Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081187F0BC7411F0AF6E77EBDAE4EC9C.roa
File: 081187F0BC7411F0AF6E77EBDAE4EC9C.roa (raw, json)
Hash identifier: MITUVgaJRJoIxXOngduC15BuOkZ3S4pZSaw3NnjWv7k=
Subject key identifier: 87:58:B7:C4:CD:3B:26:5C:B8:C1:11:69:97:66:28:6C:87:35:0A:F0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C8F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081187F0BC7411F0AF6E77EBDAE4EC9C.roa
Signing time: Sat 08 Nov 2025 07:24:59 +0000
ROA not before: Sat 08 Nov 2025 07:24:52 +0000
ROA not after: Sat 06 Nov 2027 07:24:52 +0000
asID: 834
IP address blocks: 154.16.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7311 (0x1c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 8 07:24:52 2025 GMT
Not After : Nov 6 07:24:52 2027 GMT
Subject: CN=690ef04b-7ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:74:05:d4:0d:9b:b3:4a:ea:2d:0b:16:f6:
7e:02:78:95:61:40:c9:5a:51:71:39:6c:b9:b9:b6:
1a:3c:13:7c:f8:9d:84:e6:63:54:34:3b:91:2c:91:
46:1d:4c:ec:c1:ab:27:6c:0e:b3:15:ba:31:19:a1:
ec:71:fe:56:49:1f:00:a1:51:78:f6:66:d9:6c:9e:
58:e3:69:58:ab:a2:9e:c6:f4:b6:e7:18:0a:05:99:
ce:d7:da:e5:4e:4f:68:3a:b9:cd:df:14:ac:7c:70:
66:a6:d4:80:3f:d7:37:62:62:a1:93:7c:d1:e5:0a:
40:68:7b:96:33:74:82:59:a1:1a:d4:de:c6:80:94:
73:a5:ce:0e:4c:97:05:7d:43:a2:59:06:a6:c3:ce:
fc:4a:04:98:24:58:1a:69:6e:ff:32:f1:ec:2b:67:
ad:1a:6a:c2:d7:46:55:4a:33:be:9a:01:e1:ea:0c:
94:6b:f5:fc:be:17:4c:d7:84:a9:88:fa:05:a2:e8:
89:f1:38:95:e1:5a:95:53:82:5e:c2:2e:ed:3f:30:
4b:0c:26:0c:ba:c1:1f:64:9e:85:55:cf:6b:d9:15:
4b:2b:a5:7d:45:0f:84:64:85:96:67:2b:ef:ed:45:
b4:ce:58:25:bb:a7:ec:6d:ee:0c:ec:e2:35:7d:bf:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:B7:C4:CD:3B:26:5C:B8:C1:11:69:97:66:28:6C:87:35:0A:F0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/081187F0BC7411F0AF6E77EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:eb:37:c7:25:21:0e:78:5d:fa:63:a7:be:a7:52:5b:68:d3:
20:f0:b4:21:e1:d3:3c:44:ed:8d:77:2b:bf:86:2c:be:76:27:
0f:da:03:e5:83:66:46:7c:c9:b8:b8:cb:5c:ad:b9:1b:6a:11:
dd:a8:f8:17:de:2c:e0:b1:22:2b:03:f5:5e:b3:69:f5:ca:9b:
2a:89:01:1f:b8:aa:6b:fd:2e:97:d1:e1:b7:ed:24:cf:9b:e2:
f9:75:97:7b:66:55:02:57:1b:c7:9e:b6:49:bc:3e:46:d5:48:
8a:b5:0d:5d:70:e3:3a:23:8e:1e:6f:26:e3:27:16:61:11:34:
77:60:e1:1b:3a:d1:71:af:0f:a4:8a:cf:e9:2b:23:21:43:10:
d9:c1:30:6c:4f:34:2f:cf:4b:52:6a:2b:14:63:ed:8c:86:76:
5b:a8:a9:41:d3:d4:19:6d:f8:61:ad:1e:f9:52:dd:18:76:a7:
46:d7:6b:93:7a:3c:52:8b:9e:fd:92:3e:59:4d:97:e1:ea:ea:
67:0a:fd:1f:13:1e:e3:c7:8b:d3:ea:90:95:77:f0:ea:f9:e9:
14:fc:07:b3:41:f1:44:f7:df:88:88:de:65:56:04:5b:d2:27:
d4:ff:dc:31:cd:04:85:36:e1:a7:0a:70:01:e4:1c:ff:52:08:
bb:b6:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 03:51:43 2025 by rpki-client