Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63C2A5C6BBAB11F0B5880878DAE4EC9C.roa
File: 63C2A5C6BBAB11F0B5880878DAE4EC9C.roa (raw, json)
Hash identifier: 65qNCC/TqisAHEhRMXIok+5Z7G35uz0CWaIUoPNtqVU=
Subject key identifier: B2:88:CB:52:B1:1A:15:11:40:27:F6:4A:37:81:BE:C5:1F:C1:1C:CF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C86
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63C2A5C6BBAB11F0B5880878DAE4EC9C.roa
Signing time: Fri 07 Nov 2025 07:28:44 +0000
ROA not before: Fri 07 Nov 2025 07:28:33 +0000
ROA not after: Sat 06 Nov 2027 07:28:33 +0000
asID: 213711
IP address blocks: 154.16.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7302 (0x1c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 7 07:28:33 2025 GMT
Not After : Nov 6 07:28:33 2027 GMT
Subject: CN=690d9fac-d686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:91:de:3b:a5:c5:bd:6e:5e:37:d2:e2:89:
76:07:c9:d7:06:b7:45:98:dd:18:f0:ed:ed:d7:91:
1e:bb:e0:65:eb:31:cf:3c:e6:38:81:fc:c7:3c:fc:
95:12:51:21:b5:74:de:e6:a3:f8:50:86:ef:e5:99:
be:f2:47:71:2b:9e:55:30:91:42:6a:d1:fe:49:4a:
6f:5e:9d:fb:fc:db:8b:92:30:0c:13:10:d3:20:0e:
fa:3a:83:31:a4:29:c9:7f:81:41:12:57:b9:de:9c:
22:39:95:05:c1:df:e3:7e:56:29:c8:12:1e:5f:f9:
ce:a5:08:4e:7e:a0:f0:4a:be:4c:61:ec:36:4b:78:
2f:9c:1d:6b:5a:43:ee:3a:fe:3b:3f:33:91:56:16:
90:57:f8:2c:29:31:af:c8:93:ae:37:3e:be:88:3b:
7f:29:f8:cb:24:d1:cd:e6:49:19:eb:7d:07:04:4a:
cb:b3:97:bc:35:4f:81:1a:bd:cb:2f:c4:24:15:e1:
5c:d6:7b:29:e0:43:72:47:8d:39:d9:62:da:f8:88:
d3:cf:10:b5:73:4f:51:cf:2b:99:c8:1a:8a:88:1c:
dd:3d:d2:81:4c:ec:72:ba:ff:85:17:c9:6a:d2:da:
38:76:84:24:aa:b1:7f:18:40:0f:20:83:4c:81:ed:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:88:CB:52:B1:1A:15:11:40:27:F6:4A:37:81:BE:C5:1F:C1:1C:CF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63C2A5C6BBAB11F0B5880878DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:13:3e:75:6f:b6:ac:9f:cc:e7:4b:d6:d3:8e:f4:e0:42:2f:
b0:b2:f7:f2:bd:f4:dc:ed:a0:cf:65:81:1e:15:00:ba:e3:13:
f5:13:92:50:64:38:d4:3e:a0:b7:af:d9:24:c9:27:20:ad:06:
49:1e:86:58:0b:f5:8f:b4:f1:be:39:f9:4c:f9:1e:7d:a5:3a:
3a:e6:8f:bd:3c:f0:bf:d5:c0:20:9b:87:00:95:dc:6e:18:47:
43:d6:45:8b:3d:64:7d:20:eb:dd:dc:09:0a:6d:88:75:07:57:
e1:13:b1:2b:6b:7f:00:0b:8d:ae:0e:04:44:3f:f7:6e:ba:49:
87:3c:df:7f:59:8d:79:1d:55:b8:af:01:f1:fd:6d:cc:0c:72:
93:49:98:69:ab:f3:b3:db:d9:f7:57:bb:52:49:9f:bc:d7:d0:
85:25:fe:69:c9:56:5a:d9:ca:84:ed:9c:d9:18:a0:ed:d5:2a:
8b:d8:e3:1d:24:53:a7:0c:50:86:88:4c:91:14:0a:37:3f:66:
6c:40:69:4c:ee:41:25:de:a1:e6:f4:11:1d:f6:90:e5:e4:0e:
d7:af:70:8e:3b:7b:7f:7d:27:e9:de:78:bf:09:03:02:21:fc:
48:38:36:b1:3a:8f:80:ba:37:6b:ad:2f:8f:2c:b5:fd:fd:97:
98:29:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 03:56:23 2025 by rpki-client