Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8267E1AC6C6511F0A27C1FEADAE4EC9C.roa
File: 8267E1AC6C6511F0A27C1FEADAE4EC9C.roa (raw, json)
Hash identifier: UBJ0iqdu0fzujqESyRHc87wUxPp3ygxYQdrT9UId6Sw=
Subject key identifier: FD:36:09:B6:40:8B:2A:57:72:3A:E0:C6:2F:03:66:CB:92:2A:CD:A1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1B8D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8267E1AC6C6511F0A27C1FEADAE4EC9C.roa
Signing time: Tue 29 Jul 2025 10:19:29 +0000
ROA not before: Tue 29 Jul 2025 10:19:23 +0000
ROA not after: Thu 29 Jul 2027 10:19:23 +0000
asID: 399073
IP address blocks: 154.16.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7053 (0x1b8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 29 10:19:23 2025 GMT
Not After : Jul 29 10:19:23 2027 GMT
Subject: CN=6888a031-207d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:7a:f8:83:15:67:d5:61:ba:47:42:39:d3:
65:b2:53:a9:3d:1f:c7:74:a1:5e:e2:5d:e6:a5:15:
4b:02:d6:c6:8b:87:54:5d:8e:e0:5e:65:01:a4:98:
15:22:05:90:95:a8:64:d9:74:5b:bf:02:8e:36:3d:
37:54:0c:0c:ae:13:59:7e:28:de:49:ea:a1:0f:fb:
a2:fc:80:e8:d4:e8:dc:fa:19:29:52:ca:06:e3:28:
6d:ab:72:ce:20:7d:62:b6:4f:af:6c:a4:e7:a3:ab:
40:56:40:97:2f:32:58:f7:c5:e9:08:5b:91:08:5e:
7b:73:de:77:85:a7:e3:a2:b7:0e:cc:b8:61:61:f7:
fa:3a:79:82:8f:1e:80:c9:79:ac:59:7d:66:6d:38:
19:43:8f:ae:0c:da:c2:13:ba:3b:4f:b1:84:83:74:
43:88:a4:b7:01:f4:1d:be:c6:d6:01:3c:2a:3e:78:
b5:2c:86:12:40:f5:74:29:ff:3f:de:4e:e8:3e:84:
7f:44:60:c1:af:87:5e:5f:4c:44:7d:8f:7f:2c:4e:
83:f9:b3:32:27:49:c8:c1:4d:ea:a7:a4:b4:60:c0:
38:d5:f4:bf:f5:c8:99:45:d1:81:18:9f:d6:b6:21:
37:ce:85:35:5b:e1:c0:e4:88:d3:17:67:36:f7:a0:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:09:B6:40:8B:2A:57:72:3A:E0:C6:2F:03:66:CB:92:2A:CD:A1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8267E1AC6C6511F0A27C1FEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.228.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e2:e0:65:4d:ed:ee:ba:09:fe:1f:cf:c2:5a:c0:d0:98:dd:
40:00:f1:b4:44:6b:97:b2:1d:c5:49:98:51:a6:a9:77:9e:aa:
14:4d:bc:f3:8e:39:fd:c4:da:e8:68:2d:90:22:59:aa:1d:ca:
40:66:a4:3b:22:d1:a6:d6:46:fb:b3:0b:45:4b:ae:6f:63:50:
04:70:b0:58:92:8d:d8:7f:fb:51:62:b1:ec:3e:80:66:33:c3:
71:95:9a:70:cb:3f:c3:51:ad:e3:16:6f:69:89:eb:fe:15:fc:
a0:8b:80:1b:36:da:b0:4c:be:c2:ca:12:40:23:9b:58:9d:bb:
51:99:60:59:6b:ef:a8:f2:21:ca:ea:c4:d0:eb:36:83:d6:ff:
2f:49:55:4c:5d:eb:cf:fd:1f:f7:00:73:d1:ef:2a:e3:ba:48:
14:c4:74:af:ad:39:2e:be:e9:90:98:d1:15:67:d4:30:a0:3f:
48:ce:0d:ba:f6:81:78:e7:c8:0d:1f:c3:eb:1d:e8:ce:ed:b6:
aa:00:57:3f:01:bd:4e:ae:d8:fc:57:04:7d:b9:4f:b8:81:25:
68:42:a6:20:4d:84:c1:e5:26:c6:34:15:0b:f4:40:dd:b2:3f:
cd:27:fa:71:9c:e5:c2:e6:6a:24:84:44:36:b7:1a:32:f5:53:
1f:a3:f9:2e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICG40wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTA3MjkxMDE5MjNaFw0yNzA3MjkxMDE5MjNaMBgxFjAU
BgNVBAMTDTY4ODhhMDMxLTIwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5uXr4gxVn1WG6R0I502WyU6k9H8d0oV7iXealFUsC1saLh1RdjuBeZQGk
mBUiBZCVqGTZdFu/Ao42PTdUDAyuE1l+KN5J6qEP+6L8gOjU6Nz6GSlSygbjKG2r
cs4gfWK2T69spOejq0BWQJcvMlj3xekIW5EIXntz3neFp+Oitw7MuGFh9/o6eYKP
HoDJeaxZfWZtOBlDj64M2sITujtPsYSDdEOIpLcB9B2+xtYBPCo+eLUshhJA9XQp
/z/eTug+hH9EYMGvh15fTER9j38sToP5szInScjBTeqnpLRgwDjV9L/1yJlF0YEY
n9a2ITfOhTVb4cDkiNMXZzb3oAuVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/TYJ
tkCLKldyOuDGLwNmy5IqzaEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzgyNjdFMUFDNkM2NTExRjBBMjdDMUZFQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOQwDQYJKoZIhvcNAQEL
BQADggEBAHHi4GVN7e66Cf4fz8JawNCY3UAA8bREa5eyHcVJmFGmqXeeqhRNvPOO
Of3E2uhoLZAiWaodykBmpDsi0abWRvuzC0VLrm9jUARwsFiSjdh/+1Fisew+gGYz
w3GVmnDLP8NRreMWb2mJ6/4V/KCLgBs22rBMvsLKEkAjm1idu1GZYFlr76jyIcrq
xNDrNoPW/y9JVUxd68/9H/cAc9HvKuO6SBTEdK+tOS6+6ZCY0RVn1DCgP0jODbr2
gXjnyA0fw+sd6M7ttqoAVz8BvU6u2PxXBH25T7iBJWhCpiBNhMHlJsY0FQv0QN2y
P80n+nGc5cLmaiSERDa3GjL1Ux+j+S4=
-----END CERTIFICATE-----
Generated at Sun Aug 10 19:02:05 2025 by rpki-client