Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/960E24087E9611F0915EEA8BDAE4EC9C.roa
File: 960E24087E9611F0915EEA8BDAE4EC9C.roa (raw, json)
Hash identifier: AoOLr/Z22+VLviKJUBQXS/ZKbdH8bJ/WQtXUAjA/6SM=
Subject key identifier: 2F:8E:76:EE:1E:12:8F:CB:93:32:D2:37:5D:38:FE:4A:AF:7E:D4:0D
Certificate issuer: /CN=F362438EAF/serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
Certificate serial: 0B
Authority key identifier: FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/960E24087E9611F0915EEA8BDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 13:56:08 +0000
ROA not before: Thu 21 Aug 2025 13:56:02 +0000
ROA not after: Thu 20 Aug 2026 13:56:02 +0000
asID: 329564
IP address blocks: 102.205.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362438EAF, serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
Validity
Not Before: Aug 21 13:56:02 2025 GMT
Not After : Aug 20 13:56:02 2026 GMT
Subject: CN=68a72578-bd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:d2:b0:ad:4d:77:d1:15:93:a3:52:bb:39:
37:80:a4:5c:23:aa:93:35:ab:c3:a3:63:8e:65:94:
a8:dd:38:13:e2:53:aa:4a:c1:8a:a2:71:38:e0:82:
77:d6:ee:87:32:d6:64:c6:98:e6:84:07:5f:19:08:
3c:21:a7:48:e9:f7:c1:53:b6:54:ca:90:c2:cb:c8:
88:a2:c4:09:2b:ec:e7:f8:7f:9d:9a:64:67:31:07:
e9:e1:53:42:d7:49:e9:b9:aa:68:4c:a1:df:ad:bd:
02:d2:ab:a2:51:71:11:ab:59:51:9e:4f:42:ea:0f:
d7:a9:3c:f2:0c:3e:0a:91:2d:e0:30:c2:34:8b:a0:
34:37:8c:8c:43:19:04:df:92:a4:ac:af:23:54:93:
ef:9c:1c:6f:e5:38:7a:ef:d3:c4:14:a3:23:1b:d2:
c0:39:22:17:6b:54:8e:70:cc:90:04:06:38:ad:31:
ef:b8:4d:ba:65:1f:e6:e0:06:28:ae:67:b5:68:b2:
3d:2b:86:b6:ed:1c:8c:fc:bf:92:b1:5b:e5:e0:85:
5d:22:25:36:7c:2e:e6:c4:31:7a:d6:72:a1:50:c4:
9b:78:d2:dc:0c:cf:65:b2:ee:5a:a7:6e:8f:66:4a:
48:c7:97:aa:ff:3a:49:36:c7:e0:8e:9d:6c:2a:f2:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:76:EE:1E:12:8F:CB:93:32:D2:37:5D:38:FE:4A:AF:7E:D4:0D
X509v3 Authority Key Identifier:
keyid:FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/960E24087E9611F0915EEA8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:51:a3:a7:01:b6:c3:3a:a9:ed:67:7a:b9:c1:a3:81:43:3c:
df:d7:08:a7:52:2d:23:21:da:9e:84:de:cc:6d:dd:3a:db:2c:
f6:12:49:6d:3e:e5:bd:07:e7:76:d0:22:e3:30:a0:4b:f1:bb:
78:e8:d5:1e:00:04:b3:41:48:d4:d5:64:8e:8d:1f:7e:b2:2d:
3c:7d:aa:74:29:34:b8:18:2a:18:6f:9a:a9:d6:d5:18:bf:94:
1f:ad:02:a5:08:76:88:16:ab:3e:a0:9e:2d:85:eb:18:79:83:
2e:26:c8:93:15:f9:58:94:1d:63:15:bc:75:36:2e:d6:bb:e2:
b8:2f:49:21:3e:5d:ca:a5:0d:4e:66:55:cc:1d:6c:a6:72:9c:
bf:b3:c5:08:77:26:17:be:67:79:f3:48:b3:b2:cb:a7:a1:46:
eb:c1:ed:81:9b:7e:cd:f7:e0:9c:26:52:d5:c8:6f:30:14:54:
c2:a2:2e:1c:0d:dc:d9:42:98:85:83:36:13:df:e6:e6:43:ec:
09:1c:5a:c4:39:1f:71:76:d3:a0:4a:f4:ce:b6:40:9f:1a:67:
26:0a:74:2d:79:71:bc:5b:3a:f2:d5:6c:16:54:44:33:46:ea:
25:cf:f7:18:37:dc:c0:9b:16:f9:8e:d2:8d:6f:27:d3:27:f3:
fc:2a:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:08 2025 by rpki-client