Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8CE95C44659611F0BC0DBF85DAE4EC9C.roa
File: 8CE95C44659611F0BC0DBF85DAE4EC9C.roa (raw, json)
Hash identifier: o1jzPlAl/4cwBPSPVuQC+Ns+6Vf9WBT0byC5yceG9JI=
Subject key identifier: 74:51:6E:85:CB:E6:81:85:02:07:D3:C9:41:28:2D:23:9E:CF:DA:2E
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 06D2
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8CE95C44659611F0BC0DBF85DAE4EC9C.roa
Signing time: Sun 20 Jul 2025 18:22:54 +0000
ROA not before: Sun 20 Jul 2025 18:22:48 +0000
ROA not after: Sun 14 Jul 2030 18:22:48 +0000
asID: 401838
IP address blocks: 102.216.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Jul 2025 00:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 20 18:22:48 2025 GMT
Not After : Jul 14 18:22:48 2030 GMT
Subject: CN=687d33fd-18ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:b1:51:09:c1:38:d2:f3:2c:3d:a4:e0:17:
6e:8d:41:ed:5f:8d:75:27:ee:60:ac:09:c9:ad:d8:
eb:d8:93:4d:42:ad:e9:cd:c5:f4:b9:91:ad:29:1d:
b1:1a:d2:e9:fd:50:9d:a1:a7:e2:1f:cb:e4:24:87:
a6:92:3b:21:e7:15:7d:df:c5:5e:34:9a:f2:5b:e8:
16:99:13:8b:b9:22:c7:1f:74:11:f7:03:a0:f7:38:
53:85:0b:36:56:8a:aa:ca:23:06:dd:07:ca:30:b0:
d4:a5:19:a7:4a:91:4e:94:d0:f9:7d:85:00:73:ab:
67:cd:95:22:5f:a0:42:ec:a1:79:16:26:90:dc:fb:
2c:2c:77:20:06:ee:7c:ac:d0:c4:10:d5:eb:cd:f2:
e3:91:51:cf:70:76:48:f2:b6:1f:68:de:d9:c0:8f:
c5:7d:49:08:2e:cd:59:8f:1f:9e:8a:4b:78:2a:98:
f5:e7:67:23:1a:33:bb:6e:30:c7:d9:b2:85:3e:31:
54:f2:6e:a8:07:67:94:4f:51:76:97:00:54:8b:0a:
21:cc:76:e9:c7:b8:eb:e6:d3:67:74:ea:0f:95:da:
6d:77:64:31:22:a4:c6:af:3a:07:50:65:55:62:d4:
54:30:ad:80:c5:95:b5:ca:21:01:19:83:12:29:af:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:6E:85:CB:E6:81:85:02:07:D3:C9:41:28:2D:23:9E:CF:DA:2E
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8CE95C44659611F0BC0DBF85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7d:3e:01:a4:e1:ca:34:b8:0a:06:a2:6a:44:73:8d:df:c1:
3f:a2:f1:b8:82:b4:c4:d2:30:bb:1e:8f:20:07:8e:87:ae:25:
63:6c:27:0b:ce:25:de:a0:43:4d:6c:d8:4f:ed:b2:b7:a3:92:
34:7c:5d:c2:a8:3f:03:b5:76:e7:1a:b7:de:8f:af:9c:dd:f0:
5d:35:f6:19:4c:e9:dc:26:b9:71:97:09:ed:01:31:2a:9c:de:
e9:db:8d:19:c7:33:5a:b2:3f:fa:fc:9d:19:72:5d:58:89:51:
4f:70:01:26:10:b8:13:ab:b8:8b:d6:80:9e:57:7d:0a:21:35:
2e:9f:61:aa:9e:3c:e0:0d:0a:b8:57:90:dd:a7:ee:c3:1d:8a:
63:94:11:58:da:82:6f:ae:6f:3e:39:7c:5e:ce:7c:78:d4:4f:
83:2f:92:d9:1c:b7:95:ca:5e:5d:41:4f:ed:0d:f3:9a:f1:22:
f3:78:1e:46:26:67:03:47:6f:f6:f4:12:45:a5:55:0d:ad:32:
fa:bc:45:15:82:ae:e9:17:fe:ef:b1:af:19:8d:6e:90:a7:5c:
de:b3:b0:e3:9d:f6:30:9a:7b:87:e3:d2:12:b7:5f:af:a0:ec:
57:7d:71:32:40:66:82:26:2c:5f:7f:95:db:30:63:b3:d7:8d:
ca:d1:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:11:12 2025 by rpki-client