Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9FB53966AD1611F0AF4F80BDDAE4EC9C.roa
File: 9FB53966AD1611F0AF4F80BDDAE4EC9C.roa (raw, json)
Hash identifier: fvI+134xQpLs9jK1l0zcAgubM5j7hPLEZKr6qnKJoKQ=
Subject key identifier: 6D:EF:B8:57:8A:42:EE:5D:47:12:09:59:82:CB:41:DA:95:1F:03:AA
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07DF
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9FB53966AD1611F0AF4F80BDDAE4EC9C.roa
Signing time: Sun 19 Oct 2025 18:08:33 +0000
ROA not before: Sun 19 Oct 2025 18:08:29 +0000
ROA not after: Fri 28 Nov 2025 18:08:29 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 19 18:08:29 2025 GMT
Not After : Nov 28 18:08:29 2025 GMT
Subject: CN=68f52921-8989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:1e:f2:5c:54:f4:a3:11:0d:89:17:45:36:
01:ce:2d:88:4b:7d:35:05:d7:7e:b6:16:91:a3:0f:
30:08:fa:6e:1e:21:33:f7:99:48:bb:88:f1:68:81:
7a:65:e1:11:a4:0a:d0:10:65:d5:5d:29:39:94:e0:
32:78:f7:9c:89:eb:b9:a0:63:4b:20:e0:97:53:08:
95:6a:cb:75:07:9d:e6:59:3f:4f:18:ae:be:9e:a8:
fd:94:3d:88:5d:17:b6:a9:49:b8:93:ef:c8:55:26:
4f:77:e7:75:ff:23:21:18:84:64:bc:c6:a6:cd:d0:
2e:82:1f:68:7a:60:c8:e2:b5:3e:3d:6e:d4:c1:d8:
dd:93:0a:ae:00:f8:fd:7d:98:9d:03:a4:dd:39:2b:
94:ce:7e:07:57:f2:31:97:37:68:ba:4a:68:e4:d5:
9b:e5:7a:31:93:34:fc:99:3f:de:df:0b:f9:80:65:
d2:c8:8b:76:c4:ac:88:07:46:8d:36:ae:92:e0:dd:
bd:7d:6a:16:96:c7:63:c7:aa:ff:85:1e:d8:71:6c:
ad:14:b7:93:91:fe:16:db:3b:a6:d4:97:c4:7b:18:
84:de:d5:0f:fa:67:a5:ab:68:c9:b1:23:82:16:31:
4c:40:ca:e0:1c:35:c2:7e:b7:ca:28:b2:34:93:be:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:B8:57:8A:42:EE:5D:47:12:09:59:82:CB:41:DA:95:1F:03:AA
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9FB53966AD1611F0AF4F80BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:36:78:aa:f4:ca:20:53:26:46:3d:b3:43:3c:96:93:4e:60:
5c:67:74:58:99:e5:15:e1:42:2a:4e:95:fc:58:be:91:5d:45:
71:7f:b9:19:ac:ec:07:cb:63:5c:1b:b3:39:31:e5:ad:05:81:
62:92:77:ea:90:f0:d7:43:15:36:a7:d6:90:19:c0:f8:ff:94:
0f:58:4b:0f:8e:bf:fe:24:b9:2e:5d:49:33:ad:8f:50:a9:be:
02:0f:b6:37:50:67:b4:48:35:40:48:6a:72:5e:fa:5f:3f:d3:
dd:a3:40:b7:dc:c7:a3:d0:64:e2:f8:93:35:64:05:35:33:92:
c8:0e:9f:bb:02:4f:f2:99:89:35:f4:35:88:ab:f8:56:c6:fb:
81:0b:26:32:bf:72:96:85:b0:cf:b4:d8:af:fe:55:2a:01:19:
5d:99:73:c2:a6:ca:51:f1:ef:7e:8b:b9:f1:01:3f:f4:e7:78:
1a:88:61:f9:45:db:ef:c1:64:98:97:c7:ef:c9:3f:41:56:49:
ba:08:2b:8b:c0:4a:3c:28:d9:76:b6:49:a5:ed:50:c6:2a:60:
98:00:08:3a:77:56:0d:1e:f4:24:d9:25:60:96:85:8e:7f:f6:
f9:54:da:d4:6b:25:4f:bb:4e:0e:9e:07:c8:1f:d2:a0:a1:ff:
4a:64:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:37 2025 by rpki-client