Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9585DAC850EA11F09212B29DDAE4EC9C.roa
File: 9585DAC850EA11F09212B29DDAE4EC9C.roa (raw, json)
Hash identifier: Q0COoNpuAnL6EMPzGK1Ye/NjsjSiaAmH94EAa9f+Ei0=
Subject key identifier: 14:DF:43:17:53:49:56:A2:16:66:5A:FB:1E:C5:51:40:C8:03:A1:22
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B3B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9585DAC850EA11F09212B29DDAE4EC9C.roa
Signing time: Tue 24 Jun 2025 11:01:31 +0000
ROA not before: Tue 24 Jun 2025 11:01:26 +0000
ROA not after: Sat 26 Jun 2027 11:01:26 +0000
asID: 43350
IP address blocks: 154.16.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 05:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6971 (0x1b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 24 11:01:26 2025 GMT
Not After : Jun 26 11:01:26 2027 GMT
Subject: CN=685a858b-8952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:d1:26:81:94:17:b4:db:ee:82:c5:52:58:
a2:ea:20:d0:b5:c6:e8:01:58:57:21:fa:21:52:42:
9a:d5:a9:ed:e8:50:b4:ee:7e:e6:b6:7d:ff:f4:72:
3a:1a:8e:10:fd:1e:bf:d9:14:76:76:49:ec:10:44:
d9:db:f2:13:a5:48:3c:58:f7:67:67:a0:12:8c:28:
9f:bb:db:2d:bd:27:63:70:bf:06:c3:82:b4:f4:99:
bf:ed:0b:9b:08:fd:75:84:a3:ed:11:b6:3f:31:7b:
86:1e:30:ac:2e:ca:a8:a5:13:0d:f7:31:d7:69:46:
ae:a6:62:08:ec:e8:cb:08:08:b0:cf:87:62:42:43:
a8:0a:56:c5:27:1a:2f:a3:1b:86:5a:27:bd:8b:81:
5e:f0:7d:d9:89:97:2e:0b:01:fa:d8:0c:49:7a:8e:
4c:7a:79:59:5c:e0:64:6c:25:a7:33:a1:67:f5:1d:
83:e4:30:b8:7c:86:4b:b3:82:37:75:31:57:27:2e:
5b:8d:91:de:ed:15:22:bd:9d:32:a7:a5:27:f9:4b:
b3:93:82:bc:ec:1a:4a:0d:3a:53:ff:b0:57:37:d3:
f6:e3:4b:12:ca:97:ad:d5:2e:c4:3a:cc:b0:97:b7:
95:7f:eb:60:38:eb:2b:2f:62:91:88:4e:90:6f:b7:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:43:17:53:49:56:A2:16:66:5A:FB:1E:C5:51:40:C8:03:A1:22
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9585DAC850EA11F09212B29DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:17:25:5e:6b:64:b0:f1:9b:17:4b:2c:82:e9:a0:84:5a:40:
0e:2c:c6:27:06:75:9d:50:f6:4d:29:3e:ae:36:7e:a8:48:47:
24:19:0a:b0:83:1a:13:99:63:32:43:85:ab:2e:ad:04:b3:37:
89:f9:1a:c8:5a:57:83:48:c4:a7:f3:a1:de:d6:33:e8:fa:93:
8e:43:91:b0:05:75:21:55:32:9d:05:3f:57:82:42:0e:6a:0d:
5b:6a:60:9f:ab:44:36:43:d6:84:bd:95:25:67:5a:3d:db:89:
89:28:46:03:03:f7:fa:64:7f:f8:85:b6:75:33:8a:64:47:c7:
f0:35:8f:df:cd:51:e9:34:c5:d3:eb:d5:61:8a:92:f6:7a:a5:
63:3c:8c:eb:cd:cc:5b:23:1b:2f:61:44:fa:2c:42:ba:e9:f9:
06:37:27:1c:ec:3d:92:05:38:a7:d8:e6:93:9a:54:8c:f8:bf:
06:2e:b6:6a:db:ba:c1:b1:9c:86:fb:3c:5d:3c:4c:3c:b7:5a:
61:e2:da:d0:39:8a:c7:8f:d9:a6:f2:72:ee:4e:a0:28:27:b8:
e5:01:c8:a9:f7:ef:08:9c:fd:c5:89:45:ef:2c:d0:57:b0:c0:
1f:51:f8:2d:e8:c3:96:6d:94:65:11:6e:95:7c:ce:f3:eb:0c:
d0:7c:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:58:27 2025 by rpki-client