Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/81DB0B46801B11F080B07C88DAE4EC9C.roa
File: 81DB0B46801B11F080B07C88DAE4EC9C.roa (raw, json)
Hash identifier: 8vGhmbebjb+1KPQn7gbG9SXpXJX+/bKPIPweFEdsw0Q=
Subject key identifier: 63:9C:8B:7A:6C:A9:BE:4D:76:96:4E:13:B0:F8:2C:90:CE:69:02:2E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BBE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/81DB0B46801B11F080B07C88DAE4EC9C.roa
Signing time: Sat 23 Aug 2025 12:20:08 +0000
ROA not before: Sat 23 Aug 2025 12:20:01 +0000
ROA not after: Mon 23 Aug 2027 12:20:01 +0000
asID: 272547
IP address blocks: 154.16.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7102 (0x1bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 23 12:20:01 2025 GMT
Not After : Aug 23 12:20:01 2027 GMT
Subject: CN=68a9b1f8-ff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:f1:f2:96:8c:29:59:9d:0d:86:7f:70:b3:
6e:b4:f8:4f:71:31:33:d9:aa:f0:f1:b2:ea:a0:37:
44:54:83:29:57:98:a3:9f:96:fc:ab:2f:4f:cf:69:
e7:0e:35:a8:7b:d7:d9:9a:34:ef:65:58:79:9f:5a:
68:f5:a9:99:85:bd:ac:ef:42:ea:5b:a5:cb:e7:60:
85:c4:e0:bf:7b:b1:a0:19:f7:e8:dd:0a:8f:74:57:
fc:18:e5:14:a8:0b:52:6b:99:94:4c:77:65:53:99:
11:3f:e8:7d:2a:84:ed:48:93:4b:fe:0a:62:d1:ec:
db:de:db:ff:e3:30:b0:35:05:b2:a3:79:42:a0:a0:
06:0a:65:8c:6d:c8:23:31:65:8a:75:f8:da:ef:33:
71:4d:01:ed:97:ba:ff:1b:90:3c:f8:66:0f:9d:f3:
e0:fc:64:83:43:67:68:55:f5:c0:90:21:02:d0:1f:
24:b0:0c:6a:97:60:12:8f:46:62:01:54:83:a0:3c:
c1:8d:c9:d2:91:80:76:a0:70:5e:76:54:a1:13:3b:
fe:f3:4d:3c:5a:5b:e2:85:63:0b:5a:d7:c8:9a:94:
bf:09:95:75:a9:10:c4:95:b7:86:2b:fc:29:db:28:
36:d0:96:a4:c3:56:3d:88:ea:5e:ae:fa:22:9a:fe:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:8B:7A:6C:A9:BE:4D:76:96:4E:13:B0:F8:2C:90:CE:69:02:2E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/81DB0B46801B11F080B07C88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.208.0/24
Signature Algorithm: sha256WithRSAEncryption
78:04:cb:0a:3d:01:70:6f:6f:3b:fe:a2:23:4f:67:9b:51:31:
3d:b2:3f:81:1d:0e:6c:c3:d4:10:22:f6:dc:43:e7:a9:7c:b5:
49:85:17:ac:f8:46:db:e6:57:5f:81:8e:74:2b:17:6a:95:34:
8e:93:21:c9:74:6c:98:91:7b:ec:c2:db:2f:76:30:6d:2d:67:
58:f4:ff:c3:2c:50:b0:5c:32:e9:3d:c7:c9:d9:5f:41:82:c5:
21:e1:b5:22:43:0d:11:ce:4c:df:93:e0:14:2e:35:9d:3a:6a:
ca:87:3d:6a:f4:db:47:ff:24:b0:cf:08:be:88:aa:66:3a:bf:
25:25:23:8e:1e:b0:ac:3c:f9:33:40:b4:6a:08:1b:cf:cd:be:
f9:4c:66:b5:42:33:fa:ec:29:5f:e7:6c:d2:88:af:51:ab:08:
94:2f:20:c9:e3:72:4c:6a:ab:3c:52:12:57:74:8f:92:6f:5a:
00:c0:8e:aa:23:7f:91:46:ec:4c:a0:3b:7c:a0:94:4d:27:32:
8a:2b:1f:1a:99:7f:8b:3e:4c:15:80:04:d2:ee:0d:57:86:b0:
1c:73:1a:a5:f0:fb:70:13:34:ca:cc:24:99:94:be:f0:94:3f:
e3:30:0e:28:02:a2:17:63:2c:c4:d0:3c:c7:df:f8:78:8f:41:
90:a9:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:27:03 2025 by rpki-client