Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42309110898911F0BB0960F2DAE4EC9C.roa
File: 42309110898911F0BB0960F2DAE4EC9C.roa (raw, json)
Hash identifier: +zgI675Y5GYLXil7f4Z04RfEPE9b/qDzknCUis04t8M=
Subject key identifier: 3C:AE:44:83:28:B2:E1:E5:AA:8A:E7:D4:70:65:86:E2:33:34:B4:C0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BF5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42309110898911F0BB0960F2DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 12:18:27 +0000
ROA not before: Thu 04 Sep 2025 12:18:22 +0000
ROA not after: Sat 04 Sep 2027 12:18:22 +0000
asID: 16509
IP address blocks: 154.16.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7157 (0x1bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 4 12:18:22 2025 GMT
Not After : Sep 4 12:18:22 2027 GMT
Subject: CN=68b98392-cbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:76:b2:91:b3:5d:4f:49:6d:90:0e:88:d2:
ad:24:7d:10:c1:9c:11:09:c2:17:27:f3:76:29:41:
70:b7:28:19:94:19:20:76:b2:15:86:f0:b6:61:c2:
f2:fd:0b:33:c2:04:33:d0:53:64:85:c6:85:04:31:
87:25:92:21:88:78:65:a7:94:bb:ec:72:67:6d:6d:
5d:d8:6e:5a:e6:4e:e1:92:65:50:41:44:b5:7a:c2:
88:e7:b7:41:15:5c:12:d2:33:e0:54:eb:99:c3:72:
15:5d:05:cc:5d:13:09:8e:5d:ed:a0:55:73:23:de:
71:e3:69:95:bf:ea:40:9e:ca:cc:b7:79:8c:f3:d7:
0b:6d:c0:6c:67:e8:80:98:a4:ee:a9:62:37:50:33:
d6:ba:4e:41:9d:fe:2a:8f:dd:76:13:cd:9b:7f:35:
9a:6e:b7:c7:c3:9d:9e:be:78:00:b5:f5:54:ac:a2:
1e:62:69:d4:92:db:36:32:51:ad:f4:d2:2d:29:01:
0e:70:6d:ba:08:fd:13:49:bf:0b:cf:82:7a:d0:ce:
0a:1e:f2:26:22:42:82:26:a5:8b:e2:99:8d:10:3d:
86:18:3f:a9:55:fd:ab:e4:d4:31:af:16:6b:c3:5f:
4f:cd:c7:62:3f:c1:e6:31:58:8e:eb:c4:a7:95:11:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AE:44:83:28:B2:E1:E5:AA:8A:E7:D4:70:65:86:E2:33:34:B4:C0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/42309110898911F0BB0960F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.249.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a8:61:6d:cd:f5:d5:a3:a9:06:1f:62:a5:fe:32:64:31:94:
be:10:67:66:11:ee:49:8d:1d:b9:f0:28:46:e2:62:f1:dc:c6:
6e:58:f6:bc:7b:ff:46:b5:3a:63:88:09:90:96:5a:24:c1:16:
f9:db:9a:c7:fb:78:43:50:88:11:c5:b3:fc:3e:6b:99:38:77:
24:ee:b5:70:27:2c:74:61:97:a5:4e:c0:7e:46:81:d9:7b:72:
a1:21:a2:76:6f:76:a1:34:cd:97:d7:dc:29:21:8f:48:99:65:
78:ae:1f:8c:86:28:60:7e:9e:a8:37:c2:54:cc:ed:6f:37:df:
4d:f7:d0:f8:e4:58:f0:d4:a0:d4:c2:99:40:03:51:7b:4d:54:
e7:b4:c5:ca:77:0e:2c:75:22:af:cd:15:ad:72:89:02:b9:05:
a4:c2:cd:37:94:8f:c6:7f:e0:12:1e:c9:db:8a:12:dc:b4:95:
d0:7f:d9:2e:49:56:4e:51:a5:2e:c0:da:0f:56:a6:c7:45:ed:
1f:54:9f:1e:fa:58:aa:fb:5e:41:32:9e:fb:94:7b:b6:00:f4:
72:b9:3a:09:0e:29:14:29:09:05:41:13:0a:30:83:c3:d1:ea:
5a:a0:78:f2:7d:f5:c8:d8:d9:05:8e:37:db:03:7b:41:2f:c2:
d7:83:b7:49
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG/UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA5MDQxMjE4MjJaFw0yNzA5MDQxMjE4MjJaMBgxFjAU
BgNVBAMTDTY4Yjk4MzkyLWNiYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDLXaykbNdT0ltkA6I0q0kfRDBnBEJwhcn83YpQXC3KBmUGSB2shWG8LZh
wvL9CzPCBDPQU2SFxoUEMYclkiGIeGWnlLvscmdtbV3YblrmTuGSZVBBRLV6wojn
t0EVXBLSM+BU65nDchVdBcxdEwmOXe2gVXMj3nHjaZW/6kCeysy3eYzz1wttwGxn
6ICYpO6pYjdQM9a6TkGd/iqP3XYTzZt/NZput8fDnZ6+eAC19VSsoh5iadSS2zYy
Ua300i0pAQ5wbboI/RNJvwvPgnrQzgoe8iYiQoImpYvimY0QPYYYP6lV/avk1DGv
FmvDX0/Nx2I/weYxWI7rxKeVEbJXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPK5E
gyiy4eWqiufUcGWG4jM0tMAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzQyMzA5MTEwODk4OTExRjBCQjA5NjBGMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPkwDQYJKoZIhvcNAQEL
BQADggEBAMWoYW3N9dWjqQYfYqX+MmQxlL4QZ2YR7kmNHbnwKEbiYvHcxm5Y9rx7
/0a1OmOICZCWWiTBFvnbmsf7eENQiBHFs/w+a5k4dyTutXAnLHRhl6VOwH5Ggdl7
cqEhonZvdqE0zZfX3Ckhj0iZZXiuH4yGKGB+nqg3wlTM7W8330330PjkWPDUoNTC
mUADUXtNVOe0xcp3Dix1Iq/NFa1yiQK5BaTCzTeUj8Z/4BIeyduKEty0ldB/2S5J
Vk5RpS7A2g9WpsdF7R9Unx76WKr7XkEynvuUe7YA9HK5OgkOKRQpCQVBEwowg8PR
6lqgePJ99cjY2QWON9sDe0EvwteDt0k=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:48 2025 by rpki-client