Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AF4A355E563E11F08F96A8CADAE4EC9C.roa
File: AF4A355E563E11F08F96A8CADAE4EC9C.roa (raw, json)
Hash identifier: dBoF6hy6XNko017LXqyznzQcaksImd9YKVNBfV4lgOI=
Subject key identifier: 20:70:CB:A6:50:3B:C7:DB:CD:CA:00:FF:DA:E9:54:3C:48:B5:BD:C6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B59
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AF4A355E563E11F08F96A8CADAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:46:08 +0000
ROA not before: Tue 01 Jul 2025 05:46:03 +0000
ROA not after: Thu 01 Jul 2027 05:46:03 +0000
asID: 138997
IP address blocks: 154.16.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7001 (0x1b59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 1 05:46:03 2025 GMT
Not After : Jul 1 05:46:03 2027 GMT
Subject: CN=68637620-efe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:31:45:20:7a:c7:4b:ed:f6:a3:04:77:b8:
8f:58:c8:04:22:99:af:f9:4f:d8:74:41:97:d1:6d:
b0:c9:6a:ef:dd:ae:60:05:5c:4a:f4:29:36:34:4a:
85:8e:0c:c3:cc:7c:4e:45:af:41:8b:0d:75:e8:c2:
21:67:ec:e7:f8:12:fd:82:0c:b1:7c:5b:a8:bb:1a:
85:c1:40:4f:6f:f7:6e:7b:c1:8e:6e:37:57:5a:ed:
0d:03:fd:18:9d:f7:07:89:82:a1:7a:ed:87:bc:56:
75:04:8d:d0:74:b3:e3:bb:2a:7e:3b:34:1c:52:f1:
23:7f:d1:d9:16:5b:49:1b:0c:6f:48:00:f3:af:96:
53:15:6c:1a:34:dc:f1:bf:a1:cd:91:4c:f0:a6:46:
ba:c0:34:00:56:22:13:78:28:1a:44:c4:f3:2b:74:
40:61:4f:92:9a:5d:9f:25:5d:79:d8:f2:92:44:b0:
20:06:6b:18:51:a1:53:e3:66:d0:d1:b5:78:a5:d9:
41:d1:5e:e2:ee:2b:01:31:17:f3:67:08:b9:0c:44:
0f:3b:87:87:2d:84:13:c9:e3:4c:78:9c:15:58:12:
4a:47:05:8a:d9:18:3e:e7:64:90:01:32:06:ec:ae:
96:18:9b:ca:66:28:9c:f8:8b:e2:3e:0d:d9:bc:d6:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:CB:A6:50:3B:C7:DB:CD:CA:00:FF:DA:E9:54:3C:48:B5:BD:C6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AF4A355E563E11F08F96A8CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.27.0/24
Signature Algorithm: sha256WithRSAEncryption
77:97:15:af:59:57:40:e6:ff:14:a8:10:77:72:0d:09:fd:00:
90:ab:e2:97:ec:c5:38:20:21:e5:fd:28:87:78:91:89:67:ee:
22:f6:aa:10:fb:7c:11:63:55:ab:9a:e4:09:d6:38:c3:b5:58:
36:47:92:83:36:ee:ed:93:f8:95:32:43:44:ea:eb:69:2a:a4:
c0:10:aa:ae:33:29:dd:7a:66:5d:8d:25:31:a7:fb:77:80:c0:
f1:90:58:b5:87:6b:56:f4:1a:ca:43:75:49:4f:fc:cf:60:19:
d8:d8:54:7b:fe:ff:31:98:50:0c:39:17:85:0a:d9:20:af:71:
42:14:c2:fb:8f:33:2e:5d:41:35:ff:c6:b0:4e:58:99:61:86:
27:1a:f3:84:a2:ee:3a:2d:f5:0a:b2:87:ed:fc:e9:01:c4:bd:
d7:07:be:94:30:5f:fa:af:0c:c0:9b:31:b3:1b:45:28:bb:c4:
a9:35:1b:4a:32:18:d9:f6:a9:0f:4f:3a:b0:e8:ce:73:79:28:
80:c6:94:0d:08:23:91:80:22:08:50:0c:5a:7a:b0:25:da:c2:
0a:1c:e4:b1:ee:e1:67:c3:30:8f:f3:cb:f8:90:d8:ed:8d:e1:
3e:d4:d8:61:d8:4a:a0:90:54:e5:6e:81:bf:53:77:4b:c0:17:
ca:67:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 03:38:18 2025 by rpki-client