Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E300A7A27EA211F0BC4C94DCDAE4EC9C.roa
File: E300A7A27EA211F0BC4C94DCDAE4EC9C.roa (raw, json)
Hash identifier: V90Xr/fY9T11d0UlrwSwHFYYjj/CbthZqPzNtZ5F6yU=
Subject key identifier: C5:9E:C0:4D:12:D3:5B:52:1C:E9:ED:38:66:18:B5:59:56:04:44:2D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BB9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E300A7A27EA211F0BC4C94DCDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 15:24:11 +0000
ROA not before: Thu 21 Aug 2025 15:24:06 +0000
ROA not after: Sat 21 Aug 2027 15:24:06 +0000
asID: 834
IP address blocks: 154.16.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7097 (0x1bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 21 15:24:06 2025 GMT
Not After : Aug 21 15:24:06 2027 GMT
Subject: CN=68a73a1b-5481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:52:5b:a3:71:32:52:76:cf:76:c5:a7:18:
74:8e:06:56:b3:86:fb:56:b5:45:b3:e9:b9:89:2a:
f7:0d:df:19:82:df:97:e4:66:ef:57:dd:27:08:07:
ae:6d:a2:a9:5f:21:f4:a2:6d:5a:a8:ed:83:cc:4e:
c8:08:1f:ee:ff:6e:2b:2e:69:3c:0d:84:40:ed:33:
1e:1e:cf:4c:79:6e:30:1c:78:c2:13:45:b0:bc:6b:
51:4b:a2:83:aa:6b:6d:16:e0:82:35:c6:fd:5b:9c:
51:5f:03:56:9a:39:b9:00:0e:08:fc:b6:37:72:0d:
b8:68:f1:bd:25:e5:9e:16:cd:7e:67:d5:60:8f:80:
35:ab:40:91:35:b7:76:80:01:65:a3:51:6c:ae:65:
31:65:17:6e:49:25:46:36:e7:85:d9:0b:5e:78:b7:
19:88:70:a7:39:e7:a6:3b:f2:7c:70:03:9f:fe:a8:
5f:51:27:2f:28:ae:81:b0:90:dc:5d:37:c6:91:4b:
b1:14:51:79:f4:d7:86:ec:c6:7a:a3:8f:5a:9d:73:
89:2d:d4:3c:ec:6c:34:f2:c6:fd:8f:d7:0b:55:31:
d3:67:fc:79:57:4c:bd:1e:3f:b6:d5:49:02:58:6e:
6f:54:a0:d2:a4:96:53:2b:23:c7:36:bc:89:e2:44:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:C0:4D:12:D3:5B:52:1C:E9:ED:38:66:18:B5:59:56:04:44:2D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E300A7A27EA211F0BC4C94DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7f:77:69:74:ce:71:73:05:3a:29:30:5d:f6:f0:9a:64:4b:
a6:cd:62:da:9b:fc:49:70:0b:e8:f7:65:c4:57:1f:bf:e7:c2:
d2:90:d8:12:f8:01:70:0b:41:19:ce:6d:8c:ca:62:a1:cc:d0:
69:e6:39:74:dc:93:d9:6f:7f:e4:b6:9e:ad:be:73:14:97:65:
e0:c3:eb:3e:30:20:15:40:4f:3c:01:59:bd:f5:fe:a4:a2:0e:
60:cf:f3:90:69:04:ea:a0:dd:94:ee:84:f5:af:12:45:0a:16:
5b:6d:b2:9d:e2:ef:52:02:1e:b0:af:89:09:90:04:d1:6a:47:
cd:d3:56:2f:9d:a2:f1:86:cb:14:37:1d:87:64:78:84:81:b9:
32:73:a1:9c:16:9a:1b:d4:e8:6f:b0:ca:17:e2:2e:80:f2:ab:
a6:b8:1a:c0:11:55:f5:32:72:91:24:91:8a:14:c6:96:12:6c:
07:18:5e:9d:54:f2:7f:2e:6c:ca:22:b1:38:78:99:01:99:30:
b7:2a:8a:d5:5a:2b:26:af:9f:1b:90:9a:54:c6:1c:a4:5e:9b:
63:61:09:13:1e:81:27:ce:01:01:de:09:2e:35:33:2a:3d:25:
cb:6e:3f:61:e9:e2:2f:5c:74:69:05:ef:c5:e9:c8:03:0f:5c:
35:44:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:01:49 2025 by rpki-client