Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8634F45C71FE11F08DA8B3D9DAE4EC9C.roa
File: 8634F45C71FE11F08DA8B3D9DAE4EC9C.roa (raw, json)
Hash identifier: YJD4cm/2/P8ASH3wj+R3aqtr6ILZFCWg6MZuYKtN8Rk=
Subject key identifier: 1E:69:E6:9C:DA:C4:A0:CA:6F:8B:63:86:F9:CD:E6:50:D9:AD:06:D6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1BA0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8634F45C71FE11F08DA8B3D9DAE4EC9C.roa
Signing time: Tue 05 Aug 2025 13:17:24 +0000
ROA not before: Tue 05 Aug 2025 13:17:18 +0000
ROA not after: Thu 05 Aug 2027 13:17:18 +0000
asID: 8220
IP address blocks: 154.16.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7072 (0x1ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 13:17:18 2025 GMT
Not After : Aug 5 13:17:18 2027 GMT
Subject: CN=68920464-9c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:5e:89:39:99:17:86:86:d8:ef:36:2e:99:
23:3a:4c:87:92:86:0f:99:52:b7:51:09:cf:0e:8b:
e6:39:2c:a6:ee:5a:13:7d:43:2a:43:4d:60:d5:13:
8e:e1:68:c2:c6:d2:75:e8:fa:66:d6:db:84:95:b0:
8a:33:92:e5:22:fc:8b:96:9e:00:94:5e:41:03:48:
74:90:ea:de:37:ee:61:24:aa:5f:2d:dd:36:a5:e2:
ce:5c:ca:0f:db:26:5a:39:09:c7:20:e8:5b:38:7d:
64:b7:c5:12:ef:e0:4e:ca:47:c9:7b:e0:ba:72:c5:
5d:29:e8:41:33:b6:0b:f2:9d:e7:37:11:68:43:90:
8a:34:81:cf:46:1f:2f:f3:59:4d:04:90:8d:d6:e0:
33:33:80:a9:81:73:16:27:cf:3d:a4:33:3b:92:0d:
90:f1:57:9c:f2:3b:af:18:9a:3c:06:c4:cf:0d:80:
74:de:0f:00:6a:75:c4:ff:f3:10:20:b9:29:4e:a7:
c3:2e:21:49:c9:22:e7:2a:b6:bf:53:2c:1b:a6:27:
db:88:2a:d1:16:84:e7:e4:cb:45:44:15:b4:e1:b4:
c8:03:00:76:c3:cc:2e:d5:3c:a2:ac:c8:68:62:cf:
77:3a:dd:48:cf:e3:d8:e6:47:60:f7:a3:1d:a6:4e:
9e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:E6:9C:DA:C4:A0:CA:6F:8B:63:86:F9:CD:E6:50:D9:AD:06:D6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8634F45C71FE11F08DA8B3D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e2:c7:bc:76:02:fd:00:7e:50:41:23:2d:5c:cc:b7:a2:07:
42:3b:bb:bf:f9:7d:f8:2c:a0:d1:71:1d:26:81:ec:b8:43:4d:
3d:7b:f6:e1:42:e3:1c:40:84:98:31:50:66:40:0f:52:12:40:
63:09:d1:db:e8:ba:4e:d6:f1:69:13:c8:c3:da:e7:5d:f9:1f:
13:f3:bb:3d:d2:3b:0c:43:88:9b:8d:ad:9d:bc:6e:88:8a:07:
95:ae:15:99:79:73:0b:3a:0a:7a:44:4b:95:d9:5b:85:83:88:
b6:3b:f9:16:3c:fa:a4:ec:ed:34:1b:de:5b:c8:70:e0:e9:be:
cd:c2:f3:f4:95:49:55:ee:51:f4:49:9d:66:53:c8:f4:74:5a:
e8:19:4c:10:11:f3:f3:49:3a:1e:de:24:bb:bb:2b:bc:1e:33:
11:ab:75:46:09:ce:f4:94:3e:0b:bc:cf:4d:9e:cb:35:d5:bf:
32:c6:44:fe:67:9a:84:70:07:73:52:f8:89:1e:2f:48:22:05:
52:58:27:12:ae:50:7d:55:60:e5:e8:67:c9:3e:fa:08:a6:17:
a3:42:8f:18:c9:cf:36:3e:a5:96:1a:3e:fb:d8:f4:26:cf:82:
c1:e7:24:ca:a7:a8:c9:7f:e9:fd:dc:0f:78:56:e6:57:7e:33:
fa:b2:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:59 2025 by rpki-client