Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/F503DC0A7F6311F09E649AD0DAE4EC9C.roa
File: F503DC0A7F6311F09E649AD0DAE4EC9C.roa (raw, json)
Hash identifier: HnfAPMLj6MIUmpnhBIKcCsToGWYrnsd1WWqMWod3eD8=
Subject key identifier: DC:19:18:7B:2D:72:94:60:A4:7C:B6:F8:FA:CB:78:A5:79:AA:99:D4
Certificate issuer: /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial: 14
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/F503DC0A7F6311F09E649AD0DAE4EC9C.roa
Signing time: Fri 22 Aug 2025 14:26:14 +0000
ROA not before: Fri 22 Aug 2025 14:26:09 +0000
ROA not after: Thu 31 Aug 2045 14:26:09 +0000
asID: 329535
IP address blocks: 102.205.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Validity
Not Before: Aug 22 14:26:09 2025 GMT
Not After : Aug 31 14:26:09 2045 GMT
Subject: CN=68a87e06-f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:2a:ef:50:7f:30:63:78:9a:c8:95:67:a4:
1c:a4:ea:2e:be:ae:32:86:2b:41:9f:ee:e0:10:54:
61:58:6d:14:45:85:c3:21:7e:c0:39:b4:1d:f8:64:
91:d6:7e:38:e2:f2:88:4a:15:bd:f7:42:2a:5b:56:
64:f4:9d:dd:93:9f:2a:60:8f:49:0e:dc:b8:d7:d3:
5a:9a:72:9e:1c:39:de:9d:aa:d2:3c:48:7f:ba:2e:
ab:47:14:89:b6:97:4e:14:67:45:6b:db:30:12:c2:
70:21:63:f2:ef:ae:7a:81:bf:44:14:00:85:37:06:
db:2d:13:4e:96:e0:1a:2d:59:79:d5:1e:eb:33:d5:
a2:86:9c:5e:0b:9e:14:9a:aa:f0:5c:4a:be:9a:46:
ed:f5:20:99:82:ea:8d:7d:e6:c1:26:76:05:61:6f:
64:0e:e2:98:c5:6b:b5:89:4f:76:75:ff:db:a7:fa:
7f:53:8b:18:a3:2b:05:2c:70:38:e9:a9:14:53:fb:
ce:c6:67:f9:57:4c:12:99:b2:be:37:be:97:05:4d:
43:66:1d:86:b0:d9:eb:d2:71:6a:4f:41:4f:40:9c:
da:04:fc:ba:0e:6b:dd:82:e6:95:be:72:1b:75:67:
6b:3c:7c:8f:dc:86:5a:f7:bc:36:ec:2a:4b:63:d3:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:19:18:7B:2D:72:94:60:A4:7C:B6:F8:FA:CB:78:A5:79:AA:99:D4
X509v3 Authority Key Identifier:
keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/F503DC0A7F6311F09E649AD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:51:38:ff:d7:7d:62:88:7d:c9:91:ea:85:a9:1c:20:61:89:
b6:56:88:83:63:8c:4e:f1:2b:b4:97:51:c1:34:6d:ef:62:01:
53:8c:09:df:f5:22:8a:0d:c3:50:71:2f:c9:fa:a3:91:81:c2:
b9:38:3e:22:ce:b9:39:7b:70:06:3c:4e:7f:43:cc:6f:9f:55:
b4:7a:a3:da:22:82:4c:b3:86:90:18:75:bb:80:c0:86:62:1a:
a6:b9:c6:02:73:39:74:b0:7d:cf:1f:b6:1d:c6:83:7c:0f:af:
d3:4e:56:6c:2c:b2:8c:14:93:50:2d:20:4b:c6:86:1d:8c:b6:
2c:c3:c7:f3:8d:16:0a:79:5b:78:8f:ce:76:ec:ee:9d:85:6c:
8d:c5:1c:e5:01:01:cc:6b:af:01:e6:e7:fe:52:cc:39:d2:a4:
cb:56:21:42:f8:95:3b:86:45:a4:d6:d7:ce:5b:72:9a:83:b8:
9b:4b:ce:ea:0c:b5:63:8a:f9:c1:9c:d8:95:64:86:8e:c6:53:
e9:1e:40:63:b2:0b:f2:e5:5c:fd:f6:bd:8b:f2:d9:18:12:fb:
21:13:5b:9c:16:e1:c5:8d:10:cf:77:7e:40:a6:3d:0a:03:55:
1e:6f:49:a6:57:a5:fe:2c:9a:32:6a:29:53:c0:e7:d3:f0:09:
c6:06:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:29 2025 by rpki-client