:2e:1d:4a:23:4f:fe:ed:ec:13:7b:4b:18:84:a5:
bf:fa:ea:d3:63:01:07:58:1c:74:ba:fb:03:27:66:
7b:ad:55:17:f7:41:01:55:ba:8e:5a:9a:4c:2f:c1:
5c:32:56:47:6f:69:cb:c0:33:e1:a9:b3:84:e7:c6:
3c:51:83:2a:dc:44:8b:d9:a2:d4:f8:fa:97:5c:8d:
00:18:29:90:3b:80:97:96:ca:30:41:20:77:c6:1c:
d5:62:fb:f0:e9:38:c4:3c:b6:58:69:7a:3d:94:31:
b3:d0:75:37:86:93:d3:e7:28:dd:60:8b:a0:41:8f:
e0:33:58:08:66:a9:49:b5:cd:90:dd:33:89:00:d9:
87:e1:9b:43:b1:be:ec:a1:be:22:1d:d6:d6:0f:b4:
54:53:75:3a:49:e7:9a:2f:2c:2d:d0:23:99:de:fd:
2d:0f:05:b9:56:65:13:e8:0c:12:6b:6d:b8:e0:38:
9c:fd:29:6e:69:eb:ff:28:f4:9e:35:48:24:56:5f:
84:e8:1c:6c:50:e6:53:82:e3:8f:64:26:57:48:f2:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:E6:EB:24:98:F6:75:DE:09:FB:41:05:63:94:60:73:80:B3:15
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2B761362961011F08FDB04D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.5.0/24
Signature Algorithm: sha256WithRSAEncryption
77:66:61:0c:d1:62:fb:f0:12:d9:6b:0c:a1:93:a4:72:91:4b:
85:7a:fc:9e:f1:8e:e3:c2:69:e6:62:24:5e:6a:35:e4:76:46:
5c:32:b1:97:cb:d1:d9:be:50:ee:58:5f:e8:9f:cd:f5:6b:a0:
cf:6d:fb:84:d5:3a:56:d2:26:1f:8a:3d:ee:b9:6b:a7:f6:f0:
2f:74:84:a4:53:a8:05:d8:78:b7:18:2f:28:d7:b8:bb:5b:fa:
62:1e:d2:f6:f4:05:8a:28:bd:8d:a9:3e:09:3f:13:6f:f5:70:
39:1c:ba:56:a2:e1:d8:0c:3e:60:32:89:44:10:b9:3d:36:d6:
37:2f:6f:be:ea:04:24:62:54:1b:aa:32:3c:80:fa:d1:76:fd:
77:bf:d6:68:47:f4:ee:90:b6:dc:08:c9:9d:1d:36:e5:ed:ca:
b2:88:dd:d2:5f:e5:3e:8c:82:5e:f9:f5:8c:61:ba:7d:d9:4a:
6e:45:11:33:8a:fe:d9:e2:3a:a5:39:5a:95:22:db:41:79:b7:
a2:fd:7b:1f:bf:b0:66:4d:a8:9c:4f:0c:d3:17:49:3c:ce:e1:
1a:1d:4e:a4:e5:b3:e6:31:ce:65:bd:7b:77:62:48:3f:fd:b8:
f6:0e:9f:1d:24:57:09:67:9c:d0:84:2f:65:60:f5:bb:21:9f:
57:20:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:45 2025 by rpki-client