Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0939260563C11F093E09EBDDAE4EC9C.roa
File: E0939260563C11F093E09EBDDAE4EC9C.roa (raw, json)
Hash identifier: N/p/VcIwZp5G2USggnSlSvxv9DnPkIOlocaLS2/ToLM=
Subject key identifier: 22:17:3C:45:97:49:7F:45:01:16:30:F3:01:B2:19:D8:D9:10:06:43
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B56
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0939260563C11F093E09EBDDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 05:33:12 +0000
ROA not before: Tue 01 Jul 2025 05:33:07 +0000
ROA not after: Thu 01 Jul 2027 05:33:07 +0000
asID: 834
IP address blocks: 154.16.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6998 (0x1b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 1 05:33:07 2025 GMT
Not After : Jul 1 05:33:07 2027 GMT
Subject: CN=68637318-acab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:57:98:d2:3e:7a:b8:23:f8:54:10:5a:8b:
e3:c9:c0:44:28:a1:c6:c1:d2:6d:92:b7:85:35:a9:
da:05:b6:1d:01:6a:ec:e4:35:45:f4:ec:00:3c:14:
37:1f:12:f1:91:6b:3b:d4:3d:be:0f:c0:c4:7b:7a:
66:33:03:40:10:0f:1b:2e:7c:e2:d3:27:93:b0:a0:
6e:1a:7e:ec:2f:8e:ce:cc:20:24:8c:c3:08:52:e2:
01:ed:ef:6a:9d:15:12:2f:00:3d:90:db:2e:7b:e7:
d0:9b:74:a8:f8:cf:55:3c:b6:25:57:1a:41:c3:49:
11:a5:b4:b4:9c:c1:2f:6b:07:36:7d:8c:a2:a1:3c:
22:6b:fa:93:0c:6a:7b:3d:fa:0f:d0:47:44:0e:95:
04:35:1f:fa:da:ed:66:14:82:37:d2:bc:7f:8b:bd:
c5:ad:5a:74:23:17:1c:b6:f3:16:6a:87:8d:4d:5a:
97:93:f7:c7:a6:aa:05:89:69:b9:91:ec:28:43:1f:
95:62:d6:5b:d1:8d:15:eb:ac:4f:cd:a8:5e:ac:99:
8d:26:18:b0:13:1f:2e:f8:67:b7:0f:f2:ea:c9:36:
9c:7c:84:76:7a:7d:52:ca:fe:c6:dc:de:0d:66:90:
a2:e6:a9:26:b1:52:90:e9:e9:71:50:a6:70:b5:67:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:3C:45:97:49:7F:45:01:16:30:F3:01:B2:19:D8:D9:10:06:43
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0939260563C11F093E09EBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:02:66:a3:ac:77:a2:56:1b:d3:00:df:3b:56:e6:9c:be:a4:
8f:82:85:85:7c:ff:cf:b7:30:80:03:36:1e:32:e6:62:ee:3e:
41:a7:cf:bb:3a:c1:5d:ac:7d:f7:16:17:8e:f1:18:0a:f7:5a:
a1:53:cc:52:c7:ff:d2:cf:e1:8d:85:2b:ac:50:26:01:66:88:
f7:79:25:09:bb:eb:42:b7:ba:a1:6f:0e:a1:b3:d2:91:13:d3:
d9:dc:fc:f8:b3:4c:a9:df:4e:3a:8e:15:cc:ba:de:1d:98:a2:
00:cf:a4:55:44:d3:c0:96:3d:99:40:2f:03:01:1f:53:f5:66:
f6:2e:9d:50:b1:28:dd:20:62:ed:d6:3c:54:e7:b7:5d:26:bf:
5b:a0:07:83:6d:eb:ce:41:01:62:81:96:0a:da:75:11:44:53:
c9:d2:4e:22:4e:29:d2:35:e8:bd:6c:e8:20:e3:8c:51:ca:cb:
30:75:d5:f1:24:6f:a9:4e:5c:a4:bb:65:c9:24:ac:77:7c:8d:
86:ab:70:93:67:ee:6e:24:b9:18:aa:fe:1f:23:98:f8:7e:3a:
5b:a0:7c:69:89:9f:8c:05:2f:88:fa:25:12:a5:df:78:b9:43:
dc:27:1f:6f:d0:0d:f2:bf:f4:09:36:d0:bd:d4:e0:61:89:fb:
3f:7d:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:29:39 2025 by rpki-client