Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D7F97429D1611F08FF74DD1DAE4EC9C.roa
File: 8D7F97429D1611F08FF74DD1DAE4EC9C.roa (raw, json)
Hash identifier: ZzgdbM8tq+dPQxiCvrnlldgtiNLYVO5nwPc1nDENKyI=
Subject key identifier: 6D:BA:DE:23:9B:E3:8A:B9:17:F0:40:4F:B6:D2:1F:27:E3:13:7A:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C2C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D7F97429D1611F08FF74DD1DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 09:27:44 +0000
ROA not before: Mon 29 Sep 2025 09:27:38 +0000
ROA not after: Wed 29 Sep 2027 09:27:38 +0000
asID: 154049
IP address blocks: 154.127.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Oct 2025 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7212 (0x1c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 29 09:27:38 2025 GMT
Not After : Sep 29 09:27:38 2027 GMT
Subject: CN=68da5110-ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:5b:08:78:b9:9a:ea:bf:4f:3c:2a:ed:de:
8f:91:17:ec:2c:37:df:db:70:4a:e9:41:7e:34:1a:
fa:c1:03:f0:7e:1f:eb:e0:7a:7b:46:80:42:e6:a8:
e1:17:65:ed:94:aa:8e:1c:c9:7c:f3:41:cc:7b:89:
1b:94:c4:35:2e:a9:8c:1c:b7:1a:9e:4e:f9:37:ce:
98:14:1c:c0:a4:e0:78:a2:70:76:33:94:37:f7:be:
a5:e0:c4:fc:4c:ee:7b:63:e8:67:95:52:39:e7:17:
a5:8e:73:69:32:ef:5c:07:c5:46:df:66:36:53:a3:
0f:d6:1d:d7:c4:40:3a:54:9f:a0:02:f5:4a:b6:04:
48:3a:f0:e4:e1:72:a0:3a:e4:24:96:95:77:7e:79:
93:ec:d0:d2:72:b3:e6:45:7a:6d:ce:33:32:e4:12:
5c:9c:22:e8:9a:e2:c7:7d:32:ab:0e:1a:5e:11:b4:
ae:6e:48:6a:77:89:7a:56:ed:fa:17:9b:c4:94:1c:
b1:c5:ec:24:d5:22:60:10:d8:d7:b5:1a:7b:3f:69:
73:0c:93:07:69:cf:cc:fb:c6:94:ea:51:5e:d4:0f:
65:1b:dc:c8:a5:8b:cb:c6:f7:e0:e9:75:b6:28:f9:
e2:f6:9a:6e:2b:ab:1a:f8:00:ef:a5:e1:95:39:d2:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BA:DE:23:9B:E3:8A:B9:17:F0:40:4F:B6:D2:1F:27:E3:13:7A:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D7F97429D1611F08FF74DD1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8d:b4:90:84:12:e9:6d:af:32:ba:ab:7e:43:36:23:b5:3f:
ff:ba:42:4d:e1:3c:33:65:c6:9c:6e:3c:9c:1c:b2:5a:26:f6:
c3:4d:50:c3:a8:cc:74:ea:75:4b:1b:3d:ee:67:a3:73:29:c2:
9a:8a:d3:e5:7f:b4:73:1d:8e:4b:80:8f:92:31:9e:30:c3:08:
d7:09:aa:ee:68:4a:1d:27:33:7f:8f:ea:ed:17:f2:8d:83:99:
51:e9:c5:24:f3:7f:57:87:e7:75:94:01:08:2d:93:90:49:03:
df:2e:f6:3f:03:97:0d:fa:e5:d4:a9:40:3f:b0:9e:31:1c:5d:
85:50:56:c3:28:38:ab:a6:01:ee:d2:7b:0f:c5:3f:cf:dd:be:
e0:ae:0f:15:62:a2:cd:88:40:0e:44:4d:e7:13:53:6d:f9:17:
c1:99:5b:73:80:04:a7:b3:1a:2d:68:5a:f2:08:01:ce:fc:17:
00:6d:9c:6f:f8:d9:02:57:88:ea:20:58:cb:01:26:0d:86:52:
bb:d2:48:90:51:95:ab:49:62:76:49:7f:c1:fd:4e:69:6b:a2:
7b:dc:d7:84:cd:c9:4d:51:37:21:38:78:ce:6b:4b:e1:32:f1:
57:94:10:b8:8c:4d:02:7d:32:cf:1a:d0:c6:a0:a1:cd:f9:56:
2c:60:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:35 2025 by rpki-client