Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1AD42616B0D211F09F2B8BAEDAE4EC9C.roa
File: 1AD42616B0D211F09F2B8BAEDAE4EC9C.roa (raw, json)
Hash identifier: LFSHOK5W4F44KHpIMy9MegQjxN3eWnaIVYPLSxHz9r0=
Subject key identifier: 2C:EC:DC:55:EF:7F:25:54:6D:70:C7:10:C1:12:0C:90:55:30:46:A0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C72
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1AD42616B0D211F09F2B8BAEDAE4EC9C.roa
Signing time: Fri 24 Oct 2025 12:08:09 +0000
ROA not before: Fri 24 Oct 2025 12:08:04 +0000
ROA not after: Sun 24 Oct 2027 12:08:04 +0000
asID: 834
IP address blocks: 154.16.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7282 (0x1c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 24 12:08:04 2025 GMT
Not After : Oct 24 12:08:04 2027 GMT
Subject: CN=68fb6c29-c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:99:ce:8b:50:17:90:5c:23:8e:24:4d:81:
4f:c3:ea:77:7b:ec:49:4e:d6:bd:39:c5:61:d3:8a:
30:78:00:c1:16:6e:5d:d9:a6:91:26:85:12:f2:f4:
59:2a:ae:1f:da:11:4c:2a:02:da:01:1b:fb:e0:ec:
f5:9d:78:da:db:55:b2:40:72:39:1f:4c:eb:46:43:
dc:79:39:d9:fe:03:ef:f3:fe:c7:7a:5a:db:c2:c4:
c5:c1:24:d0:4c:84:d5:37:a7:55:aa:6f:93:ef:e2:
df:c2:86:db:83:ec:a9:03:4b:38:66:2c:0a:30:8c:
48:2b:73:c2:05:ce:9c:bd:c0:50:55:c3:46:32:27:
a8:bb:f7:bc:12:ab:4d:87:50:64:a0:97:33:34:50:
20:70:67:91:8d:01:ae:8b:9e:af:e7:12:55:f2:3e:
29:c0:bf:2c:25:7e:00:87:8b:35:e8:96:33:9d:c9:
26:ca:f7:b6:9f:ea:5a:c8:3c:77:a3:3f:4e:fd:d2:
d1:53:57:e4:34:d4:dd:c4:99:e5:f2:da:66:7d:a7:
eb:c4:d6:8a:e7:4b:aa:48:99:c8:e6:dc:96:cd:12:
55:eb:5d:32:da:b2:30:23:b2:79:3e:b7:34:8f:41:
f9:e0:cf:a3:32:3f:22:66:dc:16:38:41:1a:f6:a1:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:DC:55:EF:7F:25:54:6D:70:C7:10:C1:12:0C:90:55:30:46:A0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1AD42616B0D211F09F2B8BAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0a:74:22:78:0c:8a:ed:0b:54:0a:5d:e9:83:cd:e4:60:39:
ab:d8:3e:47:ef:ea:a4:2f:3b:55:de:07:5c:c8:e0:3b:d8:dc:
a5:af:f4:91:c2:09:44:bf:7c:d1:38:01:65:2c:fd:45:e9:b3:
33:ae:cb:b7:93:82:41:80:8a:b2:eb:c4:22:3f:80:e8:13:5f:
92:0b:c6:10:d3:0a:ae:12:ed:98:ee:c4:3d:c6:b2:bf:d4:fc:
e6:33:33:cf:35:d9:75:38:d0:91:9f:34:4c:70:01:bb:fe:37:
c4:da:98:57:f9:0e:14:37:63:3c:a3:f7:6f:ca:e8:0d:67:a6:
a8:55:f7:12:e6:68:05:d2:3b:a8:f3:62:8f:a6:45:f6:1d:c7:
84:8f:54:6c:b5:2a:eb:6a:ad:9a:c4:84:da:d6:bd:b2:85:eb:
ee:51:e4:80:29:4c:ee:cb:bf:30:ad:80:02:02:2c:df:ac:16:
32:06:e9:ee:3e:40:c6:88:9f:51:0f:b4:9a:ca:8d:17:4e:91:
41:d0:47:16:84:e8:68:ed:19:60:a9:fd:e7:84:97:49:4e:6c:
82:cb:d5:71:8b:e2:c9:92:53:3a:8d:2f:02:d9:5f:65:b7:ff:
91:bd:17:cd:b4:11:7e:75:d2:c7:4a:4f:b2:1e:6a:91:b4:c1:
ce:b4:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:36:13 2025 by rpki-client