Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BB1D368A952F11F08414C6A7DAE4EC9C.roa
File: BB1D368A952F11F08414C6A7DAE4EC9C.roa (raw, json)
Hash identifier: TPJQZkj3HZaHbePzorSLkJXJUIjVtsNnfbGcfaToUso=
Subject key identifier: 0A:81:2A:F0:8B:A9:F8:11:25:FA:25:30:19:B3:59:B1:26:5E:EC:CE
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07AB
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BB1D368A952F11F08414C6A7DAE4EC9C.roa
Signing time: Fri 19 Sep 2025 08:07:49 +0000
ROA not before: Fri 19 Sep 2025 08:07:44 +0000
ROA not after: Tue 28 Oct 2025 08:07:44 +0000
asID: 141718
IP address blocks: 102.177.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 19 08:07:44 2025 GMT
Not After : Oct 28 08:07:44 2025 GMT
Subject: CN=68cd0f55-42bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:64:88:57:8d:45:1d:df:3b:80:0c:3b:99:
3c:3c:06:d1:03:61:80:69:bf:3a:3d:7a:ed:73:8a:
cd:c9:a5:ba:83:f9:fe:99:dc:66:3e:a4:7f:f9:ba:
94:d6:17:11:98:2b:32:02:b9:94:3f:50:00:2c:df:
d8:dc:c2:e6:c0:4b:26:23:88:49:c1:c7:1a:bc:d6:
d3:73:89:d5:a2:07:99:e1:ac:33:2d:50:24:10:06:
1f:ac:8c:1d:9c:7e:dd:84:36:a6:78:e3:f2:7d:f3:
11:f5:6b:b8:58:86:cb:5e:fc:11:0e:1a:78:cb:11:
50:d5:94:e4:11:41:50:97:00:d5:5e:ed:0e:b6:be:
d6:eb:d8:d4:3e:9e:55:08:0e:fb:c3:b2:15:27:09:
98:64:f4:b4:81:46:60:d9:1a:e8:39:86:69:44:02:
47:40:23:db:e5:7c:33:f5:25:5d:4e:c9:95:21:1d:
bf:b0:0b:34:18:02:0e:2a:2e:94:b6:ef:19:aa:51:
3e:f3:09:4b:c9:69:7b:77:cf:b9:0c:28:65:0e:82:
05:53:0f:c8:0f:19:cb:aa:16:16:35:65:b4:dd:d1:
72:04:a0:c7:e4:e6:85:db:dd:84:93:21:a0:55:d1:
b2:54:58:f7:90:e9:29:39:4b:da:1c:43:f4:96:a7:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:2A:F0:8B:A9:F8:11:25:FA:25:30:19:B3:59:B1:26:5E:EC:CE
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BB1D368A952F11F08414C6A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:59:e5:bb:73:37:54:3a:2f:a6:80:45:f9:bf:52:21:3a:8b:
5a:ca:11:52:f5:58:21:d7:9f:b7:18:86:dc:f3:4b:a0:53:84:
60:a0:64:4e:34:e4:82:9b:fe:aa:d4:98:0c:21:f3:5a:4f:d8:
15:07:14:e8:f1:76:b0:eb:08:d0:8d:77:6d:a4:e0:84:8e:24:
08:76:47:1c:e7:19:b2:25:5f:b3:1d:7b:a5:e4:41:96:58:f8:
01:f7:11:f0:a8:b8:e0:d7:0c:23:83:64:dd:23:26:8f:74:c1:
1b:9d:08:eb:6b:82:af:6b:67:95:91:cb:da:53:89:cb:ce:c1:
30:4e:d4:b6:a2:0c:5d:20:cc:9e:30:b3:da:09:8c:0f:ee:22:
3d:b9:c3:11:03:08:77:ed:d5:18:9f:ad:e6:5b:56:ac:0a:a4:
f0:ba:76:44:19:73:eb:09:20:2b:25:87:c1:71:86:eb:e6:99:
ff:9c:c8:3b:ae:43:97:0e:0f:7e:d8:70:4a:29:94:1d:b8:ab:
ef:fb:b4:e3:bd:4d:44:fa:13:e2:71:af:63:f6:46:ff:af:81:
2b:79:75:1b:22:8c:6f:50:b0:df:d7:2c:ce:e7:a7:fe:fe:e1:
cc:3b:26:30:21:ed:c7:ae:22:53:27:d8:21:b2:dd:84:2d:40:
f4:32:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:42 2025 by rpki-client