Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77ED63EABF1D11F09F011BB5DAE4EC9C.roa
File: 77ED63EABF1D11F09F011BB5DAE4EC9C.roa (raw, json)
Hash identifier: V9cOo7rWYDg+AiuKrjH8ZoE6FGfJKCert0E8MgTvMMQ=
Subject key identifier: BD:21:32:8A:C0:C0:A5:50:9C:91:20:CD:CC:0C:1F:66:19:A1:3E:FC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1CA6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77ED63EABF1D11F09F011BB5DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 16:42:54 +0000
ROA not before: Tue 11 Nov 2025 16:42:49 +0000
ROA not after: Thu 11 Nov 2027 16:42:49 +0000
asID: 214208
IP address blocks: 154.16.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7334 (0x1ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 11 16:42:49 2025 GMT
Not After : Nov 11 16:42:49 2027 GMT
Subject: CN=6913678e-0fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:98:4a:67:7c:30:73:04:7b:24:8d:d0:2d:
8c:c4:0c:7c:b8:23:19:83:ea:c3:11:fb:5b:bf:ea:
cf:d4:91:c2:01:f3:96:83:9f:de:9d:11:27:77:3b:
84:26:0f:a9:48:73:ec:b6:a4:ef:7e:88:93:e7:eb:
92:8c:29:01:9f:cf:e9:da:3e:4a:5d:20:d5:65:e2:
a1:87:21:ef:ce:a4:5f:26:0c:48:6e:50:81:5d:6e:
a4:ab:4b:d9:8e:11:85:28:a5:5c:9a:60:e4:83:63:
9d:d2:f5:bb:ba:a0:08:63:7e:75:b1:19:c4:34:d1:
4b:de:96:47:47:f6:e4:1a:e2:2a:8c:0a:35:a0:9e:
70:79:14:75:1c:3e:71:77:81:ae:60:4d:33:26:c8:
a1:47:f3:d7:9d:9f:59:84:37:68:f7:cb:71:31:d2:
b2:60:8e:ba:ad:a6:3f:2a:27:3f:98:66:cb:ab:ad:
ce:f6:38:31:67:b2:8f:e1:86:a2:07:77:b4:52:68:
56:39:e4:d0:b6:84:c2:dc:78:6a:e0:7f:84:61:1a:
5f:d6:67:17:d6:18:e9:5a:c6:34:c7:44:27:e3:85:
ee:ea:99:b3:c4:ea:57:f5:d8:48:c4:d0:6d:af:57:
c3:ef:b5:5b:20:6a:78:83:83:af:b5:0d:5e:02:b9:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:32:8A:C0:C0:A5:50:9C:91:20:CD:CC:0C:1F:66:19:A1:3E:FC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/77ED63EABF1D11F09F011BB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.153.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a7:a2:c5:ec:7d:df:e0:07:15:d6:40:ec:2e:21:dd:39:c1:
c0:d8:fa:79:6d:88:32:09:16:24:67:bb:e3:a2:fc:d0:22:7e:
e0:c8:21:ff:35:24:e0:72:1a:39:6a:e5:ac:ee:19:78:a1:b1:
86:df:ba:e3:0c:f0:9f:55:1c:9e:09:f7:12:e8:a2:ba:25:03:
93:07:28:b6:81:b7:1a:17:9a:9f:07:73:a0:0a:20:24:5c:7b:
aa:c3:a3:98:c2:c7:ff:a2:36:8a:44:fa:53:9f:8b:c3:cd:e7:
d3:4f:1d:eb:fe:cf:ad:3c:7f:a4:46:a1:97:e7:d3:61:87:20:
b3:fb:a3:d3:7b:e6:ec:14:43:82:0e:05:51:60:13:29:05:28:
0f:14:54:ac:fa:da:86:36:4b:64:ff:9a:14:d4:0e:47:d8:81:
2e:8a:c4:61:4f:08:73:00:db:9c:57:c7:6e:f1:18:c9:e9:31:
3d:da:60:ff:09:4e:b4:38:c9:d8:ed:2b:82:29:52:c0:db:27:
ab:9c:9c:d4:4e:3f:b6:39:1e:33:82:a2:52:b5:3e:99:60:3d:
74:93:62:79:77:3f:46:c2:bd:24:a8:19:b4:0d:4e:15:62:aa:
7a:a8:d7:cc:b1:84:9f:fa:79:71:d9:b5:bc:95:68:2b:95:34:
61:dc:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 03:56:24 2025 by rpki-client