Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/06BE15C0BEDC11F0942DF899DAE4EC9C.roa
File: 06BE15C0BEDC11F0942DF899DAE4EC9C.roa (raw, json)
Hash identifier: PEUX52HwgtMJnDqeA4s5zNgQzUcH/7cXMNVEf9pNZhs=
Subject key identifier: 03:84:9A:8D:B8:26:C8:65:2A:80:84:6D:63:4D:21:34:13:37:DD:F7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C98
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/06BE15C0BEDC11F0942DF899DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 08:54:27 +0000
ROA not before: Tue 11 Nov 2025 08:54:22 +0000
ROA not after: Sat 06 Nov 2027 08:54:22 +0000
asID: 9087
IP address blocks: 154.16.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7320 (0x1c98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 11 08:54:22 2025 GMT
Not After : Nov 6 08:54:22 2027 GMT
Subject: CN=6912f9c3-5235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:9b:b4:7a:41:0d:5c:c1:4b:49:58:91:68:
f3:c8:dc:91:15:ee:99:57:8a:7f:dc:1e:e4:47:0c:
fe:6b:12:a4:53:cf:8f:3f:fa:82:3f:b5:00:ec:23:
8e:42:49:c0:df:bb:2e:02:9a:27:63:22:74:63:9c:
a4:ab:95:0c:c6:c8:12:6d:f8:6e:88:7d:1c:13:d8:
ee:18:46:c2:ce:a8:e9:01:d0:ee:64:01:f6:47:ac:
bb:6b:7c:09:d9:88:53:48:a1:05:33:3e:f6:2f:c2:
6e:82:0a:00:3f:d3:8d:73:ee:41:05:a0:f7:c2:b1:
b3:54:55:ea:88:ae:60:0d:9c:45:de:05:e9:f6:9e:
1a:53:16:6d:e1:f6:8d:71:3f:fc:46:d9:f0:0d:ff:
9a:1a:ef:4a:8e:01:a5:c5:4b:56:80:e5:2d:11:0d:
95:39:59:70:6a:21:33:92:63:08:21:c5:9b:bb:01:
18:0d:56:05:cc:46:2b:b5:0e:00:2f:b5:21:27:ea:
da:a5:cb:e3:e0:14:96:9e:77:93:16:9e:08:4a:17:
1e:75:1a:26:74:54:58:8a:95:ff:f8:67:4c:2d:f2:
35:79:78:ab:d0:83:d7:87:b7:63:c1:a2:0d:6a:7a:
e2:fb:82:a6:f5:2f:4f:dc:ea:16:cc:93:90:92:02:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:9A:8D:B8:26:C8:65:2A:80:84:6D:63:4D:21:34:13:37:DD:F7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/06BE15C0BEDC11F0942DF899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:96:ce:81:fa:62:e9:19:31:a0:06:3f:a0:c5:9d:c2:b4:25:
a1:ab:83:6c:c5:ed:39:e7:76:22:56:88:fb:4e:ba:48:6e:38:
42:e8:07:3c:98:73:6b:52:ae:25:5a:ec:ab:46:cc:b7:ef:6f:
de:e3:33:7d:10:3a:f1:8c:da:51:51:5b:de:7a:41:09:27:8e:
eb:fb:d0:e8:90:01:94:4e:65:b3:e2:56:f3:6f:f0:ce:81:26:
c3:97:df:11:e4:ad:0d:2c:0d:fa:c1:17:46:fe:6e:18:77:74:
af:31:fd:83:ed:6d:66:9f:86:af:98:3e:8b:a6:8b:5b:95:63:
7a:f5:2e:b9:aa:a7:f4:05:27:4d:70:61:9e:35:4a:4c:60:fb:
03:cc:3e:8f:d1:c2:7e:b5:9e:1b:2a:c2:4d:a1:a8:e2:26:2c:
4f:9a:21:2b:41:c9:70:47:e9:ab:df:0d:10:53:79:b0:68:2d:
bf:08:ac:84:0a:84:27:e3:a7:54:41:b0:1e:9e:72:4d:ca:ef:
bc:8d:eb:58:0a:1a:4a:bf:10:29:aa:a7:22:ac:05:3c:24:8c:
a5:2f:12:da:cb:f7:59:36:53:22:69:4b:3f:1c:40:e9:6c:6b:
2d:b4:9b:d7:6b:81:d4:0f:f5:aa:43:bd:78:f2:92:1d:4a:a8:
b1:48:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 03:57:41 2025 by rpki-client