Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/41D8DA8C9D2111F088539995DAE4EC9C.roa
File: 41D8DA8C9D2111F088539995DAE4EC9C.roa (raw, json)
Hash identifier: usUOF3SfkpfcLIUOsrztuIFlBZuUcdWMiuavxqFlQ4U=
Subject key identifier: 75:07:57:73:BF:CC:30:42:5B:61:29:20:4A:A7:88:AF:E9:97:B9:D2
Certificate issuer: /CN=F369E91FAF/serialNumber=09CF7BDCA3A69190C22405199101686954F4FDE9
Certificate serial: 02
Authority key identifier: 09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/41D8DA8C9D2111F088539995DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 10:44:22 +0000
ROA not before: Mon 29 Sep 2025 10:44:17 +0000
ROA not after: Sun 29 Sep 2030 10:44:17 +0000
asID: 329418
IP address blocks: 102.209.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
rsync://rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 05:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E91FAF, serialNumber=09CF7BDCA3A69190C22405199101686954F4FDE9
Validity
Not Before: Sep 29 10:44:17 2025 GMT
Not After : Sep 29 10:44:17 2030 GMT
Subject: CN=68da6305-82ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:1d:b3:02:aa:91:2a:46:af:cc:bd:e7:48:
cf:cd:53:67:2a:7e:0f:7d:6a:5e:6f:cd:33:b3:5d:
25:a3:a6:30:43:f6:63:ad:89:bc:2c:3d:22:b3:3d:
17:55:58:ff:b5:a4:c8:6b:af:18:8c:76:db:78:e5:
d5:ee:af:54:1c:71:e3:45:a5:5c:96:d3:66:89:ae:
bd:ac:68:47:cc:3b:74:f3:39:d4:c9:53:39:e2:d4:
7b:0c:03:80:99:cd:c8:d1:84:d8:1d:0b:ef:49:45:
64:e8:d2:cc:20:60:dc:3d:85:3d:42:db:68:82:35:
53:4f:89:7a:48:f6:d7:3a:e7:bc:4d:f7:bd:dd:47:
8a:73:da:28:87:e4:53:97:b2:fe:7f:9b:9c:14:98:
a6:e8:4a:6e:ae:c2:dc:f5:36:f5:ee:df:9e:9c:ce:
17:b5:62:3a:78:28:41:48:ec:5a:eb:cd:63:fe:e4:
80:dc:3b:be:0a:74:94:44:45:c9:34:00:a7:44:bf:
d5:93:e0:c4:3e:b5:25:c2:47:00:69:10:d6:34:0a:
9b:42:7d:2f:7a:b9:3e:55:78:90:49:7d:a9:54:ee:
ce:8f:aa:86:1b:fc:67:63:4d:af:42:7d:ad:f2:a3:
f5:9d:f7:18:46:f3:4c:35:5c:28:41:e3:2e:e8:8b:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:57:73:BF:CC:30:42:5B:61:29:20:4A:A7:88:AF:E9:97:B9:D2
X509v3 Authority Key Identifier:
keyid:09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/41D8DA8C9D2111F088539995DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.153.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ff:11:27:1c:08:86:a6:2c:bd:af:82:35:08:cd:4f:b4:a8:
71:ed:45:4a:46:6d:a7:40:93:d8:1b:17:5d:a0:d4:fb:a2:34:
6e:86:cc:04:8d:7d:a7:4f:58:c9:da:18:13:64:fc:bb:14:bd:
49:11:72:3f:81:14:ea:55:bb:3d:9c:bc:66:45:a6:d0:67:15:
94:29:78:af:a3:4b:c3:ae:1f:01:ae:f0:84:ed:74:66:48:74:
e3:ed:d7:6a:e4:ad:cc:bb:52:2c:c4:fb:0a:69:10:fc:95:29:
06:83:c6:a3:86:29:2c:95:38:84:94:34:7d:c1:4d:92:e7:5d:
ad:82:5d:26:24:b5:46:7f:5d:a8:fe:e2:8f:03:f2:7b:d4:68:
77:3e:41:49:bb:0d:e0:22:72:f3:6d:8c:3f:f2:dd:ef:5d:d1:
8b:d4:27:93:9a:40:07:5e:a6:f5:d2:f7:d1:24:f4:c2:24:f1:
f7:47:f1:28:6e:62:bb:e5:14:48:ed:59:14:1c:6f:4e:81:bb:
46:ff:0b:61:39:f0:66:2d:11:df:7d:73:64:12:41:a4:39:be:
c1:88:ba:8a:72:6f:6c:55:f1:bb:c1:1b:7b:9f:1c:53:26:08:
ef:5d:2e:24:5e:82:91:86:a7:c1:af:2c:ac:37:ed:f4:c7:fc:
0a:83:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:09 2025 by rpki-client