Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9ADD2568A35011F09D13FEB7DAE4EC9C.roa
File: 9ADD2568A35011F09D13FEB7DAE4EC9C.roa (raw, json)
Hash identifier: X5iP03usg/QEneRQuMvi+RKF4KU76rAutULa0XBNugY=
Subject key identifier: C7:54:BE:BC:84:F7:39:6B:5D:F1:F3:BC:EE:89:10:11:93:14:37:DA
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07CF
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9ADD2568A35011F09D13FEB7DAE4EC9C.roa
Signing time: Tue 07 Oct 2025 07:38:24 +0000
ROA not before: Tue 07 Oct 2025 07:38:19 +0000
ROA not after: Thu 13 Nov 2025 07:38:19 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 7 07:38:19 2025 GMT
Not After : Nov 13 07:38:19 2025 GMT
Subject: CN=68e4c370-1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:23:8c:42:01:86:f3:e3:7c:93:3d:ed:9e:
e8:48:30:82:9f:0c:18:30:03:35:3a:e9:c3:e3:c6:
c3:35:ff:3d:e9:35:9c:ed:5b:bb:23:7f:80:b7:28:
24:ad:17:17:5c:47:ed:7b:9b:16:b5:90:25:3c:a3:
0d:8d:07:54:ac:6e:45:fa:1e:5e:1d:32:3e:e8:d5:
9f:55:26:b6:d8:ac:53:42:50:9d:db:db:74:6b:55:
4a:2f:d1:39:2d:0e:0c:99:dd:98:83:4a:77:8d:a2:
23:fb:94:9f:bd:a7:7c:57:63:36:b1:d0:89:e7:5a:
54:93:df:e3:80:ab:11:a3:00:c2:de:48:84:90:f0:
49:c2:8b:fe:62:a8:f2:35:69:7f:2d:bf:bc:af:8f:
87:3b:37:fd:16:b9:05:39:ce:6b:eb:bd:ed:9a:f1:
75:c7:96:02:0c:ea:7f:7b:17:82:24:db:58:17:19:
91:60:99:e6:17:43:5b:3a:bc:37:10:3c:6c:97:c7:
08:42:d6:f7:91:a2:d1:e7:9f:24:18:7e:7a:32:d2:
d0:b9:8b:75:f1:e1:bd:cc:74:77:82:75:db:a5:6f:
6d:52:a4:4a:6a:ba:80:81:d2:ec:e7:d7:73:f0:e4:
53:5d:11:c1:69:bb:52:fe:0e:7c:9e:b1:c7:43:4c:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:BE:BC:84:F7:39:6B:5D:F1:F3:BC:EE:89:10:11:93:14:37:DA
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9ADD2568A35011F09D13FEB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:08:70:55:1a:00:e0:59:d1:c7:73:10:18:a4:30:c1:04:77:
7a:78:d6:2b:d5:e4:b5:76:13:5a:17:c4:00:c4:c1:77:0f:c4:
ea:80:6a:3b:fe:fa:05:45:3d:be:44:9c:95:d8:b7:8e:e2:42:
ec:7e:3e:d5:86:9a:79:04:dd:7d:ba:5c:e5:12:b8:6d:0f:46:
4e:05:29:80:b5:ab:5b:85:29:44:8e:3a:9f:3e:3d:c0:71:a4:
cf:7c:bb:e5:12:e5:8f:84:f3:ea:ba:7f:70:e6:c3:d6:77:14:
3e:b7:1c:e0:5a:0f:36:aa:0c:4f:da:d6:24:aa:28:f4:29:12:
bd:43:56:f5:5d:d6:77:9a:b5:0e:e0:55:4a:50:86:84:54:e6:
fd:f8:7d:fb:b9:89:9c:70:c1:90:7d:92:d5:90:32:b8:c1:5c:
ec:ce:54:c5:12:a5:47:d5:46:01:e6:5f:e1:58:48:1f:dc:e5:
ec:80:0b:99:10:0b:71:e2:d1:30:c5:d7:c1:85:20:75:09:11:
d2:fd:e0:72:47:1d:ad:d0:32:bb:d6:b3:3f:82:52:64:98:a8:
ba:80:88:d9:85:35:ca:a9:8c:14:9c:0f:8f:2c:49:90:31:ba:
0a:03:5f:22:84:94:58:38:fd:c5:12:e5:25:df:7d:2a:62:a7:
4f:aa:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:30 2025 by rpki-client