Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07FE2DF4898911F0864603F2DAE4EC9C.roa
File: 07FE2DF4898911F0864603F2DAE4EC9C.roa (raw, json)
Hash identifier: K1dzWdoEb7wfgaLgu28a8mtIJvY64BJC9Dh0mQgerIw=
Subject key identifier: D8:C7:6C:82:C1:19:56:4F:61:19:20:E4:1B:86:32:B1:05:B2:2F:3E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BF3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07FE2DF4898911F0864603F2DAE4EC9C.roa
Signing time: Thu 04 Sep 2025 12:16:49 +0000
ROA not before: Thu 04 Sep 2025 12:16:44 +0000
ROA not after: Sat 04 Sep 2027 12:16:44 +0000
asID: 14618
IP address blocks: 154.16.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7155 (0x1bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 4 12:16:44 2025 GMT
Not After : Sep 4 12:16:44 2027 GMT
Subject: CN=68b98331-5823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:aa:d4:68:34:a7:b3:81:05:68:fd:f2:41:
c9:64:4b:d4:a0:3b:e9:d5:1e:f0:e7:39:26:42:90:
24:65:92:59:34:8c:f0:ca:44:41:ad:c5:0c:ea:a3:
38:be:d8:6b:8e:05:ee:84:47:26:11:5d:6a:2e:15:
a3:a3:f0:dc:34:49:0e:09:8d:49:35:62:ff:f3:03:
f0:87:19:bc:50:1e:06:b8:97:0a:82:99:5a:4a:43:
ae:a5:d0:2f:25:91:6f:49:05:29:fd:89:3f:a5:9b:
51:b4:1e:c5:eb:0b:11:e2:36:48:64:22:1a:7d:78:
a8:42:ea:08:7d:d1:ef:c8:10:df:42:8e:97:80:88:
77:4a:33:c1:e3:67:f1:93:08:92:63:55:87:56:37:
6c:5a:e5:96:a1:48:da:16:c7:b7:4d:02:21:b2:0a:
e7:a0:5c:8d:29:cd:bd:b2:64:b2:43:e7:4c:7b:ba:
f7:5a:09:69:45:da:ed:d3:34:d0:e4:b4:09:7a:b8:
78:5e:62:e8:e8:88:c1:ca:e9:33:d4:e9:f5:ea:28:
28:d4:f8:7d:c8:67:77:d0:12:2b:50:56:f3:45:b2:
71:fe:85:56:6d:ad:a7:c1:42:ae:48:ca:6e:d3:2b:
99:9c:08:9b:f2:bd:57:ed:75:05:c7:29:b0:ce:3a:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:6C:82:C1:19:56:4F:61:19:20:E4:1B:86:32:B1:05:B2:2F:3E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07FE2DF4898911F0864603F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:43:b6:ca:1a:c7:8b:6c:c2:61:c9:1f:2f:d7:5a:72:21:60:
0c:2d:31:e0:19:ee:42:fe:21:2d:96:ad:79:c2:26:74:f7:c9:
16:93:cd:8d:07:4c:d0:46:f0:f0:52:40:d7:2f:54:4c:9d:1c:
21:f2:d4:1d:61:d6:cd:b5:59:34:d2:3a:98:83:ed:fc:3e:51:
1c:37:07:be:8c:dc:33:95:a0:91:2c:ba:ff:1e:7e:76:af:ff:
0d:0d:79:e3:81:04:5c:e3:51:4c:db:f6:a9:ac:76:fa:d5:9d:
24:a4:98:eb:aa:e5:5d:58:6a:f4:01:36:e4:ef:4a:63:93:09:
13:bb:61:8e:c7:b2:2a:b4:67:73:c8:8c:11:c9:6a:a4:11:ff:
9b:0a:33:0d:e9:df:93:d2:6e:0c:45:a9:06:a5:a0:fe:66:1f:
73:27:f6:70:ab:c5:0a:3c:b5:ad:c7:f6:00:7b:2b:80:11:b2:
91:ea:52:7d:12:a6:95:06:ba:cc:3b:3a:b4:76:fb:2d:46:02:
35:4e:90:41:a0:25:8c:f0:8b:87:7d:6c:d5:7e:04:d9:f4:63:
41:c9:2c:01:48:72:21:78:25:cc:0f:7a:83:45:e9:6a:4f:24:
e8:9c:48:d3:3a:83:a3:13:94:20:ff:2e:7a:ae:b5:57:f2:58:
97:02:a9:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG/MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA5MDQxMjE2NDRaFw0yNzA5MDQxMjE2NDRaMBgxFjAU
BgNVBAMTDTY4Yjk4MzMxLTU4MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDewarUaDSns4EFaP3yQclkS9SgO+nVHvDnOSZCkCRlklk0jPDKREGtxQzq
ozi+2GuOBe6ERyYRXWouFaOj8Nw0SQ4JjUk1Yv/zA/CHGbxQHga4lwqCmVpKQ66l
0C8lkW9JBSn9iT+lm1G0HsXrCxHiNkhkIhp9eKhC6gh90e/IEN9CjpeAiHdKM8Hj
Z/GTCJJjVYdWN2xa5ZahSNoWx7dNAiGyCuegXI0pzb2yZLJD50x7uvdaCWlF2u3T
NNDktAl6uHheYujoiMHK6TPU6fXqKCjU+H3IZ3fQEitQVvNFsnH+hVZtrafBQq5I
ym7TK5mcCJvyvVftdQXHKbDOOkWVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2Mds
gsEZVk9hGSDkG4YysQWyLz4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzA3RkUyREY0ODk4OTExRjA4NjQ2MDNGMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEPkwDQYJKoZIhvcNAQEL
BQADggEBAB1Dtsoax4tswmHJHy/XWnIhYAwtMeAZ7kL+IS2WrXnCJnT3yRaTzY0H
TNBG8PBSQNcvVEydHCHy1B1h1s21WTTSOpiD7fw+URw3B76M3DOVoJEsuv8efnav
/w0NeeOBBFzjUUzb9qmsdvrVnSSkmOuq5V1YavQBNuTvSmOTCRO7YY7Hsiq0Z3PI
jBHJaqQR/5sKMw3p35PSbgxFqQaloP5mH3Mn9nCrxQo8ta3H9gB7K4ARspHqUn0S
ppUGusw7OrR2+y1GAjVOkEGgJYzwi4d9bNV+BNn0Y0HJLAFIciF4JcwPeoNF6WpP
JOicSNM6g6MTlCD/LnqutVfyWJcCqbU=
-----END CERTIFICATE-----
Generated at Wed Sep 17 13:11:21 2025 by rpki-client