Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBA46C3A648011F0B1D7DA81DAE4EC9C.roa
File: FBA46C3A648011F0B1D7DA81DAE4EC9C.roa (raw, json)
Hash identifier: 85QMOITALB49XXlQDpD7LWr9myNtxVNaQqRxIJVW9a4=
Subject key identifier: D7:7F:87:01:F1:2B:15:19:A4:15:72:28:B1:CD:AE:C2:93:36:C8:3B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B81
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBA46C3A648011F0B1D7DA81DAE4EC9C.roa
Signing time: Sat 19 Jul 2025 09:15:59 +0000
ROA not before: Sat 19 Jul 2025 09:15:54 +0000
ROA not after: Mon 19 Jul 2027 09:15:54 +0000
asID: 216193
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7041 (0x1b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 19 09:15:54 2025 GMT
Not After : Jul 19 09:15:54 2027 GMT
Subject: CN=687b624f-5339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:f8:8c:a8:2f:be:52:38:d7:a3:ee:16:30:
0f:a3:2a:4d:ff:0c:4a:23:3f:83:00:56:4a:e2:dd:
09:e0:6a:65:ed:72:46:81:85:f4:95:5b:a7:84:c7:
cb:3e:03:1f:e5:f7:8b:9f:16:27:d0:28:b6:13:76:
e6:77:af:58:1f:40:b8:f0:1b:6c:27:4a:b6:dd:6b:
11:0a:a0:cb:ec:05:4c:60:e1:f7:11:1f:11:b2:34:
db:40:52:76:2f:27:66:6e:d2:5d:ff:c6:75:c9:dc:
4f:2d:6f:0c:90:f0:56:59:42:32:e9:b5:3e:c7:82:
47:f2:d8:fb:24:5b:f8:ab:1f:3d:a3:2a:31:21:f7:
52:7b:7d:d8:53:f5:3d:ef:df:d6:cb:f5:c9:7e:c4:
fc:49:b1:8c:be:f1:f3:0d:e6:65:64:e8:f5:6a:37:
6f:4f:e4:90:87:2e:d5:57:fb:94:59:28:15:85:7b:
3d:1f:b5:58:23:0c:0f:d7:06:1f:52:0b:0e:81:9a:
58:bd:37:f4:ab:72:aa:95:ed:24:59:70:3f:83:bc:
28:7f:a0:22:57:d5:e0:66:83:38:ac:3b:d6:8b:e9:
53:ef:c4:2d:21:ce:fd:4a:2b:1e:6f:3f:d8:4a:8b:
05:ce:78:d5:f8:b2:9a:a0:07:aa:aa:64:41:4d:df:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:87:01:F1:2B:15:19:A4:15:72:28:B1:CD:AE:C2:93:36:C8:3B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBA46C3A648011F0B1D7DA81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:07:41:dc:ad:b3:21:27:c4:71:7c:b8:01:a2:0e:21:72:6f:
de:0f:6f:02:c3:a6:3e:00:2f:e3:02:88:c8:44:62:86:70:24:
89:42:72:b2:1c:6b:32:72:4b:f4:75:a5:56:ce:ba:69:40:3c:
02:ce:d7:96:b7:27:03:51:66:af:c8:12:d6:fe:84:80:07:48:
2e:9e:54:65:1d:6b:08:25:5d:bd:c9:cf:d2:f9:62:fd:38:80:
13:f3:d3:aa:c2:72:e8:5a:e1:62:3b:49:6d:f9:17:35:7b:1f:
bd:b4:c9:52:39:31:6a:6f:27:4d:0d:59:5b:78:20:15:b7:b4:
f6:b8:67:1e:fc:5f:2c:37:02:9f:d7:dd:b8:67:cc:0b:19:dc:
6f:64:61:f5:4e:64:11:db:8f:7c:d1:01:e8:ff:6d:10:67:6f:
50:2f:56:85:d0:9a:60:9c:30:3f:97:84:bd:98:a5:79:9d:64:
6f:5a:9e:10:bb:2e:8c:9c:48:7f:9a:fb:30:6b:1f:f1:35:38:
5f:dc:18:25:3b:07:f6:12:d2:88:b4:e7:b0:00:d2:9c:ab:9b:
e7:e6:c4:4d:ec:6c:f1:82:ab:d9:c6:31:2d:4e:7c:bb:51:39:
7c:91:61:97:6c:1f:45:7d:5f:4e:7b:28:d1:ac:76:90:41:94:
81:48:e1:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG4EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA3MTkwOTE1NTRaFw0yNzA3MTkwOTE1NTRaMBgxFjAU
BgNVBAMTDTY4N2I2MjRmLTUzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDr8fiMqC++UjjXo+4WMA+jKk3/DEojP4MAVkri3QngamXtckaBhfSVW6eE
x8s+Ax/l94ufFifQKLYTduZ3r1gfQLjwG2wnSrbdaxEKoMvsBUxg4fcRHxGyNNtA
UnYvJ2Zu0l3/xnXJ3E8tbwyQ8FZZQjLptT7Hgkfy2PskW/irHz2jKjEh91J7fdhT
9T3v39bL9cl+xPxJsYy+8fMN5mVk6PVqN29P5JCHLtVX+5RZKBWFez0ftVgjDA/X
Bh9SCw6Bmli9N/SrcqqV7SRZcD+DvCh/oCJX1eBmgzisO9aL6VPvxC0hzv1KKx5v
P9hKiwXOeNX4spqgB6qqZEFN3771AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU13+H
AfErFRmkFXIosc2uwpM2yDswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0ZCQTQ2QzNBNjQ4MDExRjBCMUQ3REE4MURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEP4wDQYJKoZIhvcNAQEL
BQADggEBALgHQdytsyEnxHF8uAGiDiFyb94PbwLDpj4AL+MCiMhEYoZwJIlCcrIc
azJyS/R1pVbOumlAPALO15a3JwNRZq/IEtb+hIAHSC6eVGUdawglXb3Jz9L5Yv04
gBPz06rCcuha4WI7SW35FzV7H720yVI5MWpvJ00NWVt4IBW3tPa4Zx78Xyw3Ap/X
3bhnzAsZ3G9kYfVOZBHbj3zRAej/bRBnb1AvVoXQmmCcMD+XhL2YpXmdZG9anhC7
LoycSH+a+zBrH/E1OF/cGCU7B/YS0oi057AA0pyrm+fmxE3sbPGCq9nGMS1OfLtR
OXyRYZdsH0V9X057KNGsdpBBlIFI4aM=
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:44 2025 by rpki-client