Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DECB0218A68911F082DFE49BDAE4EC9C.roa
File: DECB0218A68911F082DFE49BDAE4EC9C.roa (raw, json)
Hash identifier: kUAi6go1mlhYLc7iG16t04jpXlmcNB5tRzZbDhAnK84=
Subject key identifier: D8:0B:78:5E:2A:3B:9F:FA:DF:73:3F:1E:9E:79:29:80:E8:92:76:82
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C56
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DECB0218A68911F082DFE49BDAE4EC9C.roa
Signing time: Sat 11 Oct 2025 10:05:53 +0000
ROA not before: Sat 11 Oct 2025 10:05:48 +0000
ROA not after: Mon 11 Oct 2027 10:05:48 +0000
asID: 205886
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7254 (0x1c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 11 10:05:48 2025 GMT
Not After : Oct 11 10:05:48 2027 GMT
Subject: CN=68ea2c01-221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:d6:4a:09:5a:8d:aa:ef:ad:e7:be:22:27:
a8:5e:4f:5f:0e:e1:3c:6f:a3:56:af:6d:e3:e4:fb:
aa:bc:19:b9:b3:15:77:eb:7d:b4:0c:4e:eb:f1:f9:
cf:67:35:aa:a7:45:37:3b:1a:ed:25:09:00:11:25:
e1:e8:62:13:f5:f5:09:6f:12:f2:17:bd:9a:3b:cb:
c8:80:28:f2:c7:fb:5b:cf:d3:26:6d:09:16:e3:0d:
1d:ed:17:b6:1d:12:13:2e:c1:fe:ca:8b:06:a7:d4:
3d:96:47:cb:2b:0d:dd:a0:9e:2d:ac:56:81:ce:05:
39:fb:62:17:c4:b0:5b:9f:94:b0:ed:b1:23:a1:ae:
e2:7d:36:c7:82:4a:ed:69:07:b0:e8:c2:e7:37:d5:
0b:19:2b:ec:c9:7f:c2:af:b2:e4:b6:ad:29:7e:0f:
a7:e0:03:39:07:72:70:e2:33:59:c4:7c:4e:6a:a4:
44:2c:06:a7:ec:64:8c:a7:ad:85:bd:42:b9:27:5e:
8b:a2:01:c6:68:c8:69:f8:7b:ec:55:1d:71:d3:ec:
ce:65:24:2c:b3:ff:35:e2:d8:ca:c6:7b:88:27:d7:
12:9b:36:d2:9c:92:ac:aa:0c:86:b3:98:9a:a9:d3:
ae:cf:99:a2:e5:d1:15:4e:32:aa:ee:50:12:c2:e0:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:78:5E:2A:3B:9F:FA:DF:73:3F:1E:9E:79:29:80:E8:92:76:82
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DECB0218A68911F082DFE49BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
93:41:d3:aa:d7:b1:a0:46:54:3b:fc:36:cb:34:73:b1:14:2d:
d3:31:eb:55:f4:ec:5e:1c:ce:03:45:fa:6b:6b:44:fe:c5:c1:
90:e0:12:a9:79:3a:aa:fb:33:9d:3e:4a:14:a3:00:f3:46:74:
7c:8b:d0:c3:8b:7f:52:77:63:66:2b:4e:fb:d7:29:76:7f:bf:
d9:0e:ec:fb:30:7f:70:24:53:46:c4:f5:40:ec:d5:8f:cf:21:
98:85:1e:32:53:dd:6a:3a:4a:89:aa:11:25:8f:ef:6d:20:96:
f4:35:46:36:e0:b8:98:7d:00:4b:5e:2a:e8:7b:c3:28:40:03:
37:98:43:f0:81:7d:0f:08:e8:bc:9e:a9:32:ba:28:76:8a:39:
7f:9e:34:f7:ba:c9:33:b9:69:2f:3a:8d:73:27:a4:68:84:61:
e0:b2:82:6e:9d:38:ca:ed:0a:b9:b4:cc:b3:1d:31:f2:69:78:
02:c3:72:49:b2:72:e0:68:7f:03:d7:bc:ce:7b:e1:94:00:0d:
0e:85:40:7d:f2:ba:9b:e0:c3:f6:df:57:cd:6e:e6:79:e0:bf:
a6:92:06:c9:69:66:24:49:29:ef:31:fe:27:47:2f:2b:3c:a4:
0e:7f:38:fd:b4:3d:dc:fa:07:68:e8:fc:1a:f3:de:a2:aa:bd:
0c:25:c6:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHFYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTEwMTExMDA1NDhaFw0yNzEwMTExMDA1NDhaMBgxFjAU
BgNVBAMTDTY4ZWEyYzAxLTIyMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+OdZKCVqNqu+t574iJ6heT18O4Txvo1avbePk+6q8GbmzFXfrfbQMTuvx
+c9nNaqnRTc7Gu0lCQARJeHoYhP19QlvEvIXvZo7y8iAKPLH+1vP0yZtCRbjDR3t
F7YdEhMuwf7Kiwan1D2WR8srDd2gni2sVoHOBTn7YhfEsFuflLDtsSOhruJ9NseC
Su1pB7Dowuc31QsZK+zJf8KvsuS2rSl+D6fgAzkHcnDiM1nEfE5qpEQsBqfsZIyn
rYW9QrknXouiAcZoyGn4e+xVHXHT7M5lJCyz/zXi2MrGe4gn1xKbNtKckqyqDIaz
mJqp067PmaLl0RVOMqruUBLC4AnVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2At4
Xio7n/rfcz8ennkpgOiSdoIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0RFQ0IwMjE4QTY4OTExRjA4MkRGRTQ5QkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEM8wDQYJKoZIhvcNAQEL
BQADggEBAJNB06rXsaBGVDv8Nss0c7EULdMx61X07F4czgNF+mtrRP7FwZDgEql5
Oqr7M50+ShSjAPNGdHyL0MOLf1J3Y2YrTvvXKXZ/v9kO7Pswf3AkU0bE9UDs1Y/P
IZiFHjJT3Wo6SomqESWP720glvQ1RjbguJh9AEteKuh7wyhAAzeYQ/CBfQ8I6Lye
qTK6KHaKOX+eNPe6yTO5aS86jXMnpGiEYeCygm6dOMrtCrm0zLMdMfJpeALDckmy
cuBofwPXvM574ZQADQ6FQH3yupvgw/bfV81u5nngv6aSBslpZiRJKe8x/idHLys8
pA5/OP20Pdz6B2jo/Brz3qKqvQwlxjQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:13 2025 by rpki-client