
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFABACA989A11F0953198BCDAE4EC9C.roa
File: CDFABACA989A11F0953198BCDAE4EC9C.roa (raw, json)
Hash identifier: c4fT6nbiZTky1OQBEAlu52XWCtQnSuZK3egk4ucpUms=
Subject key identifier: CF:33:8C:B1:DF:CC:25:81:1E:24:68:66:17:10:EB:16:44:E2:14:92
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C1D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFABACA989A11F0953198BCDAE4EC9C.roa
Signing time: Tue 23 Sep 2025 16:31:50 +0000
ROA not before: Tue 23 Sep 2025 16:31:45 +0000
ROA not after: Thu 23 Sep 2027 16:31:45 +0000
asID: 834
IP address blocks: 154.16.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7197 (0x1c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 23 16:31:45 2025 GMT
Not After : Sep 23 16:31:45 2027 GMT
Subject: CN=68d2cb76-e868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:b5:8f:fb:ab:6c:5e:83:86:ab:47:20:32:
87:80:83:05:43:da:b2:3b:36:43:81:28:53:32:48:
3d:56:f4:f3:b3:eb:64:a2:fc:e5:81:95:66:d4:3b:
fe:df:23:23:ec:a1:97:f2:8b:cf:ba:f8:ee:8f:09:
39:c4:dc:8c:3f:66:ce:af:36:cf:54:a3:50:5e:2f:
22:cc:c5:8f:e1:63:4f:6a:48:ec:dc:d0:e4:8e:13:
8b:b4:a9:7f:8b:37:78:a9:49:e1:ea:57:c4:a2:fd:
b4:09:82:e0:9d:77:94:81:0f:ad:85:5e:68:4e:a8:
4d:81:06:30:20:33:f4:46:ff:42:23:e1:ab:70:31:
1f:ce:5d:d4:f1:a6:0d:f5:39:a3:6e:8b:4a:cc:86:
5a:a7:63:b1:cf:0b:ab:de:e2:f9:f4:bd:1f:bd:db:
d4:cf:90:1e:05:33:ce:23:de:4f:88:42:84:c2:50:
15:d0:1c:1d:6a:2a:31:77:df:58:10:a3:85:8b:ad:
4d:9a:6b:0f:dd:de:0f:17:55:83:4d:02:7c:4c:47:
20:0a:36:fe:f8:28:c7:ce:ec:a5:f0:1d:33:2d:ea:
88:38:1a:17:89:8a:f7:d0:be:36:35:9a:10:c0:be:
84:1d:95:13:88:24:d3:3e:45:30:db:1b:d8:bf:7c:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:8C:B1:DF:CC:25:81:1E:24:68:66:17:10:EB:16:44:E2:14:92
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFABACA989A11F0953198BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b9:e3:db:ee:89:de:1b:25:22:e9:85:e0:45:33:df:b0:ca:
0d:21:02:49:90:d0:e2:bf:b2:8a:b9:eb:52:ac:c1:93:5b:18:
3b:97:4c:2b:9b:6d:13:98:a1:29:18:07:7d:ee:6e:a0:8a:c6:
9a:f5:cc:65:0f:57:7e:1e:30:f1:10:80:ca:c4:96:27:da:2f:
45:52:27:ca:08:6b:cf:67:ad:94:91:d5:88:14:58:c7:8e:0b:
11:89:a9:fb:42:9a:3a:7a:26:7e:58:32:64:02:ca:8d:aa:08:
cc:3b:e7:20:1d:4e:cd:c1:18:75:74:b9:33:06:c1:3c:02:31:
93:de:0d:10:9b:9e:1a:7d:b4:d5:19:9c:81:12:45:21:f4:9e:
84:da:fc:a1:d5:db:97:c0:7a:97:ee:35:6e:a4:89:5d:c7:ea:
27:85:11:58:dc:22:66:ac:19:0c:3e:a6:e9:7b:16:5b:b2:c0:
ae:d4:82:64:58:11:da:28:f8:92:f6:1b:b5:52:52:ac:68:13:
cd:0b:4f:a4:00:fe:ff:83:53:c3:6e:51:42:9d:3c:8c:0c:55:
7b:3c:2b:8e:72:30:72:e2:86:a4:9d:dd:40:8e:b6:06:88:33:
66:4b:3f:62:24:a3:e0:5f:e7:31:f0:74:50:56:07:46:3c:36:
bf:a4:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:43 2025 by rpki-client