Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/45B918567C3311F0AAD19DE6DAE4EC9C.roa
File: 45B918567C3311F0AAD19DE6DAE4EC9C.roa (raw, json)
Hash identifier: iNE9cUgmsNJ5catw7T+V+eknWW9FJzG9T1iSGCseA4E=
Subject key identifier: 8A:11:64:57:B4:D5:F7:08:B6:91:61:CB:43:A0:9B:BA:8E:D1:6D:BC
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0A64
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/45B918567C3311F0AAD19DE6DAE4EC9C.roa
Signing time: Mon 18 Aug 2025 13:00:11 +0000
ROA not before: Mon 18 Aug 2025 13:00:04 +0000
ROA not after: Tue 21 Aug 2035 13:00:04 +0000
asID: 36916
IP address blocks: 41.180.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Aug 18 13:00:04 2025 GMT
Not After : Aug 21 13:00:04 2035 GMT
Subject: CN=68a323db-265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:4e:1e:12:11:b5:c5:da:7d:d9:33:a1:c0:
0e:4f:ff:5d:b3:30:bc:f6:37:88:1f:0d:f6:1d:df:
54:dc:a4:15:33:5d:01:0e:96:d2:42:e3:8e:74:8b:
b0:0c:5c:e7:1d:d4:48:80:9a:9c:c5:74:46:fd:eb:
ee:cb:93:1a:9c:45:db:f4:23:ca:ca:da:93:f2:dc:
42:fa:89:3e:3b:62:d4:ba:2b:e5:74:95:84:ce:cd:
77:17:c3:48:dd:7f:58:20:28:db:df:a3:1b:09:e5:
5e:18:d9:28:dc:a2:c8:4c:da:37:3f:d0:ad:e5:cc:
ff:a3:30:04:80:a9:14:7a:5a:7a:75:50:ae:cc:8a:
23:02:76:af:23:ce:7a:38:21:47:2e:c1:ff:c9:24:
3b:7a:b3:29:29:1f:0b:21:01:fe:05:27:45:ce:87:
43:c7:a2:96:a9:18:91:40:3a:c4:fd:e2:7c:f3:44:
97:d0:4f:d6:88:93:6c:b9:a4:65:f3:0e:72:ca:34:
e0:78:25:2a:d4:2d:77:09:e2:64:a7:db:09:1c:4f:
65:53:d8:94:72:62:ae:e6:8d:de:87:03:f0:b5:ef:
fb:6d:b1:11:b6:23:b1:1b:45:25:af:26:0c:0a:1f:
50:44:61:5b:7a:6e:39:d1:7a:8d:6d:a7:c6:37:81:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:64:57:B4:D5:F7:08:B6:91:61:CB:43:A0:9B:BA:8E:D1:6D:BC
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/45B918567C3311F0AAD19DE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:20:1b:b0:0b:10:2b:7c:1f:61:32:48:d8:6c:dc:5f:a5:d4:
6e:c3:1f:ae:7f:05:00:bb:0b:3a:6c:a7:35:8e:51:f8:8b:8f:
e4:f3:32:41:a8:c5:35:1c:7e:cb:fc:93:90:10:c4:85:1b:63:
70:62:91:27:51:a9:3b:93:0c:44:04:41:da:25:7e:46:54:76:
ca:44:b4:41:41:5d:12:4d:a2:6a:18:9b:34:18:bf:47:b6:b7:
13:8d:53:63:22:19:1a:2f:3c:d3:9a:1a:2e:56:7a:65:4c:69:
86:70:7c:65:fe:e2:5c:53:a2:ba:b6:72:16:c0:3c:e1:c5:c7:
52:7b:92:21:70:5e:70:aa:70:f9:d7:8a:f6:3c:d5:11:e3:20:
5f:e2:d4:6b:3f:d5:61:ef:c1:cb:eb:47:d0:69:48:2c:dd:85:
45:06:cc:19:ab:b3:25:eb:13:02:63:bf:a9:4a:b8:8f:a3:c7:
a6:31:bc:a7:69:57:6e:2a:85:37:22:11:ef:f1:f0:27:bf:52:
72:f9:75:b0:cf:d4:4b:28:4d:1a:eb:24:41:98:1d:37:ef:2f:
91:e4:8e:b6:2b:c2:9d:bf:f8:e7:2e:e9:88:ec:e2:3c:1b:7d:
1e:a0:d8:a9:02:8b:18:1f:2b:42:83:51:d3:a1:d0:f5:61:0a:
1d:4c:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:17 2025 by rpki-client