Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/871B2288BC7211F0A0DBDDE2DAE4EC9C.roa
File: 871B2288BC7211F0A0DBDDE2DAE4EC9C.roa (raw, json)
Hash identifier: 0vzvoy9PrYRHlXE9LqwnK56QjuJ+ePexf6YTp43dPIA=
Subject key identifier: 4A:A6:53:E7:BD:4B:8B:F8:9B:AF:8D:49:C6:E0:7A:4E:44:86:7F:35
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C89
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/871B2288BC7211F0A0DBDDE2DAE4EC9C.roa
Signing time: Sat 08 Nov 2025 07:14:13 +0000
ROA not before: Sat 08 Nov 2025 07:14:07 +0000
ROA not after: Sat 06 Nov 2027 07:14:07 +0000
asID: 834
IP address blocks: 154.16.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7305 (0x1c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 8 07:14:07 2025 GMT
Not After : Nov 6 07:14:07 2027 GMT
Subject: CN=690eedc5-7c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:bc:f9:ee:15:34:55:05:00:bd:80:37:45:
b3:23:5b:c5:64:7c:c3:73:72:30:a2:1e:41:96:08:
11:12:a8:d0:31:0e:fb:1d:89:1d:da:37:a9:f8:04:
83:bd:d9:2a:66:58:f4:cb:a7:33:35:ec:37:e8:34:
99:99:29:9f:4d:bc:05:f3:56:a9:52:c7:91:c9:1a:
9b:4b:d7:b6:b2:05:36:3f:64:99:f8:f3:a6:ba:9a:
6d:55:2d:d1:d5:de:1c:3f:35:54:ed:6f:aa:76:0b:
9a:f3:d8:77:b4:fb:73:b0:8c:56:e3:79:59:e0:f3:
4d:64:93:f0:5c:e8:6f:f0:3f:da:36:65:83:20:9d:
bc:ed:34:34:38:d9:0e:4b:e6:13:0d:6a:dc:64:c2:
f5:0f:71:65:42:a3:18:b3:b1:bd:28:c1:ac:eb:f3:
9d:fe:4c:3f:6b:7d:c8:2c:4c:61:c3:d8:b9:96:10:
61:e0:7e:dd:11:42:99:70:88:dd:ce:95:66:5f:9a:
13:c9:e4:f3:6a:6b:0d:fb:e2:7a:32:59:b5:5c:eb:
39:d8:1a:ae:c6:30:0a:ef:8f:69:a7:02:c1:e1:57:
88:0e:99:66:3e:8a:05:80:87:78:a3:56:39:bd:b6:
40:28:3a:9e:8a:8a:a9:50:22:1d:7a:68:99:16:fd:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:53:E7:BD:4B:8B:F8:9B:AF:8D:49:C6:E0:7A:4E:44:86:7F:35
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/871B2288BC7211F0A0DBDDE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:db:85:fb:8d:af:96:84:f8:be:ae:6d:b2:25:37:a4:60:03:
36:97:b2:5d:33:3c:e9:ee:08:ed:0e:cc:8e:b8:c9:ce:92:c8:
96:b4:04:31:79:22:be:e8:1c:9c:49:fb:41:a4:ba:0a:14:25:
4f:3d:84:77:09:cb:0b:e1:ac:88:2f:59:20:b1:49:5e:fe:e7:
ef:cd:71:52:c8:54:e3:fa:e2:79:1b:d6:9d:38:81:d9:f4:1e:
32:94:c9:fe:f4:26:ee:a6:d7:e5:e7:f3:ee:64:93:a7:8c:50:
3d:22:07:c1:62:43:6b:a0:30:a1:f0:8e:de:84:f2:58:3d:9e:
39:dd:ae:ed:3e:e9:db:9e:c4:d7:d7:61:fb:0e:05:6b:47:5a:
35:a2:b4:25:0d:90:50:5d:9b:3f:1d:66:7b:54:1f:03:04:fd:
25:67:2d:ca:b6:5d:06:74:4c:a7:c5:17:dc:ec:17:40:0a:4c:
d2:46:8a:9a:72:7a:4d:7a:d5:ee:ac:43:b3:3d:0c:72:6d:41:
d2:ad:ad:b2:98:17:0b:68:83:35:dd:c4:f9:86:dd:9d:f7:1a:
5b:5a:40:d1:e4:86:86:4f:f4:ab:21:00:3a:a9:22:42:50:ab:
1e:b8:0f:d1:89:6f:95:fb:47:51:9c:0a:48:a3:61:6d:e2:b7:
79:1c:ef:09
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHIkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTExMDgwNzE0MDdaFw0yNzExMDYwNzE0MDdaMBgxFjAU
BgNVBAMTDTY5MGVlZGM1LTdjMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOf7z57hU0VQUAvYA3RbMjW8VkfMNzcjCiHkGWCBESqNAxDvsdiR3aN6n4
BIO92SpmWPTLpzM17DfoNJmZKZ9NvAXzVqlSx5HJGptL17ayBTY/ZJn486a6mm1V
LdHV3hw/NVTtb6p2C5rz2He0+3OwjFbjeVng801kk/Bc6G/wP9o2ZYMgnbztNDQ4
2Q5L5hMNatxkwvUPcWVCoxizsb0owazr853+TD9rfcgsTGHD2LmWEGHgft0RQplw
iN3OlWZfmhPJ5PNqaw374noyWbVc6znYGq7GMArvj2mnAsHhV4gOmWY+igWAh3ij
Vjm9tkAoOp6KiqlQIh16aJkW/XrdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSqZT
571Li/ibr41JxuB6TkSGfzUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4Lzg3MUIyMjg4QkM3MjExRjBBMERCRERFMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaENUwDQYJKoZIhvcNAQEL
BQADggEBAI3bhfuNr5aE+L6ubbIlN6RgAzaXsl0zPOnuCO0OzI64yc6SyJa0BDF5
Ir7oHJxJ+0GkugoUJU89hHcJywvhrIgvWSCxSV7+5+/NcVLIVOP64nkb1p04gdn0
HjKUyf70Ju6m1+Xn8+5kk6eMUD0iB8FiQ2ugMKHwjt6E8lg9njndru0+6duexNfX
YfsOBWtHWjWitCUNkFBdmz8dZntUHwME/SVnLcq2XQZ0TKfFF9zsF0AKTNJGippy
ek161e6sQ7M9DHJtQdKtrbKYFwtogzXdxPmG3Z33GltaQNHkhoZP9KshADqpIkJQ
qx64D9GJb5X7R1GcCkijYW3it3kc7wk=
-----END CERTIFICATE-----
Generated at Fri Nov 14 03:54:58 2025 by rpki-client