Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/746A98109AAA11F0A3C7FCA3DAE4EC9C.roa
File: 746A98109AAA11F0A3C7FCA3DAE4EC9C.roa (raw, json)
Hash identifier: niMXAvU7fHh+5EdmWVl0mMysSktYu9xrcwOc5R3B42o=
Subject key identifier: D7:1C:F4:A0:61:58:C0:E4:BA:EB:C2:31:EF:82:5D:C2:E5:0B:E3:A9
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07BE
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/746A98109AAA11F0A3C7FCA3DAE4EC9C.roa
Signing time: Fri 26 Sep 2025 07:28:54 +0000
ROA not before: Fri 26 Sep 2025 07:28:49 +0000
ROA not after: Thu 30 Oct 2025 07:28:49 +0000
asID: 22724
IP address blocks: 102.177.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 26 07:28:49 2025 GMT
Not After : Oct 30 07:28:49 2025 GMT
Subject: CN=68d640b6-cd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:95:3b:2b:b0:49:77:ad:bb:4f:3f:9e:24:
9a:61:6f:5b:c5:2a:f8:b0:73:9c:22:69:ad:36:59:
26:41:98:9a:12:b3:d4:49:74:a2:fa:42:e6:6b:05:
0a:c9:7e:38:58:68:33:2d:d2:e3:b1:04:14:e2:0f:
ca:f7:b8:c5:49:d0:0d:9a:bb:ae:23:2b:c1:60:6b:
1a:04:3f:a6:5a:aa:64:84:83:c7:e4:80:14:33:c3:
3e:dc:7d:71:89:cf:70:ef:28:79:fc:9c:69:a7:ef:
49:e4:b5:4f:e8:6c:56:24:20:13:2c:41:29:0a:58:
36:d4:26:e7:ec:6f:c8:37:72:f5:c4:ff:af:75:71:
6a:f3:68:f8:6f:e6:f1:f8:0f:a3:6a:a5:ff:b3:b6:
d4:85:75:7c:96:2c:20:07:1b:f4:98:c3:d3:1c:4c:
69:50:59:39:02:87:53:71:41:be:93:b2:98:29:54:
61:15:30:df:74:7c:ea:75:93:b4:62:af:e9:12:a2:
60:29:6b:8c:90:08:4e:5b:5f:e0:b3:93:e4:43:e9:
ad:4e:ad:f7:42:f6:e8:ce:65:9b:e0:eb:7b:0c:44:
40:8f:c8:75:47:a7:fe:4c:2a:2e:9b:58:75:1f:b3:
a0:e9:78:75:46:e4:d6:d3:79:8b:ae:21:d4:5d:eb:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:F4:A0:61:58:C0:E4:BA:EB:C2:31:EF:82:5D:C2:E5:0B:E3:A9
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/746A98109AAA11F0A3C7FCA3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.171.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:1d:a8:eb:2e:ba:c9:c8:e6:bd:a6:1a:aa:ef:9d:36:6e:af:
bc:3b:34:d5:1d:42:29:7f:e1:03:b5:38:df:e2:7f:94:c9:a2:
aa:e0:ac:6d:9f:fb:40:4e:d0:2d:e6:de:f4:97:23:a0:1e:39:
cc:85:0b:ce:6f:e5:5e:83:8c:e9:14:2c:80:34:15:aa:38:8f:
aa:6d:1d:a5:74:2e:f1:aa:bf:62:d3:ec:3e:34:e6:3f:9b:37:
e8:d3:41:29:c7:6e:b7:94:b3:c3:68:ac:17:6c:12:f0:b6:b5:
16:cc:7e:59:38:82:34:ee:35:27:c9:1a:1b:87:50:07:6f:a0:
87:00:9f:43:87:97:3a:bd:35:eb:d8:59:f3:d3:cb:0d:12:10:
e8:33:e9:8a:13:1d:76:e4:4b:63:bf:68:e7:93:88:ef:4f:90:
b5:2c:29:a0:c8:97:b5:5b:31:c1:d7:2a:ec:f2:24:5e:48:66:
b2:5a:9f:91:be:56:d6:1e:b0:1c:b0:fa:a6:c2:70:0d:80:52:
62:a9:68:55:14:75:6f:1c:cf:bf:16:9a:eb:eb:56:1b:89:04:
c2:37:bb:34:27:91:39:2f:ae:2e:66:36:6f:56:50:8d:0c:6e:
07:fd:2b:61:d3:7c:72:fe:d6:75:8d:1f:60:97:29:ed:22:e2:
05:49:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:28 2025 by rpki-client