Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6D60EF9E817B11F0B87798E3DAE4EC9C.roa
File: 6D60EF9E817B11F0B87798E3DAE4EC9C.roa (raw, json)
Hash identifier: kUtPGwz5UtbsNBfK82erqgjr6pCnPVAfRiF6qt4hhuU=
Subject key identifier: C7:1D:36:68:2A:69:95:CE:5A:AA:60:AC:A0:3C:0C:71:66:7E:8A:B8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BCA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6D60EF9E817B11F0B87798E3DAE4EC9C.roa
Signing time: Mon 25 Aug 2025 06:19:17 +0000
ROA not before: Mon 25 Aug 2025 06:19:12 +0000
ROA not after: Wed 25 Aug 2027 06:19:12 +0000
asID: 147176
IP address blocks: 154.16.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7114 (0x1bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 25 06:19:12 2025 GMT
Not After : Aug 25 06:19:12 2027 GMT
Subject: CN=68ac0065-a02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:d4:cf:ff:00:3a:ca:15:d4:0c:66:1f:af:
f4:6b:3f:ff:85:78:bf:b1:da:1f:36:09:dd:2b:35:
81:06:f9:2c:25:bd:b2:42:51:aa:da:60:b2:64:e2:
e8:7c:21:66:7b:97:c3:58:b2:b1:fe:67:7a:87:e8:
3e:f1:e3:2b:c1:71:3a:ac:44:e0:43:48:1a:0d:79:
b8:43:61:7d:fa:bf:ae:bd:1e:f8:dd:4b:b1:0b:b1:
29:33:4d:9f:17:00:e5:44:44:a7:c7:c0:04:5e:9a:
2a:a9:67:2e:e9:aa:a8:d3:fd:09:0c:d4:9a:99:52:
85:85:f2:0a:4d:d1:8f:7a:2d:b3:93:ac:04:3d:af:
09:f9:b2:5e:50:33:7a:88:3d:44:16:c5:41:19:5b:
1b:90:ab:34:29:8e:94:cd:20:6e:35:68:b8:ad:f0:
25:d7:af:60:dd:0e:6f:86:6c:af:2f:86:c9:16:2d:
87:80:c5:25:dc:05:d8:4d:4a:c1:e8:c1:63:a2:1f:
98:31:57:a7:91:ee:6c:40:50:07:88:65:ed:4a:d7:
f1:bd:06:4d:1d:b9:11:bc:a9:a9:cb:22:5d:61:bc:
5e:5c:11:0e:32:92:53:06:66:a0:47:f2:8d:b5:4e:
e7:0d:62:4b:04:8a:2d:d9:b3:af:5d:58:87:72:6a:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:36:68:2A:69:95:CE:5A:AA:60:AC:A0:3C:0C:71:66:7E:8A:B8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6D60EF9E817B11F0B87798E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.66.0/24
Signature Algorithm: sha256WithRSAEncryption
91:66:a8:25:d1:1c:91:2d:16:8e:f2:0e:6b:3a:ea:b6:f5:ba:
15:5c:38:65:2b:e7:4d:94:e0:9f:06:d2:15:1f:6c:0e:f3:21:
27:c4:0b:94:d0:bd:fd:6f:64:ff:c7:b7:9d:c0:3c:11:c9:8c:
1f:2b:31:ae:d0:36:b7:ae:1d:73:bc:2c:10:0c:fb:fc:28:ad:
65:ac:b6:7f:a0:46:f9:e9:04:42:33:0c:9e:1a:e4:cd:0e:86:
4b:8d:a2:d7:76:c4:ca:fc:2d:75:9b:b1:a5:37:3c:e9:ad:b0:
8d:d4:59:85:e8:d7:73:c1:8a:4c:b6:cb:e4:30:13:3d:66:c6:
d2:23:a7:33:48:a0:24:0e:a0:33:45:d9:d7:b2:4a:83:2c:e0:
ab:f0:30:e5:82:5e:b6:3a:5b:c1:7c:50:4f:d2:12:4d:f9:9e:
d3:40:b8:07:ef:08:d7:7b:66:46:2f:33:35:3f:8c:68:de:b9:
56:e5:d7:7b:d2:8a:cc:3a:82:2e:37:1b:4d:88:71:65:33:e2:
f0:8a:5b:60:3d:7e:26:36:3b:26:f9:21:05:95:ff:f3:21:08:
dc:55:90:44:34:48:8d:1f:c9:29:9e:d9:47:15:70:94:d7:cd:
61:19:06:f8:62:ed:b1:ab:6b:d4:7a:7f:9d:9a:e5:c4:d0:58:
45:b9:55:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG8owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA4MjUwNjE5MTJaFw0yNzA4MjUwNjE5MTJaMBgxFjAU
BgNVBAMTDTY4YWMwMDY1LWEwMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnptTP/wA6yhXUDGYfr/RrP/+FeL+x2h82Cd0rNYEG+SwlvbJCUaraYLJk
4uh8IWZ7l8NYsrH+Z3qH6D7x4yvBcTqsROBDSBoNebhDYX36v669HvjdS7ELsSkz
TZ8XAOVERKfHwARemiqpZy7pqqjT/QkM1JqZUoWF8gpN0Y96LbOTrAQ9rwn5sl5Q
M3qIPUQWxUEZWxuQqzQpjpTNIG41aLit8CXXr2DdDm+GbK8vhskWLYeAxSXcBdhN
SsHowWOiH5gxV6eR7mxAUAeIZe1K1/G9Bk0duRG8qanLIl1hvF5cEQ4yklMGZqBH
8o21TucNYksEii3Zs69dWIdyahJTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxx02
aCpplc5aqmCsoDwMcWZ+irgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzZENjBFRjlFODE3QjExRjBCODc3OThFM0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEIwDQYJKoZIhvcNAQEL
BQADggEBAJFmqCXRHJEtFo7yDms66rb1uhVcOGUr502U4J8G0hUfbA7zISfEC5TQ
vf1vZP/Ht53APBHJjB8rMa7QNreuHXO8LBAM+/worWWstn+gRvnpBEIzDJ4a5M0O
hkuNotd2xMr8LXWbsaU3POmtsI3UWYXo13PBiky2y+QwEz1mxtIjpzNIoCQOoDNF
2deySoMs4KvwMOWCXrY6W8F8UE/SEk35ntNAuAfvCNd7ZkYvMzU/jGjeuVbl13vS
isw6gi43G02IcWUz4vCKW2A9fiY2Oyb5IQWV//MhCNxVkEQ0SI0fySme2UcVcJTX
zWEZBvhi7bGra9R6f52a5cTQWEW5VaI=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:28:09 2025 by rpki-client