Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/6BB0CB74A5A711F088912BE0DAE4EC9C.roa
File: 6BB0CB74A5A711F088912BE0DAE4EC9C.roa (raw, json)
Hash identifier: kB1JbNoc3dBbzjmuhT2h2aENGY9tktmvJCxAT5G6HGQ=
Subject key identifier: 5D:55:77:AD:C6:D0:38:ED:46:84:A6:8E:48:13:52:68:69:7D:0E:49
Certificate issuer: /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial: 08
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/6BB0CB74A5A711F088912BE0DAE4EC9C.roa
Signing time: Fri 10 Oct 2025 07:04:54 +0000
ROA not before: Fri 10 Oct 2025 07:04:49 +0000
ROA not after: Mon 31 Dec 2035 07:04:49 +0000
asID: 329631
IP address blocks: 102.204.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 05:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Validity
Not Before: Oct 10 07:04:49 2025 GMT
Not After : Dec 31 07:04:49 2035 GMT
Subject: CN=68e8b016-dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:70:54:bb:f2:a0:5a:5b:3f:b4:c9:80:da:
92:ec:72:75:10:05:24:ed:24:94:f7:1d:c6:d5:3f:
a1:eb:1a:7f:90:5b:56:e6:55:4a:b1:da:f3:ee:5f:
45:f5:1f:f2:99:02:f4:bb:0e:ca:fe:1b:ad:4a:f4:
de:1b:00:59:a1:cc:50:d4:cb:d0:9f:e3:21:b4:a5:
7f:ef:bc:c8:5c:83:3b:e5:88:64:4c:d2:06:ee:e2:
bb:8e:9f:24:11:92:b0:40:8f:2a:34:6b:e5:1b:99:
38:1d:44:62:dc:c1:10:ca:ed:c8:df:1c:69:7e:a7:
be:01:7a:ee:3d:b5:a9:72:e3:47:10:3b:ec:b6:d2:
c9:c8:7a:aa:8b:20:9b:9d:11:bf:6b:03:ba:01:52:
6c:b2:cf:cc:91:94:bb:0f:4f:30:3b:97:af:05:94:
49:0d:0e:55:76:66:8c:af:05:53:8d:12:32:4f:aa:
2a:a3:a6:72:fa:8a:20:72:89:12:69:fc:7c:59:d6:
e0:44:95:80:4e:2d:00:9b:08:64:58:19:d0:44:4f:
9b:f2:8b:29:65:4f:13:8a:e1:f3:bb:7a:3f:bb:83:
c4:97:64:12:fc:20:fb:ba:d0:4e:9c:91:d6:22:33:
f8:a0:ac:4a:88:d6:73:54:5c:c4:ef:25:a2:9f:06:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:77:AD:C6:D0:38:ED:46:84:A6:8E:48:13:52:68:69:7D:0E:49
X509v3 Authority Key Identifier:
keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/6BB0CB74A5A711F088912BE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3e:4a:45:4c:b4:63:3e:40:d0:e9:22:a6:f7:d5:80:fa:e6:
79:f3:54:ec:41:44:36:04:12:a9:b0:63:73:c9:9d:ea:db:11:
49:10:60:44:83:36:ec:c0:81:12:04:9c:26:2b:3c:81:0c:cf:
9e:68:0a:f5:20:4d:d1:2a:73:05:51:28:97:82:38:cc:cd:0c:
0f:55:a4:8d:42:b1:0f:d4:f1:e8:78:9c:0d:63:49:6d:c4:84:
75:91:ed:98:e8:5a:a5:1f:79:ed:59:9a:ff:d9:5d:d9:63:18:
4c:09:80:e0:5c:16:f5:40:2f:c9:53:9b:5e:c5:7b:52:5e:0d:
e4:2a:b4:48:24:0e:1b:23:99:f5:c5:b0:1f:9a:ec:ad:db:86:
90:dc:49:e7:60:22:dd:9b:cc:56:0d:c5:ee:f8:5f:6a:6a:10:
62:26:65:20:57:ee:1b:d1:7b:97:20:61:b1:4d:1c:8e:ad:58:
72:c7:f4:72:3a:dd:de:b4:19:f4:e9:52:ff:eb:6a:7e:8c:ab:
bd:63:b1:2a:49:eb:0a:98:93:e7:d3:a9:12:bc:c7:6f:cd:e7:
37:b2:1f:b0:0a:27:c9:4f:81:3e:d3:9b:b5:c5:69:be:68:44:
fb:69:71:72:1d:8b:b3:d3:03:42:3b:01:0a:b4:6e:fd:cf:68:
de:5e:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:39 2025 by rpki-client