Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/100568547E5E11F0A78B849ADAE4EC9C.roa
File: 100568547E5E11F0A78B849ADAE4EC9C.roa (raw, json)
Hash identifier: PvZoBj2A7ENispwmai6nCrzzAnKO2XiSPBgvLBIB2QA=
Subject key identifier: 7D:A6:75:0A:A4:9D:EC:FE:82:FC:D0:6D:05:59:1C:E6:E8:49:08:DC
Certificate issuer: /CN=F365461DAF/serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Certificate serial: 02
Authority key identifier: D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/100568547E5E11F0A78B849ADAE4EC9C.roa
Signing time: Thu 21 Aug 2025 07:11:31 +0000
ROA not before: Thu 21 Aug 2025 07:11:27 +0000
ROA not after: Tue 03 Dec 2030 07:11:27 +0000
asID: 329578
IP address blocks: 102.205.100.0/22 maxlen: 24
2c0f:68c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365461DAF, serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Validity
Not Before: Aug 21 07:11:27 2025 GMT
Not After : Dec 3 07:11:27 2030 GMT
Subject: CN=68a6c6a3-8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:8f:6f:ea:c0:f2:3d:7c:e1:16:69:3f:50:
0b:1f:af:19:2f:8e:53:ee:16:c5:0a:43:7c:ac:0c:
ca:1e:2c:0d:81:fc:40:ce:af:df:40:61:78:5c:79:
b1:6f:60:f5:85:d8:50:d6:08:bb:5f:71:c6:8d:8b:
39:6d:aa:67:79:24:db:1d:96:6c:9d:81:de:7c:b6:
ae:4c:5f:49:7a:6e:26:fd:a7:8c:0f:7c:61:e4:2a:
aa:18:d1:d7:c5:34:b6:cb:77:8b:fc:81:f8:f0:b3:
5c:3d:f7:22:bc:9d:fe:75:93:89:58:02:11:c3:47:
46:4d:05:7e:a2:83:f5:57:8b:93:f6:63:ac:20:07:
12:7e:11:ef:bf:b0:ce:be:0b:3e:a0:ab:c5:0f:80:
1c:c5:1b:75:e6:02:2b:ba:3b:5e:5b:95:87:20:83:
43:97:b0:23:e4:7a:aa:a4:5f:af:d2:95:22:2c:0c:
19:4c:66:31:57:f9:57:a8:09:6a:8c:ab:9b:f7:86:
1d:b8:b1:58:d4:d7:09:bb:d4:ed:2b:04:72:28:81:
39:7e:01:9c:1d:b0:e1:3f:85:1c:5b:6a:66:a3:52:
33:fe:c0:26:1f:3e:58:66:1f:e2:b2:a5:1b:82:d1:
6e:7b:b9:03:46:d8:6e:19:a4:15:28:c5:8f:8b:55:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A6:75:0A:A4:9D:EC:FE:82:FC:D0:6D:05:59:1C:E6:E8:49:08:DC
X509v3 Authority Key Identifier:
keyid:D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/100568547E5E11F0A78B849ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.100.0/22
IPv6:
2c0f:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:95:8f:d8:ad:5f:b9:74:18:66:ca:08:d5:6d:fe:cd:1e:f5:
b4:87:44:ed:b7:a8:80:34:84:d5:44:b5:d8:c8:a1:e2:dc:d1:
bb:44:7c:ef:eb:95:76:5a:cd:8b:e7:3c:e4:c1:16:62:60:69:
b8:ee:60:94:14:9b:d9:2e:1b:56:01:bf:92:54:92:50:cd:01:
80:0a:f0:01:d7:49:62:8b:0f:72:35:b8:8a:95:1d:a4:0e:c8:
55:19:24:4c:83:27:41:fe:ad:07:60:7c:fc:74:da:38:87:f6:
b4:67:3e:85:6f:31:13:e1:50:de:4a:3d:1c:3d:de:60:1f:2e:
d6:d4:2f:12:05:7f:a6:b5:94:64:0b:40:de:88:8a:ca:89:bd:
d7:3c:c1:46:90:10:45:f2:24:f1:e5:b6:11:25:37:0e:03:4d:
60:d7:a0:c8:4e:4e:bc:52:df:fe:70:b0:7f:ad:98:19:ad:00:
05:d2:8a:2a:b7:86:dd:b3:a5:ed:9d:86:52:a7:6b:1f:af:a3:
4c:2d:94:c8:d4:70:74:8e:cf:d7:cb:9a:d9:a8:4b:7c:2c:14:
f6:45:9e:54:f0:fc:d9:b9:21:01:67:77:d2:2d:5a:29:a9:ed:
e7:62:c7:1c:ac:68:1e:46:39:73:43:cd:62:c2:af:df:32:8f:
dc:06:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:53 2025 by rpki-client