Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E3335A4875D11F0821E44D0DAE4EC9C.roa
File: 9E3335A4875D11F0821E44D0DAE4EC9C.roa (raw, json)
Hash identifier: TmNaF2O0WjZDZufQwbJ6idkuThCXbCDix3VeB5voiGY=
Subject key identifier: 7E:A0:82:40:32:1B:C2:F2:FC:0B:80:B1:FE:4B:71:DC:75:83:79:11
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BE8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E3335A4875D11F0821E44D0DAE4EC9C.roa
Signing time: Mon 01 Sep 2025 18:01:01 +0000
ROA not before: Mon 01 Sep 2025 18:00:56 +0000
ROA not after: Wed 01 Sep 2027 18:00:56 +0000
asID: 834
IP address blocks: 154.16.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7144 (0x1be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 1 18:00:56 2025 GMT
Not After : Sep 1 18:00:56 2027 GMT
Subject: CN=68b5df5d-1b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:84:7d:64:2a:d8:2a:3a:f6:a2:ac:94:f6:
a3:2c:6a:79:44:31:49:1b:6a:af:5b:75:3b:67:1c:
4b:52:3f:c4:54:1b:1c:ad:2e:61:1d:8d:5f:c5:8a:
a9:9d:8e:dd:44:01:84:5a:87:9d:2c:9d:d3:0e:92:
ca:f4:5a:25:0b:68:62:53:ed:1c:ce:81:bf:b6:dd:
0f:b8:95:0f:f8:cc:a3:53:89:d9:9d:8f:84:65:80:
4a:92:65:e5:c8:21:ef:c3:35:85:11:a0:d2:5c:e9:
f1:a6:29:2f:4b:f2:b7:12:94:f3:7b:38:a9:44:ad:
f7:ad:37:57:03:ff:8b:d9:8b:ea:49:11:2f:50:9b:
84:95:8a:6c:00:2c:9e:9f:52:f5:2e:38:57:12:eb:
1a:f2:77:5b:2d:e8:06:e1:0a:25:f1:ca:81:d3:a5:
42:2b:44:c2:64:f1:2c:1d:97:de:71:8e:8d:60:ae:
71:d5:44:18:92:43:0e:0d:62:5c:2d:97:97:2e:05:
85:fe:7b:c8:70:a1:00:0f:91:64:62:5e:b0:32:88:
5d:df:03:74:da:d8:ed:98:b2:94:5a:bc:bb:53:a0:
7b:3f:75:99:33:e5:e4:06:b6:8e:04:88:92:1b:4e:
92:2e:5b:92:91:3a:af:15:e3:8b:97:a3:17:e0:f5:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:82:40:32:1B:C2:F2:FC:0B:80:B1:FE:4B:71:DC:75:83:79:11
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E3335A4875D11F0821E44D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.14.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a3:7f:91:7a:60:ca:ab:bd:a8:05:0d:84:56:a8:4d:4e:45:
5b:ee:c6:26:35:21:be:a9:b8:be:98:d3:60:02:0f:10:d7:be:
53:7d:2a:11:d6:16:49:b6:77:33:78:2f:44:26:73:bb:7d:28:
05:3b:e9:eb:0f:0d:25:55:67:6c:6b:c7:7b:16:8e:a5:a1:b7:
40:a1:1a:7f:95:b9:e7:fc:b4:1f:08:5d:0d:20:7e:6f:5e:3b:
91:c2:b0:d6:55:88:a2:04:53:5d:b5:76:c3:3b:69:bd:6d:35:
02:c3:66:7b:28:cb:e3:33:d3:a6:5f:1d:a9:b8:4b:31:0e:fb:
21:9b:87:35:de:5f:f3:05:6a:7f:bb:63:7e:fc:1d:02:21:e7:
c8:f9:31:82:d0:71:83:d2:a7:ea:a3:d8:2a:bd:11:3a:21:29:
20:44:e7:84:d9:ff:7c:12:85:76:10:87:d6:eb:a2:b8:ab:c1:
b8:b3:fe:97:ab:3f:02:46:8a:72:cf:7e:09:48:aa:a3:28:af:
ef:a4:3c:e9:ed:16:bb:fc:d6:50:05:39:81:3a:7f:8a:19:8e:
c9:7c:18:34:87:b2:17:43:5c:ca:01:e2:46:aa:93:1f:48:ec:
16:28:8a:f7:f0:fe:50:0e:4c:19:09:e0:8f:27:8e:0f:3a:83:
a9:86:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 13:12:33 2025 by rpki-client