Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/879E2B34833711F0B0ACE9BDDAE4EC9C.roa
File: 879E2B34833711F0B0ACE9BDDAE4EC9C.roa (raw, json)
Hash identifier: x5AWOoIVMTi5jEsnG97Xa0SVkomwfymiVTRxyodARGg=
Subject key identifier: 26:47:A2:7A:66:B9:01:E9:2C:9F:1F:85:1F:E3:E8:6C:32:3E:59:45
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BD9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/879E2B34833711F0B0ACE9BDDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:18:17 +0000
ROA not before: Wed 27 Aug 2025 11:18:13 +0000
ROA not after: Fri 27 Aug 2027 11:18:13 +0000
asID: 141158
IP address blocks: 154.16.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7129 (0x1bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 11:18:13 2025 GMT
Not After : Aug 27 11:18:13 2027 GMT
Subject: CN=68aee979-0cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:60:d6:aa:8b:11:70:3a:e3:94:7b:a1:da:
4c:48:17:c7:cd:3b:39:8b:d1:93:47:3d:8a:33:65:
19:df:2d:22:43:79:77:61:5d:01:b7:7a:1c:1f:49:
73:55:16:68:96:18:ad:cc:03:b1:fc:f7:82:c0:ff:
89:11:10:94:17:97:02:7f:c5:62:4d:bd:dd:f5:bb:
a0:f7:46:cd:bb:f8:a8:0e:58:14:94:d9:da:a9:b5:
9f:aa:82:42:dc:b6:c8:8f:e0:cd:9b:5d:03:fa:42:
a4:93:38:5e:42:b4:a2:06:0e:f5:49:e8:fd:eb:36:
4c:e2:60:8a:ff:ed:a8:ac:2a:f1:f8:f9:79:1c:91:
da:13:f8:2b:13:f2:35:e0:32:7c:0f:5d:a5:45:01:
da:9d:b2:cb:50:ca:55:16:29:a4:5d:67:86:d5:9d:
a9:9e:cc:38:ba:23:92:16:73:fa:8e:ab:21:fb:3b:
41:df:79:02:70:34:f0:75:69:c7:00:d1:c1:4a:20:
1f:e6:42:91:09:e8:8a:d2:6c:5f:00:74:7c:4a:30:
42:e8:e9:db:42:2f:63:3e:21:0d:f1:f3:39:c1:17:
10:ca:12:8c:fa:ba:9e:c1:d7:0f:b5:b9:f4:02:08:
8a:ec:59:e6:0a:fe:08:ca:5f:dc:c6:a0:cf:1e:19:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:A2:7A:66:B9:01:E9:2C:9F:1F:85:1F:E3:E8:6C:32:3E:59:45
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/879E2B34833711F0B0ACE9BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9e:66:f0:55:3a:5e:5b:44:6e:2d:93:a4:4b:bf:22:1f:ba:
b9:40:44:ad:c6:ba:9b:c4:a5:59:11:5c:7e:e9:62:2c:5b:58:
5e:a4:3c:25:35:34:f4:ee:db:49:a4:c6:1f:78:43:37:7a:38:
6c:f9:8c:9e:df:f2:d0:19:b8:30:9f:0f:1a:bf:4c:73:0a:a2:
7c:4a:2d:a3:47:c7:71:9c:d5:13:2c:f7:dd:7a:ac:52:9a:a9:
de:7b:68:84:8f:19:b3:eb:3c:5f:c3:da:33:62:9b:41:f2:6f:
70:7b:79:bc:54:ec:90:52:22:78:00:fa:69:36:50:76:6b:34:
23:be:60:e4:0a:63:a1:d3:1d:b0:1a:1a:e3:f9:8a:1e:d9:eb:
15:21:d7:4c:21:0d:7b:08:e0:fe:20:65:74:51:7a:47:68:7d:
b5:e1:be:47:b6:69:a0:76:ff:e5:96:67:c4:22:eb:70:b2:d0:
44:23:23:b9:12:aa:6f:cb:22:c2:2f:61:0a:ff:b5:2e:88:20:
16:95:d6:94:81:44:62:8b:7e:95:18:c5:fe:36:81:02:a7:b0:
26:5e:32:b8:c3:b9:e2:ed:7b:14:13:7f:32:79:c3:bb:18:eb:
94:eb:19:94:4f:ed:48:a5:59:45:71:a2:42:ae:6c:83:ff:e5:
ca:f4:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 13:11:52 2025 by rpki-client