Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1A324760AD1C11F0B48C04E0DAE4EC9C.roa
File: 1A324760AD1C11F0B48C04E0DAE4EC9C.roa (raw, json)
Hash identifier: VVjxKgFBzFQgyT9t4SB+EPQMQZRZhAvUFxvADBJ26rU=
Subject key identifier: 06:53:38:BC:4A:5E:26:CF:A9:7D:A0:30:7D:7B:5B:58:8F:4C:81:BC
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0741
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1A324760AD1C11F0B48C04E0DAE4EC9C.roa
Signing time: Sun 19 Oct 2025 18:47:46 +0000
ROA not before: Sun 19 Oct 2025 18:47:38 +0000
ROA not after: Sat 19 Oct 2030 18:47:38 +0000
asID: 834
IP address blocks: 102.215.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Oct 19 18:47:38 2025 GMT
Not After : Oct 19 18:47:38 2030 GMT
Subject: CN=68f53252-8fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:c1:69:7e:50:36:85:53:c6:4e:f8:bd:36:
e3:3e:ea:32:c6:4c:4c:64:cd:88:f5:34:03:45:c4:
01:a1:1e:58:28:8b:26:6c:6a:ed:73:97:fb:bd:7c:
2b:9d:73:1d:05:17:f0:21:b2:4f:95:7b:ef:b0:af:
b0:2c:a8:8b:13:6d:73:e4:60:93:a4:9f:c9:78:47:
26:db:24:c8:83:22:60:86:3f:0e:92:44:92:8d:75:
90:72:a6:47:53:01:37:f8:5c:79:16:6b:b4:07:18:
ab:ad:ba:03:78:dc:2f:71:ee:77:01:da:51:c2:b4:
67:ba:f6:38:c0:61:08:4b:f0:5b:5d:c9:31:ae:9e:
22:bc:83:3a:2e:52:29:2c:f7:39:13:63:5e:47:8d:
2b:d8:14:d1:37:f9:23:53:c0:42:ee:d3:7f:91:99:
4e:27:21:cf:63:c3:62:5a:1e:1b:86:ae:4a:84:f3:
30:c7:91:ce:f2:e3:cc:24:50:6c:17:90:32:5b:82:
45:2c:1b:c0:7c:c5:34:41:0f:5f:0b:b0:57:0b:a7:
fd:09:6c:50:7f:6a:78:2f:59:47:df:83:2d:5f:21:
02:53:32:16:72:7e:06:1b:e7:91:a2:46:e5:4c:97:
85:88:39:ec:d5:d3:c5:81:1d:f8:b2:d9:ab:15:cb:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:38:BC:4A:5E:26:CF:A9:7D:A0:30:7D:7B:5B:58:8F:4C:81:BC
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/1A324760AD1C11F0B48C04E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e5:45:10:46:c1:d5:c6:1e:de:5c:77:01:79:88:7a:b7:61:
c7:8e:07:d8:9d:73:71:3c:df:3a:00:5e:d2:2e:92:5a:c4:5b:
a9:04:f9:f9:5b:dc:61:40:61:aa:c7:4a:d0:9b:de:45:5f:de:
2a:b9:32:0a:2a:3b:09:af:55:ca:48:91:3e:a1:4d:64:7c:fa:
72:d3:1d:f1:7f:02:77:0a:34:c1:07:af:35:f9:be:3c:6b:fb:
4f:3c:e3:16:af:93:e8:b6:5d:b3:51:6b:08:88:2c:e6:a5:68:
40:18:d1:95:b5:42:85:8a:6f:fb:10:ce:32:a5:1c:e8:4e:e0:
8a:05:5e:db:86:e8:54:b0:1c:be:4a:e8:1b:89:2a:d8:cb:29:
e0:f4:57:f6:43:99:1d:68:e6:34:c3:1f:f1:58:43:15:d4:e7:
04:15:3c:c2:4e:f3:e5:81:2b:ba:2f:ea:55:da:ef:ca:47:7f:
82:60:a5:30:30:45:27:e6:02:b5:49:50:5c:0d:05:6b:d8:2e:
59:3a:a3:b3:59:89:d8:4a:2a:35:69:bd:b0:7f:d4:b4:67:0b:
ad:cf:5f:d4:2a:3d:46:52:11:a0:87:8c:7e:29:11:1b:ab:39:
e0:88:a4:90:a2:ac:93:44:6f:48:20:74:7a:84:97:a9:34:5e:
a5:b6:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:58:23 2025 by rpki-client