Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/265B3172BEF211F0B746D5A8DAE4EC9C.roa
File: 265B3172BEF211F0B746D5A8DAE4EC9C.roa (raw, json)
Hash identifier: lPbT6RJ/n3TAEyG2b3YR1tNVMeGXEawRLy+SQMpcEhY=
Subject key identifier: E6:C5:E9:E1:F2:E7:D2:49:CE:CA:A4:05:E8:E5:16:11:B7:77:53:E7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1CA2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/265B3172BEF211F0B746D5A8DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 11:32:49 +0000
ROA not before: Tue 11 Nov 2025 11:32:44 +0000
ROA not after: Sat 06 Nov 2027 11:32:44 +0000
asID: 6079
IP address blocks: 154.16.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7330 (0x1ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 11 11:32:44 2025 GMT
Not After : Nov 6 11:32:44 2027 GMT
Subject: CN=69131ee1-d4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:fc:b2:d3:85:fa:98:8d:72:20:69:6a:b8:
0d:08:30:e2:45:83:42:5f:29:df:b3:b0:c4:0d:08:
4f:5d:49:29:a3:2c:1e:b5:eb:72:32:33:55:ed:65:
e1:d4:39:81:91:a1:e6:f2:1c:d5:f2:5a:61:48:09:
bf:59:fd:f2:36:da:4f:0b:1d:6f:0a:ed:7b:6f:3b:
9a:74:90:b4:c6:54:2a:4b:b9:b3:cc:41:2c:f7:3e:
43:18:b0:25:73:68:22:5e:57:ab:5c:9b:ea:65:40:
fc:50:80:23:7f:c0:8b:06:db:65:08:09:82:7b:ec:
27:57:6f:95:6e:73:4a:1a:82:7f:48:32:db:56:06:
4f:ab:16:44:b2:33:17:5d:4a:76:8a:17:fc:e2:44:
1c:36:98:d8:1d:39:19:85:30:99:0a:ca:75:78:6f:
ec:b2:d6:24:3d:96:b2:6f:ed:62:7b:fc:cc:6e:ed:
51:67:3c:f9:6e:55:e4:d8:12:f7:5f:32:f9:b5:fb:
9b:99:db:64:fe:8a:8e:d4:19:8a:df:e4:ea:47:c6:
d2:79:c1:1a:34:83:df:49:65:a2:95:5c:e8:1d:bc:
40:a7:81:ef:d4:f6:1c:b5:e0:97:94:19:62:02:e2:
1a:21:9a:d3:10:1d:fd:85:68:cd:f7:92:d6:8e:bd:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:E9:E1:F2:E7:D2:49:CE:CA:A4:05:E8:E5:16:11:B7:77:53:E7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/265B3172BEF211F0B746D5A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ac:25:1a:e2:32:a4:6c:29:1f:81:1a:90:7b:ef:86:58:cd:
85:63:ec:09:2b:05:e2:63:e2:96:9c:a9:f3:39:31:c9:1a:17:
93:6c:d4:83:a5:db:d1:f1:49:61:fc:c6:c6:7f:1a:22:45:e9:
0f:1d:8d:91:0a:54:58:70:49:cc:38:ce:33:62:90:65:14:7b:
f3:1e:8b:ab:10:e6:80:6a:4e:2e:44:c0:71:d9:93:f9:6b:8e:
cb:a9:3c:76:e4:d5:1a:11:a4:0a:ba:87:83:3c:0b:14:e8:4f:
fb:7d:f5:7a:6f:ea:fd:19:28:d9:6e:fa:a1:f3:50:14:fa:58:
41:d1:a4:be:58:de:04:b2:bd:1f:0a:74:66:57:91:5a:86:15:
17:ac:21:34:21:a1:ac:f3:91:e5:b9:38:c7:61:30:f2:ab:14:
6f:9e:9b:6c:9a:89:1d:06:26:a9:6c:ee:ef:4e:1c:86:87:e2:
44:0d:e7:a7:c6:96:71:b7:89:82:30:a4:57:ac:17:53:7e:a4:
d2:43:9e:67:3f:89:a8:5d:8c:e9:d0:f2:f5:e5:34:6a:78:87:
67:20:03:10:e5:0b:4a:b5:fa:6b:cd:a0:41:fa:ba:20:50:0b:
f1:96:6f:9f:fa:8d:48:b8:ed:da:90:3c:68:78:31:9a:71:f2:
e8:fe:9c:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHKIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTExMTExMTMyNDRaFw0yNzExMDYxMTMyNDRaMBgxFjAU
BgNVBAMTDTY5MTMxZWUxLWQ0YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4Afyy04X6mI1yIGlquA0IMOJFg0JfKd+zsMQNCE9dSSmjLB6163IyM1Xt
ZeHUOYGRoebyHNXyWmFICb9Z/fI22k8LHW8K7XtvO5p0kLTGVCpLubPMQSz3PkMY
sCVzaCJeV6tcm+plQPxQgCN/wIsG22UICYJ77CdXb5Vuc0oagn9IMttWBk+rFkSy
MxddSnaKF/ziRBw2mNgdORmFMJkKynV4b+yy1iQ9lrJv7WJ7/Mxu7VFnPPluVeTY
EvdfMvm1+5uZ22T+io7UGYrf5OpHxtJ5wRo0g99JZaKVXOgdvECnge/U9hy14JeU
GWIC4hohmtMQHf2FaM33ktaOvWzlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5sXp
4fLn0knOyqQF6OUWEbd3U+cwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzI2NUIzMTcyQkVGMjExRjBCNzQ2RDVBOERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEA0wDQYJKoZIhvcNAQEL
BQADggEBAEusJRriMqRsKR+BGpB774ZYzYVj7AkrBeJj4pacqfM5MckaF5Ns1IOl
29HxSWH8xsZ/GiJF6Q8djZEKVFhwScw4zjNikGUUe/Mei6sQ5oBqTi5EwHHZk/lr
jsupPHbk1RoRpAq6h4M8CxToT/t99Xpv6v0ZKNlu+qHzUBT6WEHRpL5Y3gSyvR8K
dGZXkVqGFResITQhoazzkeW5OMdhMPKrFG+em2yaiR0GJqls7u9OHIaH4kQN56fG
lnG3iYIwpFesF1N+pNJDnmc/iahdjOnQ8vXlNGp4h2cgAxDlC0q1+mvNoEH6uiBQ
C/GWb5/6jUi47dqQPGh4MZpx8uj+nK4=
-----END CERTIFICATE-----
Generated at Fri Nov 14 03:53:58 2025 by rpki-client