Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C1D3BD02BEDB11F0B5C7AB99DAE4EC9C.roa
File: C1D3BD02BEDB11F0B5C7AB99DAE4EC9C.roa (raw, json)
Hash identifier: 4eDDjcsBE1PMBA7BYcqsU9sLgs57dEbv4sBtjxyqF20=
Subject key identifier: 21:2F:A2:05:95:52:81:44:70:3C:DE:31:49:1B:7E:CE:33:79:0A:64
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1C95
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C1D3BD02BEDB11F0B5C7AB99DAE4EC9C.roa
Signing time: Tue 11 Nov 2025 08:52:31 +0000
ROA not before: Tue 11 Nov 2025 08:52:25 +0000
ROA not after: Sat 06 Nov 2027 08:52:25 +0000
asID: 9087
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 16 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7317 (0x1c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 11 08:52:25 2025 GMT
Not After : Nov 6 08:52:25 2027 GMT
Subject: CN=6912f94f-8b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:82:3a:73:8a:56:e6:ac:32:40:e5:cc:f4:
8d:a7:9f:0f:f0:9c:f9:6c:72:31:76:22:50:18:1f:
fb:32:bd:63:52:4b:ef:ae:5c:82:7b:75:58:c7:47:
15:13:72:a8:96:5a:09:19:d2:a8:cf:45:9b:6c:11:
14:8f:5e:e3:cd:2f:7a:73:76:b9:a0:3c:f6:53:a5:
a0:12:21:e7:d6:00:1f:bc:0c:ff:90:86:cc:c2:09:
3e:b2:74:70:47:c4:34:1b:6e:2a:97:f1:95:fd:f9:
19:dc:df:e7:ea:b4:9f:30:03:c2:ef:a0:f9:09:b2:
72:3d:4f:6f:4a:3a:6f:cf:b2:5a:38:75:1c:3a:52:
e8:8c:fc:0c:ee:08:b6:46:24:7a:3d:4a:94:ee:5f:
42:b5:7f:4d:72:bf:b9:b4:56:69:bb:a2:6d:bf:0b:
4b:18:08:a6:44:81:54:36:48:81:0c:a1:cc:d2:c1:
a3:df:05:01:4f:6a:e7:9b:f8:67:e1:9e:fb:a0:2d:
72:9c:4f:57:b8:fb:d3:df:c0:fc:b3:5d:22:c6:a4:
95:eb:ed:e5:7a:c1:8c:8c:34:3a:c3:4e:b9:91:50:
33:9d:21:89:5b:dd:f0:0f:69:32:9e:f9:18:f9:4f:
14:24:9a:33:c2:00:a3:cd:9d:6c:ca:59:ee:bb:77:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:A2:05:95:52:81:44:70:3C:DE:31:49:1B:7E:CE:33:79:0A:64
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C1D3BD02BEDB11F0B5C7AB99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2b:69:05:84:11:98:8f:e5:d0:c0:d2:ba:7b:8c:14:6f:c6:
ff:20:88:7d:f7:6a:23:df:e1:05:b0:59:f2:d0:34:f2:b9:ca:
25:54:e7:cb:5f:67:20:b1:68:8c:6e:14:a1:0e:4e:ac:b7:9f:
58:71:c7:af:c8:f9:20:cf:d0:0f:71:d9:af:d1:98:8a:c5:6d:
ba:5e:73:22:ed:1e:81:5e:10:e5:a4:19:be:a5:08:28:dc:94:
ed:84:f1:7c:c4:8a:84:bb:d5:77:c3:c4:72:1b:87:31:c9:b7:
a3:79:c4:0e:c4:86:77:1c:2b:4f:f4:da:33:7d:dd:e4:c2:4b:
ba:d1:fe:fd:00:df:0c:4f:b1:c2:8d:d8:3b:c8:28:83:9c:95:
fa:88:b3:b6:ec:11:be:9b:2b:f5:16:99:36:11:13:27:99:18:
9a:e5:d0:ef:14:dd:d3:27:fb:92:c2:79:71:c9:e1:fe:f3:89:
7f:75:d8:39:09:33:02:0a:5c:af:f8:31:0e:8e:13:0d:bb:f7:
5d:52:9b:c1:42:3b:9a:4f:8f:9b:fe:4f:32:35:cb:b7:77:78:
5c:2d:dc:35:ae:a9:bd:3a:a2:32:4d:4d:c9:e4:0d:19:15:6d:
c4:68:d7:78:2f:c9:60:7a:a3:57:7f:f8:94:94:c2:3b:c8:db:
bc:0d:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 03:53:58 2025 by rpki-client