Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/951B9DB2781711F0AAD136A0DAE4EC9C.roa
File: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (raw, json)
Hash identifier: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=
Subject key identifier: DB:EF:8C:85:14:26:71:F5:76:B1:1B:8B:3B:55:4B:41:A7:D8:01:18
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 075B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/951B9DB2781711F0AAD136A0DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 07:31:53 +0000
ROA not before: Wed 13 Aug 2025 07:31:49 +0000
ROA not after: Sun 01 Mar 2026 07:31:49 +0000
asID: 60171
IP address blocks: 102.177.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 13 07:31:49 2025 GMT
Not After : Mar 1 07:31:49 2026 GMT
Subject: CN=689c3f69-188b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:4b:ad:eb:59:7b:75:ad:eb:72:f6:d0:b0:
9f:ef:a6:14:cb:6c:94:8a:cb:7b:75:89:e7:7c:04:
26:a4:3f:6a:a9:54:15:5c:c2:37:ab:fe:4d:e9:33:
9d:55:4d:57:fd:4d:b7:31:eb:f9:de:a6:83:55:bd:
f8:21:b6:af:50:da:59:5a:d7:da:4e:99:41:9b:24:
a1:e6:15:27:77:c1:77:2c:39:e1:6d:91:91:fd:88:
50:44:05:59:09:b5:19:bf:b5:4f:cf:e8:e9:6d:74:
c3:96:49:0d:3f:f9:ad:d2:de:e2:d7:68:50:00:1b:
c6:07:0c:95:6a:8e:bf:0a:07:27:3e:c5:58:a9:4f:
77:5e:77:dc:58:62:fa:a3:35:ab:9d:4b:6c:88:7a:
d4:be:bc:ad:83:19:a1:b6:a2:77:83:23:22:13:d3:
7f:92:62:37:32:7c:a0:95:8a:aa:69:0a:cd:49:2d:
e0:b2:55:72:1c:50:c9:8a:a2:90:ea:48:0f:aa:e9:
da:55:1c:34:a7:9b:2b:2c:3c:5b:de:98:f3:06:16:
ad:90:e0:72:e2:45:1e:c3:a2:62:88:b7:a3:4f:61:
04:39:17:bc:f9:9e:31:69:33:6e:90:7d:35:c1:c6:
58:59:02:db:d8:c7:6e:46:23:89:87:43:84:1c:24:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EF:8C:85:14:26:71:F5:76:B1:1B:8B:3B:55:4B:41:A7:D8:01:18
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/951B9DB2781711F0AAD136A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:fa:3d:98:42:af:05:a2:53:d2:91:eb:47:78:46:13:22:18:
6f:be:52:a3:89:11:7c:7c:4b:55:3f:74:a3:19:85:42:be:93:
0c:f6:88:56:85:9d:22:b6:8d:a2:47:f3:1e:b0:c0:76:94:14:
2d:a9:81:67:ff:19:47:c0:53:90:09:79:5e:96:68:9e:35:a9:
bf:9d:66:37:bd:67:31:35:b6:e1:1e:d0:a6:36:ee:1e:6a:8d:
78:b7:66:68:0b:df:ef:64:78:1f:52:13:3a:89:c9:c3:54:1c:
7d:5b:4d:4a:1c:a9:74:aa:45:bd:7a:27:3d:47:0d:bd:e4:c8:
82:c5:b1:d4:bc:29:86:49:64:6f:3c:97:3e:a5:4a:46:75:f8:
d5:62:65:0e:e3:70:d3:e1:3d:99:73:3a:ce:29:c9:d9:6d:d8:
0c:a3:02:fe:2e:d8:2a:b2:f0:de:8a:9d:53:63:26:e1:1b:9c:
5c:91:46:f0:f3:8c:8e:62:67:a5:10:59:b3:f1:66:93:87:ad:
24:33:8a:46:a5:45:e1:0b:4a:1e:88:8a:b8:ac:f1:2a:cc:38:
f7:a3:41:1f:75:65:ec:df:23:1b:ea:57:34:15:06:42:2a:c1:
78:0d:6f:5f:6c:9f:2f:1c:09:30:7a:a3:38:48:79:eb:0d:99:
66:02:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:56 2025 by rpki-client