
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2EEB8CE960E11F088FED8C6DAE4EC9C.roa
File: A2EEB8CE960E11F088FED8C6DAE4EC9C.roa (raw, json)
Hash identifier: sjQOUpZqFvS5s8CENM5k+ahE9HS0ydPRYb3N6aKBbLU=
Subject key identifier: 60:B9:EB:52:2C:81:33:A2:64:E6:A6:FE:86:23:17:BF:D4:8D:44:E0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C0E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2EEB8CE960E11F088FED8C6DAE4EC9C.roa
Signing time: Sat 20 Sep 2025 10:43:26 +0000
ROA not before: Sat 20 Sep 2025 10:43:20 +0000
ROA not after: Mon 20 Sep 2027 10:43:20 +0000
asID: 834
IP address blocks: 154.16.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7182 (0x1c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 20 10:43:20 2025 GMT
Not After : Sep 20 10:43:20 2027 GMT
Subject: CN=68ce854e-4a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:f3:22:c2:e1:69:cc:e2:6f:5c:ba:e1:cf:
de:70:15:20:9c:e1:1e:ab:f9:45:bb:e3:ab:8a:0e:
2b:42:c5:6e:0f:30:3a:4f:b3:03:2c:d2:f4:02:a2:
e3:2a:0f:b3:90:f4:d2:e4:bc:88:87:67:e3:06:14:
41:7c:1c:ce:cd:4b:55:30:4d:ea:04:50:06:c0:79:
33:09:cf:37:cf:e7:88:32:57:a2:63:50:2b:f1:51:
9d:05:c6:f9:18:8f:a1:b7:d2:de:46:e0:61:72:7f:
da:d5:bb:5e:be:37:29:e2:26:ec:12:1c:41:87:34:
fd:6e:26:be:91:20:f5:a0:5e:71:e1:b2:a4:f1:ac:
73:b9:a4:3b:35:4c:2a:e7:32:9f:5e:d2:84:0a:25:
63:be:16:1f:21:c4:6b:5a:bb:69:a0:02:d4:d6:32:
9f:51:b2:e0:d4:30:61:7c:95:d6:2a:3f:f3:b4:bd:
e9:cb:82:0a:03:c2:63:b9:5b:3a:10:60:f6:b2:20:
a9:33:bc:35:23:2d:a8:5e:d6:73:df:94:ed:d6:50:
2b:a1:14:60:dd:4d:d6:6e:4e:47:36:d6:e3:d5:ff:
85:41:97:b2:c9:b1:c8:c0:fa:69:65:51:bb:0e:c7:
39:9a:2f:43:93:e5:04:49:78:ba:81:2b:5c:97:ec:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:EB:52:2C:81:33:A2:64:E6:A6:FE:86:23:17:BF:D4:8D:44:E0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A2EEB8CE960E11F088FED8C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:21:01:bf:97:d5:7a:d0:f9:34:d8:91:d4:9b:90:83:a9:f5:
5c:de:2d:7f:6f:48:34:ef:4b:fa:b7:21:9b:8d:05:33:08:e3:
08:da:89:a9:81:a0:33:5b:d0:a8:8b:9c:f1:ba:f0:22:2b:32:
c7:5e:df:29:e3:14:51:b6:9b:ac:34:5c:02:e9:7a:dd:e0:20:
56:c5:76:c1:2e:d9:35:4b:43:e5:41:8a:24:b9:e7:eb:a1:81:
d2:19:a7:1c:f9:6e:e3:02:73:bb:ce:be:fe:77:30:53:50:b6:
80:93:34:06:2d:b3:51:69:5e:32:e8:36:1a:1b:4a:ba:5b:36:
20:44:34:b5:62:68:a6:fe:c9:7b:69:17:d0:e2:a0:d4:bf:f7:
d4:7f:5a:30:ae:ae:73:18:e9:12:39:87:b5:04:43:c9:10:57:
62:4e:c3:7d:b1:3e:30:a7:f0:87:37:b5:55:66:f4:3d:ec:52:
2f:5f:52:7e:1d:32:a5:02:b0:42:e4:c4:ba:36:c9:93:f7:53:
af:e4:a2:c1:1f:7d:ec:47:8c:bb:a4:b3:96:95:7c:a0:a4:9c:
36:6c:55:a3:de:f3:d6:32:c6:26:75:01:bb:05:7e:06:c1:31:
ac:e6:01:eb:36:bb:89:d9:11:72:19:7f:2b:79:a4:bc:a0:de:
d5:15:4a:61
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHA4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA5MjAxMDQzMjBaFw0yNzA5MjAxMDQzMjBaMBgxFjAU
BgNVBAMTDTY4Y2U4NTRlLTRhNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTRfMiwuFpzOJvXLrhz95wFSCc4R6r+UW746uKDitCxW4PMDpPswMs0vQC
ouMqD7OQ9NLkvIiHZ+MGFEF8HM7NS1UwTeoEUAbAeTMJzzfP54gyV6JjUCvxUZ0F
xvkYj6G30t5G4GFyf9rVu16+NyniJuwSHEGHNP1uJr6RIPWgXnHhsqTxrHO5pDs1
TCrnMp9e0oQKJWO+Fh8hxGtau2mgAtTWMp9RsuDUMGF8ldYqP/O0venLggoDwmO5
WzoQYPayIKkzvDUjLahe1nPflO3WUCuhFGDdTdZuTkc21uPV/4VBl7LJscjA+mll
UbsOxzmaL0OT5QRJeLqBK1yX7Ar/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYLnr
UiyBM6Jk5qb+hiMXv9SNROAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0EyRUVCOENFOTYwRTExRjA4OEZFRDhDNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELMwDQYJKoZIhvcNAQEL
BQADggEBAGwhAb+X1XrQ+TTYkdSbkIOp9VzeLX9vSDTvS/q3IZuNBTMI4wjaiamB
oDNb0KiLnPG68CIrMsde3ynjFFG2m6w0XALpet3gIFbFdsEu2TVLQ+VBiiS55+uh
gdIZpxz5buMCc7vOvv53MFNQtoCTNAYts1FpXjLoNhobSrpbNiBENLViaKb+yXtp
F9DioNS/99R/WjCurnMY6RI5h7UEQ8kQV2JOw32xPjCn8Ic3tVVm9D3sUi9fUn4d
MqUCsELkxLo2yZP3U6/kosEffexHjLuks5aVfKCknDZsVaPe89YyxiZ1AbsFfgbB
MazmAes2u4nZEXIZfyt5pLyg3tUVSmE=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:44 2025 by rpki-client