Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F97058B6742A11F0810B2A8DDAE4EC9C.roa
File: F97058B6742A11F0810B2A8DDAE4EC9C.roa (raw, json)
Hash identifier: MJ5nCx+xhx6AqVPExidsnCJBFtUNetW5aMJNhawGs2Y=
Subject key identifier: 12:0A:F2:C3:3B:F2:9A:C6:82:EB:6C:45:1E:82:4E:1F:CA:3C:60:F7
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0754
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F97058B6742A11F0810B2A8DDAE4EC9C.roa
Signing time: Fri 08 Aug 2025 07:40:37 +0000
ROA not before: Fri 08 Aug 2025 07:40:32 +0000
ROA not after: Sat 13 Sep 2025 07:40:32 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 8 07:40:32 2025 GMT
Not After : Sep 13 07:40:32 2025 GMT
Subject: CN=6895a9f5-189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:be:04:8e:13:13:45:a7:22:df:a1:e3:9a:
5e:84:52:b7:33:09:fe:8f:cb:96:5e:9b:0e:10:32:
54:68:58:44:7b:8e:ea:81:b3:6e:a8:e6:77:d6:31:
df:b2:3c:d8:22:61:2e:2e:54:f2:be:8f:7f:0f:77:
bf:31:93:9a:a3:f2:14:1b:be:53:06:4e:cc:00:bd:
33:c0:d1:38:29:11:8c:0b:2b:c6:9e:72:32:49:d9:
27:04:1c:0c:6e:90:2c:71:6b:5f:72:b3:c3:52:a7:
5f:bc:8c:6d:e9:b6:70:89:86:4a:2e:82:57:b3:fa:
ab:90:3f:8c:07:17:d2:8b:24:52:9e:98:b3:2e:10:
93:87:09:a3:a1:2f:31:a0:64:6a:78:ab:a2:70:ab:
a4:7e:a6:6f:48:b0:50:cf:f4:a6:bc:26:37:19:30:
d6:e4:c2:14:fe:b4:be:79:d2:bb:a9:1e:ca:1a:6d:
3f:59:c8:b0:46:55:85:6c:92:1c:d5:ea:c8:21:23:
fc:73:3f:ad:cd:61:ad:a4:b9:c4:75:06:50:8c:7b:
5a:1f:90:2b:03:7a:cd:93:51:33:e0:d1:57:51:b2:
64:dd:c1:18:7e:a7:02:cd:85:3f:ed:98:72:d3:5e:
29:df:2f:c2:2c:60:be:a9:92:11:de:7d:e2:6b:8e:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:F2:C3:3B:F2:9A:C6:82:EB:6C:45:1E:82:4E:1F:CA:3C:60:F7
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F97058B6742A11F0810B2A8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:85:3c:61:9f:09:75:3b:ba:fd:2a:34:48:d2:33:89:50:fb:
3d:50:f3:a9:26:55:c7:2d:95:7c:c2:4e:01:a7:50:61:0a:93:
79:80:6e:e3:f2:fc:20:67:21:dc:5d:5f:c4:ee:cf:79:1f:55:
9e:46:09:c9:5d:2a:f7:3b:f6:01:d7:e3:35:18:db:45:5a:08:
ff:44:8f:51:e3:4d:24:d2:2c:3e:73:01:81:c9:cd:d5:31:2c:
87:f9:ab:08:ce:6f:f7:b4:e5:09:d2:da:c7:78:fc:09:4d:38:
48:d8:13:22:8c:48:8f:f4:ee:d2:2f:80:8d:47:b7:ff:21:b7:
69:5a:5a:80:a7:49:37:b7:50:85:76:a2:06:1f:3a:37:2e:44:
8d:3d:83:3f:53:bd:cc:4d:95:3e:c6:35:29:e0:42:c2:0e:12:
9a:2c:5b:a6:e5:63:f6:e2:85:ca:1d:54:ca:17:df:0a:48:96:
63:f8:a1:cc:77:3d:03:99:5d:e0:b1:d3:1e:ab:f4:60:29:a1:
2f:92:98:82:70:19:1f:8b:49:75:bd:ba:36:21:27:0a:2e:dc:
bc:49:3c:00:a9:af:85:e2:5a:98:0b:6e:c9:79:12:b4:02:7b:
91:95:a1:61:5a:57:80:3c:81:9f:30:95:26:33:11:cc:08:59:
13:dd:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:05 2025 by rpki-client