Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/2DDF6242785211F09C627F97DAE4EC9C.roa
File: 2DDF6242785211F09C627F97DAE4EC9C.roa (raw, json)
Hash identifier: KfVx4XuHxXdT/lIKs1z90Wbx+SIasU2oTwGygVCCqkU=
Subject key identifier: D4:CC:33:FD:9E:CC:48:C2:BF:2E:9E:06:2C:D9:AF:E6:74:7D:27:87
Certificate issuer: /CN=F368C55FAF/serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
Certificate serial: 4A
Authority key identifier: AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/2DDF6242785211F09C627F97DAE4EC9C.roa
Signing time: Wed 13 Aug 2025 14:31:20 +0000
ROA not before: Wed 13 Aug 2025 14:31:16 +0000
ROA not after: Mon 31 Dec 2035 14:31:16 +0000
asID: 329468
IP address blocks: 102.208.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368C55FAF, serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
Validity
Not Before: Aug 13 14:31:16 2025 GMT
Not After : Dec 31 14:31:16 2035 GMT
Subject: CN=689ca1b8-60a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:d6:d4:37:f0:7b:6c:af:5d:a3:9d:66:73:
e6:9e:19:0f:58:8f:23:96:10:f4:fa:34:88:06:0b:
08:79:1e:41:93:d8:52:e1:70:2d:01:a3:54:c3:05:
f1:ff:fb:4b:e8:ad:be:c8:0a:5f:de:3b:0c:ab:45:
d7:79:06:e9:95:66:eb:66:90:ae:ce:8e:2c:55:d7:
58:d1:62:63:9a:6c:39:ab:a8:a6:74:30:2d:3a:6d:
b1:75:6c:41:cc:52:73:9e:bd:31:86:29:d2:71:52:
82:3d:12:8e:1f:ca:81:4b:cf:bb:ef:86:b9:e3:ed:
de:f7:ff:42:24:d5:b7:b8:62:cb:83:2b:a7:d3:e4:
fe:ee:dc:b4:b3:77:89:95:e9:a8:d1:17:6c:88:05:
4b:1e:20:25:7a:85:1c:2f:0e:9a:a9:ae:e9:9e:d7:
a4:f2:1b:71:0e:e6:ea:0b:8c:9a:be:b9:6d:1e:0e:
49:58:89:f7:9e:b7:ad:6c:b3:70:1a:ed:f4:c4:a6:
b6:77:04:d8:d0:a7:da:66:45:1a:70:ac:f7:c3:ff:
16:65:24:d8:69:04:8f:8d:a6:41:25:6b:10:68:08:
45:05:c8:2c:56:39:1f:85:c3:a8:0d:d1:89:92:ff:
9e:48:77:34:9d:17:53:a6:e3:74:98:1e:2b:43:64:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CC:33:FD:9E:CC:48:C2:BF:2E:9E:06:2C:D9:AF:E6:74:7D:27:87
X509v3 Authority Key Identifier:
keyid:AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/2DDF6242785211F09C627F97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.208.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:22:b9:85:92:33:2a:3a:66:54:93:24:d5:0d:31:b4:09:d7:
25:cf:fa:5d:9d:35:96:c1:73:2b:50:3f:38:13:32:dc:13:e7:
50:ef:fe:04:8e:3d:17:9d:4d:b2:97:37:5c:34:c7:44:2b:cb:
2e:2d:93:90:26:f3:6f:9e:f7:d9:39:2d:37:d8:53:1a:da:cd:
25:64:72:c4:0e:8e:43:5c:f6:8e:31:00:2a:7b:73:47:e9:e1:
aa:68:0f:39:77:e4:c9:66:82:57:ac:79:6e:30:76:a5:d3:f3:
22:76:d0:59:cc:90:72:15:51:e7:e0:a2:7a:a7:b9:21:35:a3:
54:89:29:e0:a4:53:ed:02:fd:be:fc:7b:cc:71:95:c8:90:3f:
85:63:81:c3:82:95:4f:7c:68:3b:aa:20:ce:14:6e:13:0c:03:
d9:89:21:97:a1:69:fd:d1:27:9d:bf:63:f3:39:27:f1:85:7c:
1f:c3:5e:32:fa:e3:93:fb:70:f7:09:6a:0b:28:79:d6:07:a1:
73:f3:22:ad:e8:16:b7:48:7d:3b:9f:f7:76:7f:77:b7:cd:4a:
91:7d:db:6a:87:50:8d:8f:34:f7:fa:2d:0f:7c:43:21:17:f7:
2c:f6:40:2c:23:ea:25:52:2c:d1:a3:f3:24:39:9b:92:31:75:
66:ca:3d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:03 2025 by rpki-client