Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/99561E7A8C0311F0B5E26682DAE4EC9C.roa
File: 99561E7A8C0311F0B5E26682DAE4EC9C.roa (raw, json)
Hash identifier: Vg3x/xxw1R7u8Fhrd+2q7DD9UFzo2JcDKY7w8uja7+M=
Subject key identifier: 92:0A:29:0B:7D:D4:AE:54:55:74:8A:98:48:72:20:34:0E:E2:0F:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BFC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/99561E7A8C0311F0B5E26682DAE4EC9C.roa
Signing time: Sun 07 Sep 2025 15:59:14 +0000
ROA not before: Sun 07 Sep 2025 15:59:07 +0000
ROA not after: Tue 07 Sep 2027 15:59:07 +0000
asID: 136744
IP address blocks: 154.16.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 17 Sep 2025 00:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7164 (0x1bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 7 15:59:07 2025 GMT
Not After : Sep 7 15:59:07 2027 GMT
Subject: CN=68bdabd2-f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:0b:93:c3:e1:73:50:14:dd:4d:7b:16:c0:
7a:cd:28:2c:e1:cf:4e:1b:dc:f7:7c:60:d5:0c:26:
7d:a2:16:e0:0e:9f:71:69:d1:0c:4f:9b:38:3a:0c:
3a:a5:4d:cc:e0:79:b8:24:19:c3:43:c4:a2:aa:54:
cc:ff:db:c4:e7:3d:0b:3b:14:5a:fa:ba:35:08:74:
80:5b:2a:43:49:3d:0b:3d:36:f0:c1:9d:bf:83:88:
e6:64:e2:37:0f:30:2d:0f:96:a8:c7:af:70:51:c0:
ab:1f:ac:06:56:55:38:f4:65:ca:23:d9:11:88:f4:
66:67:6d:ce:7c:be:66:77:55:d4:8f:a2:ad:7b:62:
7e:3e:26:a1:ef:eb:9f:c2:51:e1:97:84:09:b7:63:
af:aa:1a:2a:86:7a:a5:0a:dd:94:d8:96:78:a3:47:
13:34:5e:8e:32:6e:52:1d:f7:fc:5f:3b:9d:73:e7:
ff:97:ef:43:5d:99:4a:5e:0a:ed:58:ea:1d:4b:18:
b1:a0:89:4c:54:a6:00:c0:02:42:2b:f8:8d:3b:9f:
b3:6b:8d:a6:9b:49:ff:35:c9:34:88:9a:ba:70:dd:
58:2a:bb:72:5b:ad:25:29:68:33:73:5f:ad:0e:2c:
65:dc:ee:f3:37:31:47:ff:47:cb:1a:49:30:4f:8d:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0A:29:0B:7D:D4:AE:54:55:74:8A:98:48:72:20:34:0E:E2:0F:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/99561E7A8C0311F0B5E26682DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ec:47:b0:ae:40:3f:0d:f5:50:3a:66:6c:87:5f:fe:24:34:
60:de:74:c4:3f:e4:41:a7:8e:d3:aa:30:da:23:d6:89:59:a4:
f2:47:00:db:da:4f:0c:cb:af:c1:86:b3:c9:59:17:29:30:d8:
e2:37:5e:f8:c8:ad:75:34:51:6a:90:46:85:84:09:b6:67:03:
93:5a:cf:e3:3d:b3:55:20:67:c4:ff:95:58:31:06:38:e3:59:
49:f1:64:e0:8a:cc:9b:65:15:42:43:b9:d2:62:28:72:16:18:
d8:8c:93:87:0f:37:95:f0:ae:02:37:e9:39:90:23:bf:49:9b:
fa:79:b3:11:6f:91:04:66:e1:07:68:e3:99:1a:6b:19:06:4b:
62:ff:62:a8:75:0c:42:48:f7:39:10:7d:e6:b7:5c:2e:80:ff:
ca:2a:32:5e:08:46:d3:29:e5:fb:b5:69:a3:42:74:e5:ec:64:
c9:ce:e7:73:cd:15:fa:28:fc:78:c8:cd:db:bb:e4:8f:47:99:
d7:87:41:ff:bb:f9:4c:4d:79:e0:4e:5e:1f:3f:91:04:27:7b:
09:39:af:93:a8:47:8e:c3:5d:f2:d8:4d:9e:50:1b:85:b6:ba:
f2:de:cf:5c:77:7d:5f:48:59:75:e8:e4:dd:29:4f:12:15:63:
ca:0f:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 10:14:32 2025 by rpki-client