Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD35C38CA5E211F0B0E89BD9DAE4EC9C.roa
File: CD35C38CA5E211F0B0E89BD9DAE4EC9C.roa (raw, json)
Hash identifier: MZKVukdnAO0JOV4w6+tX1lNadspIWt8BYkGrqjwl+eI=
Subject key identifier: 8A:FE:78:D7:05:9C:E4:8E:20:46:61:15:80:50:E4:AD:17:4B:43:7A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C4C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD35C38CA5E211F0B0E89BD9DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 14:09:57 +0000
ROA not before: Fri 10 Oct 2025 14:09:52 +0000
ROA not after: Sun 10 Oct 2027 14:09:52 +0000
asID: 64267
IP address blocks: 154.16.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7244 (0x1c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 10 14:09:52 2025 GMT
Not After : Oct 10 14:09:52 2027 GMT
Subject: CN=68e913b5-7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:41:a3:01:02:7e:b4:26:68:ad:7b:82:0f:
b3:f6:c7:ea:f0:a8:5e:c3:96:11:38:2c:97:cf:d9:
06:e4:aa:b2:1e:f0:bf:d3:93:df:04:ce:fa:e2:7e:
90:98:e8:e8:da:10:9f:23:f7:16:e6:06:63:67:49:
23:e7:66:75:76:5d:ec:05:8b:f3:b9:1b:ca:2e:0f:
5f:ef:3f:d7:de:d3:21:ba:64:9b:a3:5a:70:db:66:
69:58:dd:0a:5a:41:0f:a7:48:e3:1d:4c:b9:79:45:
71:60:85:18:86:84:0e:00:1f:99:0d:c1:e5:c5:dd:
49:7c:95:62:93:d4:f3:2b:74:ad:e1:3d:0c:a3:dd:
b4:46:90:58:73:43:73:d9:8d:ea:4b:81:fe:71:56:
f7:8d:25:e2:ae:04:be:2f:82:61:23:23:bf:41:c2:
27:ed:ee:2c:7a:a6:07:c4:e6:4a:94:a4:9a:86:95:
f2:fa:d2:14:8f:78:34:03:95:1a:a4:69:76:0c:5c:
87:3e:7c:70:f2:1d:e0:42:36:9a:81:75:f4:0c:e4:
28:c1:09:1d:4e:b0:6b:5b:a7:7c:2d:56:b7:eb:9f:
8f:17:3e:49:23:2d:2d:c7:6a:47:47:0b:2a:67:a5:
74:5a:75:db:00:b4:12:de:f8:33:31:c4:69:cc:2b:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:78:D7:05:9C:E4:8E:20:46:61:15:80:50:E4:AD:17:4B:43:7A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CD35C38CA5E211F0B0E89BD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.246.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e1:5a:7f:1e:cd:1d:97:e3:35:57:e6:03:35:21:ef:17:74:
b9:b0:91:78:1e:38:f3:58:42:f8:34:ad:7e:e2:a6:b3:02:37:
f1:77:61:a0:8f:10:8e:7a:04:ab:60:84:7a:ca:3e:25:60:ae:
93:90:86:49:0c:84:ce:1c:30:91:ca:68:cc:45:9c:d7:bc:c6:
fb:53:4d:51:db:7a:f6:64:69:05:cd:3d:a6:52:23:72:0c:b3:
14:c3:92:0b:22:1b:c3:31:55:6b:2f:3b:78:ef:d5:90:97:e6:
96:cf:10:44:27:2c:fb:ec:70:7e:41:70:6c:a5:de:6b:d0:9d:
d7:97:32:af:82:88:56:18:a4:36:8f:23:f2:ad:56:86:4a:98:
8d:a4:43:df:10:9a:52:6a:c8:ee:ad:f0:1c:35:c7:68:cc:c6:
cc:a4:80:89:e4:f9:38:7e:6a:f3:9a:2d:e7:a6:56:eb:b1:45:
47:10:11:d0:01:aa:25:56:d6:7d:95:f7:ba:6a:66:e1:c0:e8:
7e:59:1f:68:1b:c3:7b:62:a0:8f:d6:df:77:72:80:7c:31:5f:
ad:fa:9f:0d:f3:9d:53:e4:2b:f3:1c:bc:94:6d:a4:e7:59:64:
f6:1c:53:9b:a3:8d:12:bf:1c:fa:3c:ed:f4:45:4c:26:ea:b6:
02:2a:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:34 2025 by rpki-client