Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/06EA9146625111F082ED08AFDAE4EC9C.roa
File: 06EA9146625111F082ED08AFDAE4EC9C.roa (raw, json)
Hash identifier: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=
Subject key identifier: 1C:99:AD:38:36:FB:06:5C:29:D9:E4:E3:4A:C7:44:28:D0:4D:3B:C6
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0729
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/06EA9146625111F082ED08AFDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 14:27:40 +0000
ROA not before: Wed 16 Jul 2025 14:27:35 +0000
ROA not after: Fri 17 Jul 2026 14:27:35 +0000
asID: 60171
IP address blocks: 102.177.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Jul 2025 02:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 16 14:27:35 2025 GMT
Not After : Jul 17 14:27:35 2026 GMT
Subject: CN=6877b6dc-d6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:95:90:9c:56:bb:5e:91:78:37:e3:8f:1f:
c5:fd:5c:08:3f:b6:6e:1c:10:ea:ec:96:4d:04:b2:
0f:61:09:9a:a8:83:59:76:43:47:85:77:3b:48:ed:
78:ae:da:7d:f8:e5:70:d0:a6:5e:92:34:d3:32:34:
d7:96:c0:84:f4:01:c0:7d:d2:b1:e6:76:22:32:e5:
1b:21:d7:6b:f4:25:6a:be:15:a9:ab:01:09:80:d9:
51:07:e1:70:50:cc:9e:b7:13:ed:64:c4:68:a8:48:
41:27:72:59:c5:7f:92:d8:6f:24:2c:19:e9:bf:46:
1b:65:df:f8:df:34:b2:a8:8c:47:8a:15:de:c5:06:
05:89:a4:3b:3e:36:23:f6:00:d0:fe:ca:79:e9:c2:
d1:f6:07:dd:b5:a2:39:64:6f:b3:4c:12:12:49:8d:
44:eb:cc:8c:ca:43:65:0c:49:2b:85:d2:ac:db:96:
8e:7a:b8:90:c1:9a:f2:99:b0:37:9d:7f:3e:dd:ce:
ba:30:5a:66:5c:3d:69:99:07:2a:b0:d8:f8:47:0b:
e1:40:d2:af:6f:cf:0e:4c:a4:48:6d:0b:aa:d3:c6:
4c:a0:05:ac:34:c5:2a:b0:a8:d9:27:55:23:de:6f:
1c:ff:78:1e:40:6e:9a:0e:9a:f3:f9:e2:f3:52:eb:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:AD:38:36:FB:06:5C:29:D9:E4:E3:4A:C7:44:28:D0:4D:3B:C6
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/06EA9146625111F082ED08AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.159.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:cf:3b:b0:d2:64:0c:0f:40:d2:ab:8e:b2:2a:db:4f:e1:a8:
f5:ee:c0:4a:40:4c:52:79:8f:52:94:dd:9c:90:fd:c7:58:a5:
fd:05:a1:c1:4b:95:0a:9e:27:23:24:c5:5b:bc:f5:cb:fc:11:
18:77:df:04:cf:17:41:b4:49:1f:40:08:c2:4d:69:f0:96:52:
31:4a:d0:14:d7:ed:92:24:1c:1d:56:65:7a:78:3c:e6:1f:1e:
d9:51:fe:02:32:12:59:dc:13:91:fe:f7:54:8f:8c:5f:5b:f1:
69:70:ae:2c:92:8a:83:35:0f:71:e5:a3:3f:7c:4e:f0:bd:9b:
05:97:b4:6d:d7:1a:47:31:5f:e6:9e:5c:29:1b:9b:f4:2c:99:
63:7b:d6:4b:c0:ab:75:5e:f9:dd:ad:61:05:75:25:b3:2d:1e:
88:78:ad:e4:80:f0:d3:34:5a:71:25:d4:96:1d:28:5d:30:47:
fc:d7:28:fe:fb:8d:1a:c9:47:09:84:b8:23:6b:f2:12:05:0c:
12:10:9a:8f:b0:c0:e5:92:90:86:3c:bf:4e:5c:bd:f0:d2:18:
f2:33:3a:cb:ce:d5:f8:83:23:72:f3:0b:4a:5f:96:82:ee:d0:
2e:f1:0b:a7:cc:f9:a3:8c:6f:a8:ef:15:a8:0f:a2:14:90:79:
6c:d0:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:58:33 2025 by rpki-client