Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFDEA42833711F0BEF91CC0DAE4EC9C.roa
File: CDFDEA42833711F0BEF91CC0DAE4EC9C.roa (raw, json)
Hash identifier: Aq5LkTmlgu4q0BEw0nRpAUoe8rdDJFJ7JC2LBgA4SPw=
Subject key identifier: 91:00:71:72:D8:A0:61:A7:CF:E9:ED:4F:9B:4D:41:BE:96:58:BC:2B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BDC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFDEA42833711F0BEF91CC0DAE4EC9C.roa
Signing time: Wed 27 Aug 2025 11:20:15 +0000
ROA not before: Wed 27 Aug 2025 11:20:11 +0000
ROA not after: Fri 27 Aug 2027 11:20:11 +0000
asID: 212238
IP address blocks: 154.16.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7132 (0x1bdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 11:20:11 2025 GMT
Not After : Aug 27 11:20:11 2027 GMT
Subject: CN=68aee9ef-5ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:4b:f0:ea:21:76:47:2c:fd:07:22:06:9a:
a2:ed:fe:ac:5c:ec:e5:b9:de:03:3b:e5:53:16:84:
36:c7:79:2f:2e:8d:4a:29:70:6d:e8:aa:37:a8:f0:
21:db:25:f0:7a:91:14:25:39:6f:3a:73:ce:ff:4f:
aa:ed:21:84:31:c2:c3:02:fe:49:3a:5f:05:b9:78:
a9:c3:5d:5f:65:92:5b:8f:6f:aa:76:23:d3:a9:47:
72:b4:db:99:ea:55:65:c0:fd:fe:d3:ec:0d:66:94:
c9:9a:24:8b:95:7d:de:f8:fe:f2:e8:da:5d:98:bf:
ac:3d:ac:ae:c8:fa:10:7a:46:90:4a:84:fa:35:59:
48:b4:eb:c2:99:1f:28:fa:4a:6d:02:5c:1c:6c:33:
fa:7a:de:21:f0:f5:81:e6:9f:e2:3b:da:a4:4a:d7:
65:31:bd:b9:22:88:4b:a0:f3:47:4a:b7:2e:a1:25:
af:5f:40:97:75:57:f4:50:de:63:2d:4f:58:a7:44:
16:6a:a0:57:eb:12:92:4c:1e:e3:f2:67:f9:d0:d2:
54:70:2c:b8:6e:e0:23:53:91:50:91:79:f0:9d:f1:
fe:66:f3:02:9d:75:c8:6b:32:b9:07:3a:e1:04:30:
73:05:7d:43:29:ee:dd:da:af:4f:4b:8e:2e:85:23:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:00:71:72:D8:A0:61:A7:CF:E9:ED:4F:9B:4D:41:BE:96:58:BC:2B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CDFDEA42833711F0BEF91CC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3c:9e:69:8b:71:43:c2:fc:6a:38:db:90:ac:7e:4e:f1:a8:
f2:6b:99:d6:cb:21:63:08:02:14:a9:4e:d6:c4:f7:4e:b1:41:
9a:23:a8:a6:6b:ee:fb:5e:6b:2a:de:2e:48:23:3d:a8:77:b4:
d5:8b:20:c6:8e:fa:83:b8:99:fc:d6:15:db:d9:ff:d4:62:38:
c7:28:65:b1:39:9c:70:99:55:f6:26:2e:2e:11:ad:ce:17:46:
19:c7:c1:a6:17:4d:37:d8:e5:e5:f9:a3:ac:8c:73:9b:d2:6a:
42:fd:8b:f6:6a:82:b8:d2:ec:55:ca:47:50:4a:b3:39:fb:de:
f4:37:e5:eb:81:d5:97:7d:78:8f:c6:e0:ba:67:49:aa:36:a0:
83:07:70:23:57:06:bd:61:9b:35:7e:d2:98:56:09:72:72:cb:
c1:a6:f6:c1:d7:71:89:15:8e:e7:a7:5f:ec:cc:9f:44:e0:58:
3d:79:19:8b:22:8a:6e:ce:21:44:0e:c3:ba:ab:35:be:9d:12:
62:2c:e7:b1:af:b2:f5:76:db:af:6a:fe:8b:81:1f:9c:17:0e:
78:da:46:43:03:38:80:6b:68:db:00:38:bc:32:f7:e3:5a:2b:
88:de:24:4f:62:0b:b7:d6:5b:93:3b:ed:90:43:fe:ab:a6:a7:
c1:b2:25:fe
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA4MjcxMTIwMTFaFw0yNzA4MjcxMTIwMTFaMBgxFjAU
BgNVBAMTDTY4YWVlOWVmLTVlZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG4kvw6iF2Ryz9ByIGmqLt/qxc7OW53gM75VMWhDbHeS8ujUopcG3oqjeo
8CHbJfB6kRQlOW86c87/T6rtIYQxwsMC/kk6XwW5eKnDXV9lkluPb6p2I9OpR3K0
25nqVWXA/f7T7A1mlMmaJIuVfd74/vLo2l2Yv6w9rK7I+hB6RpBKhPo1WUi068KZ
Hyj6Sm0CXBxsM/p63iHw9YHmn+I72qRK12UxvbkiiEug80dKty6hJa9fQJd1V/RQ
3mMtT1inRBZqoFfrEpJMHuPyZ/nQ0lRwLLhu4CNTkVCRefCd8f5m8wKddchrMrkH
OuEEMHMFfUMp7t3ar09Lji6FI5SLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkQBx
ctigYafP6e1Pm01BvpZYvCswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0NERkRFQTQyODMzNzExRjBCRUY5MUNDMERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELYwDQYJKoZIhvcNAQEL
BQADggEBAB88nmmLcUPC/Go425Csfk7xqPJrmdbLIWMIAhSpTtbE906xQZojqKZr
7vteayreLkgjPah3tNWLIMaO+oO4mfzWFdvZ/9RiOMcoZbE5nHCZVfYmLi4Rrc4X
RhnHwaYXTTfY5eX5o6yMc5vSakL9i/ZqgrjS7FXKR1BKszn73vQ35euB1Zd9eI/G
4LpnSao2oIMHcCNXBr1hmzV+0phWCXJyy8Gm9sHXcYkVjuenX+zMn0TgWD15GYsi
im7OIUQOw7qrNb6dEmIs57GvsvV2269q/ouBH5wXDnjaRkMDOIBraNsAOLwy9+Na
K4jeJE9iC7fWW5M77ZBD/qump8GyJf4=
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:59:07 2025 by rpki-client