Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/EADFEADE7C0C11F080ED29EDDAE4EC9C.roa
File: EADFEADE7C0C11F080ED29EDDAE4EC9C.roa (raw, json)
Hash identifier: tWfWBE75OoL+WzrS8icGHg9C/DfLO31zKO7wKYgG5TU=
Subject key identifier: 95:EC:B4:6B:57:3D:F0:FC:47:03:56:E5:D0:46:91:1E:06:74:49:D4
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 06FA
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/EADFEADE7C0C11F080ED29EDDAE4EC9C.roa
Signing time: Mon 18 Aug 2025 08:25:37 +0000
ROA not before: Mon 18 Aug 2025 08:25:32 +0000
ROA not after: Sun 18 Aug 2030 08:25:32 +0000
asID: 21859
IP address blocks: 102.215.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Aug 18 08:25:32 2025 GMT
Not After : Aug 18 08:25:32 2030 GMT
Subject: CN=68a2e381-dd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:85:b1:9b:f9:d4:a6:17:12:76:b3:a3:7b:
52:43:f6:82:90:2c:cf:04:e0:f5:69:9a:58:91:83:
1b:ff:3f:b3:ef:50:a2:be:72:77:f8:85:04:cc:d6:
1f:52:12:ff:8e:10:27:46:38:f5:73:a3:9d:c8:6f:
ad:7f:bb:69:a1:0e:fa:cc:f6:14:44:bf:5e:e0:ef:
10:71:cf:a1:aa:eb:51:6c:fe:aa:f8:f0:d8:47:39:
dc:87:bf:27:e9:e3:c1:62:a7:ed:7d:cd:64:34:e3:
a3:42:9b:2a:7b:d7:29:fc:f0:fe:14:6e:c9:e6:5c:
9a:0a:08:01:a7:d3:fd:c1:f7:21:ef:68:c6:45:f2:
5c:b4:b0:1a:27:8e:22:e1:f0:61:eb:fe:e1:9f:dc:
68:75:a5:55:d5:ca:d3:89:a5:68:62:32:6d:dd:9b:
b5:7b:c6:07:84:da:38:ab:08:1c:3f:75:40:95:b9:
44:dc:44:59:ac:29:2b:c3:7d:7b:d1:b8:50:6c:c6:
6a:50:93:d4:b4:67:8b:be:f0:c8:95:f2:d2:a9:c6:
12:d0:3f:06:47:fe:e0:cc:51:3b:2d:93:f2:ef:48:
85:0f:dc:fc:48:7b:ca:5d:51:fb:ad:12:12:be:69:
0d:30:77:fe:50:da:b2:fd:5c:35:eb:e8:76:3b:57:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:B4:6B:57:3D:F0:FC:47:03:56:E5:D0:46:91:1E:06:74:49:D4
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/EADFEADE7C0C11F080ED29EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7c:7d:a6:08:e6:6c:5e:a2:4e:3a:6a:30:a9:5d:da:74:6e:
33:f5:62:0b:f7:da:1a:c5:7c:9a:c6:04:81:7a:94:c3:17:2c:
85:99:d9:e2:dd:7d:4d:b6:90:0b:0e:cd:12:58:b1:2f:a8:68:
5d:bc:95:7a:c5:98:c5:d1:d9:1d:23:eb:5a:2b:24:02:f1:aa:
21:29:63:a7:1c:a6:c7:fe:df:f4:3d:b7:3a:44:88:e4:22:c1:
95:c1:71:81:85:1b:e7:84:da:4f:12:30:bc:c2:d4:30:ec:e1:
ad:02:bf:b8:3e:01:39:40:77:b0:be:a9:3f:33:01:a3:de:b8:
57:99:1f:45:8b:4f:30:cc:0f:86:b3:3f:76:9a:5c:df:1b:ec:
a0:6f:9a:cc:dd:db:52:ca:a2:b1:ce:3e:3e:ef:68:d4:9c:99:
c5:b1:a6:20:51:85:dc:73:69:44:68:d6:9b:55:c1:5b:1b:c7:
ed:b1:de:23:4b:de:cb:7a:05:40:9c:c7:31:46:f6:8d:8e:b6:
dc:e8:d1:d7:7b:b1:ba:6a:a2:0a:d6:bb:5d:f8:be:ec:dc:3c:
70:12:6a:a0:f2:ba:e8:1a:99:52:03:9e:64:dc:2f:c7:a8:76:
4c:66:d1:ba:ef:f6:ec:4d:34:57:ef:00:6f:28:1c:8b:bb:e7:
8b:92:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:50 2025 by rpki-client