Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BE982920833511F08F4AE0B2DAE4EC9C.roa
File: BE982920833511F08F4AE0B2DAE4EC9C.roa (raw, json)
Hash identifier: Lzf9W77i23ewm4BSDnmz9kPbbi/IKRk1b5d9QozKCho=
Subject key identifier: E5:CD:6B:95:7A:B6:F5:0C:3F:93:19:F7:C6:41:0F:C5:D3:83:A5:39
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BD3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BE982920833511F08F4AE0B2DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:05:31 +0000
ROA not before: Wed 27 Aug 2025 11:05:26 +0000
ROA not after: Fri 27 Aug 2027 11:05:26 +0000
asID: 212238
IP address blocks: 154.16.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7123 (0x1bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 11:05:26 2025 GMT
Not After : Aug 27 11:05:26 2027 GMT
Subject: CN=68aee67a-44ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:3f:2f:ac:8b:67:25:c9:38:12:f8:6d:0c:
a0:52:e9:86:12:ac:c7:46:ca:88:4c:7f:f2:46:f7:
ba:16:10:1e:2d:9c:ac:1e:0f:73:99:58:fd:5e:6c:
90:97:c1:e4:d0:48:e5:b2:41:71:e2:44:15:db:7d:
75:04:e5:68:76:47:b3:6a:e5:45:12:1e:d6:71:24:
aa:e4:f9:ac:64:2e:72:57:94:fb:0a:55:ad:01:2b:
f2:b6:75:be:99:2a:eb:3b:f6:10:3b:7b:c9:c6:dd:
4c:55:f6:79:12:05:e3:e4:07:6f:bb:07:7e:f6:b7:
42:1e:c8:b6:23:98:6f:13:31:d5:aa:93:b8:07:f7:
9a:c8:b2:66:21:9f:5a:df:54:ab:93:e0:27:83:ab:
91:02:92:e5:fc:a7:bd:a3:40:99:3b:d8:8a:a1:8b:
3f:a7:03:73:e0:f7:a0:04:90:05:87:ac:2b:5d:4f:
3c:77:a2:4c:ba:bd:41:40:08:e5:93:f9:95:93:e1:
14:05:ce:bc:26:05:2b:32:4b:a1:72:10:b5:05:43:
f9:50:65:78:19:23:35:ce:e4:ff:37:0c:44:cd:72:
aa:07:6d:c0:71:e1:9d:85:51:aa:77:df:40:63:b0:
f4:da:83:8e:07:16:85:06:6e:f3:3f:ec:cf:12:98:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CD:6B:95:7A:B6:F5:0C:3F:93:19:F7:C6:41:0F:C5:D3:83:A5:39
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BE982920833511F08F4AE0B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a4:fa:95:8e:3a:0a:3b:30:0c:5e:0a:94:15:53:fc:39:a4:
76:e3:85:90:35:11:e8:9c:83:e5:3f:b1:13:62:1c:21:62:6c:
17:bb:69:d2:5e:84:8f:30:38:af:b3:9e:b4:56:26:43:ce:18:
9b:c1:ab:4f:5a:99:4a:d3:ff:9b:32:6b:31:fe:ec:ab:e5:dd:
37:a1:7a:61:05:6d:14:b6:d4:08:5f:01:5d:6b:64:44:07:f9:
32:46:c5:88:76:c9:3d:23:2b:25:fc:b8:bd:ff:44:dd:01:1b:
73:68:88:0a:bf:f8:c3:23:4c:22:5c:a4:1e:a5:0b:34:6d:69:
09:c9:14:8a:42:26:86:4e:ec:65:8a:e6:c6:a5:33:bf:20:a6:
99:cd:30:43:cb:8a:29:96:78:65:c7:4c:a2:d1:da:4c:2a:7a:
49:8d:b0:20:90:f7:0b:14:62:6a:3c:35:30:db:a2:5d:b4:3c:
9a:e6:21:7a:18:0f:60:9d:fe:f1:9a:1c:b1:ec:b2:aa:d3:21:
86:73:7f:3b:f2:e0:b0:d6:d9:58:e5:81:55:33:00:10:58:c0:
da:19:fb:c6:df:f0:92:ad:a4:3f:02:33:b0:cd:a1:84:c5:7f:
08:7a:4e:48:1d:2f:3b:08:aa:48:a5:fb:0b:ff:bf:46:2b:ba:
ff:f4:40:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG9MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA4MjcxMTA1MjZaFw0yNzA4MjcxMTA1MjZaMBgxFjAU
BgNVBAMTDTY4YWVlNjdhLTQ0Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRkT8vrItnJck4EvhtDKBS6YYSrMdGyohMf/JG97oWEB4tnKweD3OZWP1e
bJCXweTQSOWyQXHiRBXbfXUE5Wh2R7Nq5UUSHtZxJKrk+axkLnJXlPsKVa0BK/K2
db6ZKus79hA7e8nG3UxV9nkSBePkB2+7B372t0IeyLYjmG8TMdWqk7gH95rIsmYh
n1rfVKuT4CeDq5ECkuX8p72jQJk72Iqhiz+nA3Pg96AEkAWHrCtdTzx3oky6vUFA
COWT+ZWT4RQFzrwmBSsyS6FyELUFQ/lQZXgZIzXO5P83DETNcqoHbcBx4Z2FUap3
30BjsPTag44HFoUGbvM/7M8SmNi1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5c1r
lXq29Qw/kxn3xkEPxdODpTkwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0JFOTgyOTIwODMzNTExRjA4RjRBRTBCMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEB8wDQYJKoZIhvcNAQEL
BQADggEBAGWk+pWOOgo7MAxeCpQVU/w5pHbjhZA1Eeicg+U/sRNiHCFibBe7adJe
hI8wOK+znrRWJkPOGJvBq09amUrT/5syazH+7Kvl3TehemEFbRS21AhfAV1rZEQH
+TJGxYh2yT0jKyX8uL3/RN0BG3NoiAq/+MMjTCJcpB6lCzRtaQnJFIpCJoZO7GWK
5salM78gppnNMEPLiimWeGXHTKLR2kwqekmNsCCQ9wsUYmo8NTDbol20PJrmIXoY
D2Cd/vGaHLHssqrTIYZzfzvy4LDW2VjlgVUzABBYwNoZ+8bf8JKtpD8CM7DNoYTF
fwh6TkgdLzsIqkil+wv/v0Yruv/0QLE=
-----END CERTIFICATE-----
Generated at Fri Sep 5 08:03:42 2025 by rpki-client