Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51D5A2E0833511F0B4729FAEDAE4EC9C.roa
File: 51D5A2E0833511F0B4729FAEDAE4EC9C.roa (raw, json)
Hash identifier: k8tfOgbG4EWFRITHA+J56XWaGmU0hNyd1bDTZHk3ip4=
Subject key identifier: 64:7B:27:99:2F:8A:34:27:2C:E4:98:62:F0:DD:AA:0B:F3:DC:82:C8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BD0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51D5A2E0833511F0B4729FAEDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:02:28 +0000
ROA not before: Wed 27 Aug 2025 11:02:23 +0000
ROA not after: Fri 27 Aug 2027 11:02:23 +0000
asID: 42831
IP address blocks: 154.16.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7120 (0x1bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 11:02:23 2025 GMT
Not After : Aug 27 11:02:23 2027 GMT
Subject: CN=68aee5c4-4d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:63:68:36:98:1e:db:a5:7c:ba:52:47:ff:
23:bd:14:bf:8e:81:ea:b3:86:5c:b4:19:85:94:d2:
6f:22:82:9e:27:ef:d3:92:0b:df:9f:af:77:ed:f2:
46:75:54:e9:0d:9d:0f:6b:d0:3a:77:55:6c:26:d9:
9b:32:78:78:97:e8:ce:17:11:2e:48:e5:87:a6:ac:
a5:9e:6d:32:30:4a:65:cd:34:d1:32:b1:dc:64:5f:
c4:39:e3:8b:86:0e:ca:84:00:f3:72:2d:ce:96:18:
40:c2:e1:a4:86:83:23:a6:4c:7c:d9:5c:8d:42:cf:
a8:69:a3:05:a7:15:ed:b5:a9:2d:f6:b5:e8:57:ce:
41:ea:c8:6c:bb:95:f3:e9:9e:57:28:fb:bb:1e:3b:
f8:73:2c:0a:37:27:88:c2:1a:2e:2b:4f:41:6d:ad:
67:d3:5c:c4:b6:2a:63:30:76:5e:9a:bb:27:21:a4:
42:1a:20:9a:79:59:2c:b4:85:a9:ca:98:1c:c8:2b:
19:06:75:4a:24:97:8b:98:eb:5a:d6:6b:eb:98:06:
a8:9e:a9:eb:f6:d0:89:3b:b2:46:9e:d9:3e:de:90:
0a:c8:81:a7:0e:c9:2f:d3:37:43:e2:1f:09:aa:1f:
31:5b:92:09:05:4c:04:b0:dd:12:14:04:d8:ea:b8:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:27:99:2F:8A:34:27:2C:E4:98:62:F0:DD:AA:0B:F3:DC:82:C8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51D5A2E0833511F0B4729FAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.7.0/24
Signature Algorithm: sha256WithRSAEncryption
84:91:2e:4e:3c:1f:2a:ba:14:79:2e:0f:c7:09:e0:0d:5b:fe:
23:04:1e:94:33:15:78:10:94:c2:77:52:b0:7d:e4:c7:35:6b:
64:b3:dd:f6:24:2c:97:2f:94:c8:a0:21:4b:53:6e:1b:17:4f:
dc:a8:e5:13:73:25:59:5c:cc:80:13:6b:1c:d7:78:29:e7:a7:
16:2e:a2:04:08:04:58:19:5d:cd:ef:ab:ab:7c:55:be:73:61:
ee:30:1c:cf:b2:25:89:17:75:c2:6e:b9:92:36:de:f9:b6:ad:
2b:86:ad:e2:b8:f9:ab:4d:d7:ae:68:06:e7:8b:3c:cc:86:4c:
97:de:59:af:19:8d:cd:cd:6c:ee:9f:bb:11:5f:ef:f4:e2:98:
bd:b6:53:c7:b1:09:e4:1f:33:9f:86:2b:34:a2:48:fc:60:b5:
c8:9b:0e:93:37:a7:fe:56:b3:b9:24:f0:61:e9:54:c8:23:58:
14:d3:3f:c7:7c:fe:4c:31:bf:16:cb:3f:f1:35:83:74:38:fe:
24:f7:1d:8a:2a:02:0e:05:1f:bc:61:0d:b2:69:68:b7:49:b1:
e3:d7:b8:65:d2:76:47:b0:74:aa:7f:c3:fc:62:8a:d8:7c:b8:
af:d8:ff:59:eb:1a:1c:ff:06:08:70:23:19:f0:f9:e6:8c:e8:
89:12:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 18:03:52 2025 by rpki-client