Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2BAE3DD4775011F09854488BDAE4EC9C.roa
File: 2BAE3DD4775011F09854488BDAE4EC9C.roa (raw, json)
Hash identifier: 4wt+yDW9/gZNdg7II58L3p8Z0bm4MUviZNzf5D3OSFI=
Subject key identifier: 8E:BE:F3:5C:77:B3:2C:D4:39:59:AA:2B:98:B7:49:3F:11:10:67:AE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BAA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2BAE3DD4775011F09854488BDAE4EC9C.roa
Signing time: Tue 12 Aug 2025 07:44:27 +0000
ROA not before: Tue 12 Aug 2025 07:44:21 +0000
ROA not after: Thu 12 Aug 2027 07:44:21 +0000
asID: 212238
IP address blocks: 154.16.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7082 (0x1baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 12 07:44:21 2025 GMT
Not After : Aug 12 07:44:21 2027 GMT
Subject: CN=689af0da-a17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:c0:8d:68:15:3e:9d:a4:91:c3:75:4c:28:
10:0f:aa:6a:1d:5a:0b:50:02:6a:9d:33:b0:90:e7:
38:89:44:34:a7:88:48:74:c3:02:97:66:73:76:69:
ee:66:4c:59:67:65:a5:bd:5f:47:bf:fc:17:fc:39:
e1:47:e3:ef:42:b0:86:ec:9a:8a:83:17:2f:2b:05:
a0:3e:3b:95:95:db:8d:fa:2f:69:86:2c:1f:0c:65:
d0:8f:37:3b:ab:a5:2c:b3:81:7c:22:c0:08:73:a6:
7e:d9:14:94:91:b5:d4:b5:db:ee:25:a0:af:ae:23:
6a:da:a6:df:88:ed:a4:6c:f6:ab:59:01:4d:16:4c:
ad:9a:ad:6a:16:cb:cd:71:ee:ea:ec:d2:ac:1e:8f:
cb:27:74:b8:6f:3b:7c:7e:68:58:e3:5a:5d:93:62:
a1:45:02:37:9f:cd:41:88:e2:e3:c5:45:84:00:c7:
c2:f7:7a:67:ed:32:2b:a7:d8:b5:1e:b3:82:83:16:
3b:3f:ef:76:a5:ba:04:53:49:3e:3a:41:9c:b8:8a:
11:60:8a:dd:3d:03:29:a5:6c:ef:fa:ca:3f:d8:94:
1f:16:69:a3:b3:90:38:09:2c:92:65:8e:52:78:9e:
8b:e3:a2:32:5b:46:ca:d5:08:7f:16:99:d1:ae:75:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BE:F3:5C:77:B3:2C:D4:39:59:AA:2B:98:B7:49:3F:11:10:67:AE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2BAE3DD4775011F09854488BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:50:b5:7c:b1:3c:8c:2e:15:23:b8:3e:7c:1d:9c:0e:c0:0c:
60:79:3a:c8:c0:25:38:17:bf:5c:6d:8b:07:30:2e:7e:15:3e:
2b:bc:8b:d6:34:01:ad:82:db:ef:30:6c:9d:b1:5b:a9:a6:92:
13:59:e8:8c:f6:56:d1:51:3c:27:39:3d:f0:01:d0:21:06:d9:
27:87:24:39:98:0c:11:39:5d:c9:18:30:b1:ed:b4:7f:20:ea:
aa:6e:00:e3:ba:b8:82:90:e8:c1:72:7c:0d:3b:2f:8c:9c:51:
c2:0e:87:91:ea:45:86:b0:a3:1a:81:f6:57:bb:88:5c:76:e6:
2d:47:19:a8:c6:76:5d:84:71:83:f6:f5:b1:4d:8b:a8:99:ca:
f3:1e:d5:53:36:04:0f:5c:40:cc:0f:cc:6d:2b:26:4c:f9:15:
9a:a1:3a:8d:ae:4f:6e:5c:17:f6:d9:44:92:f6:6b:ee:d2:74:
39:e3:fd:8c:ab:81:a7:40:b8:13:df:7c:ee:3a:4f:18:3d:0d:
43:db:f0:33:c2:bb:e7:26:76:81:bf:c2:32:d2:b5:ae:34:3d:
75:c7:b5:7a:cd:f5:f7:ec:9e:32:22:fe:e3:f6:fe:e8:72:1b:
a9:d3:14:e0:86:71:61:c8:37:fb:27:c7:18:49:45:0c:28:c1:
c1:e8:d6:63
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG6owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA4MTIwNzQ0MjFaFw0yNzA4MTIwNzQ0MjFaMBgxFjAU
BgNVBAMTDTY4OWFmMGRhLWExN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR+sCNaBU+naSRw3VMKBAPqmodWgtQAmqdM7CQ5ziJRDSniEh0wwKXZnN2
ae5mTFlnZaW9X0e//Bf8OeFH4+9CsIbsmoqDFy8rBaA+O5WV2436L2mGLB8MZdCP
NzurpSyzgXwiwAhzpn7ZFJSRtdS12+4loK+uI2rapt+I7aRs9qtZAU0WTK2arWoW
y81x7urs0qwej8sndLhvO3x+aFjjWl2TYqFFAjefzUGI4uPFRYQAx8L3emftMiun
2LUes4KDFjs/73alugRTST46QZy4ihFgit09AymlbO/6yj/YlB8WaaOzkDgJLJJl
jlJ4novjojJbRsrVCH8WmdGudTAvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUjr7z
XHezLNQ5WaormLdJPxEQZ64wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzJCQUUzREQ0Nzc1MDExRjA5ODU0NDg4QkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECQwDQYJKoZIhvcNAQEL
BQADggEBABpQtXyxPIwuFSO4PnwdnA7ADGB5OsjAJTgXv1xtiwcwLn4VPiu8i9Y0
Aa2C2+8wbJ2xW6mmkhNZ6Iz2VtFRPCc5PfAB0CEG2SeHJDmYDBE5XckYMLHttH8g
6qpuAOO6uIKQ6MFyfA07L4ycUcIOh5HqRYawoxqB9le7iFx25i1HGajGdl2EcYP2
9bFNi6iZyvMe1VM2BA9cQMwPzG0rJkz5FZqhOo2uT25cF/bZRJL2a+7SdDnj/Yyr
gadAuBPffO46Txg9DUPb8DPCu+cmdoG/wjLSta40PXXHtXrN9ffsnjIi/uP2/uhy
G6nTFOCGcWHIN/snxxhJRQwowcHo1mM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:32 2025 by rpki-client