Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0134E030985211F0B12098EEDAE4EC9C.roa
File: 0134E030985211F0B12098EEDAE4EC9C.roa (raw, json)
Hash identifier: AUFSQmX19XAAmoVgOMPlmN1NI+kIE+ZG79yWUrVzZ6A=
Subject key identifier: EE:92:49:7F:66:1A:C5:16:21:0C:02:4E:60:EF:56:3A:04:51:6E:CF
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0724
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0134E030985211F0B12098EEDAE4EC9C.roa
Signing time: Tue 23 Sep 2025 07:50:43 +0000
ROA not before: Tue 23 Sep 2025 07:50:36 +0000
ROA not after: Mon 23 Sep 2030 07:50:36 +0000
asID: 9304
IP address blocks: 102.216.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Sep 23 07:50:36 2025 GMT
Not After : Sep 23 07:50:36 2030 GMT
Subject: CN=68d25153-2cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:9f:4a:2f:4f:a0:c5:0a:8a:87:b3:ca:a9:
52:be:94:7d:c2:f4:44:fe:6c:be:04:80:31:f9:fd:
22:e0:b1:cf:2a:4b:ef:fc:71:da:6c:3b:a5:da:0b:
f7:bc:3a:02:36:15:18:d5:a4:9a:35:35:43:5b:bd:
a7:0d:a3:84:dd:2f:76:0b:3f:0c:5f:4f:62:b3:5a:
3b:c9:b1:2f:67:6c:8e:e9:05:1f:e7:30:75:b8:8d:
ca:03:62:66:1f:f0:a5:be:9c:98:3d:15:3c:54:20:
97:62:31:a6:49:ae:96:a0:4e:eb:8e:a0:cb:2f:c5:
eb:4b:38:f9:4c:74:19:c3:9d:80:0f:ba:8c:c0:87:
f9:8c:17:a1:a6:36:cb:bd:a8:70:3a:9d:59:21:54:
73:82:2a:cc:d9:87:01:2d:fd:a0:be:3f:e9:f5:50:
c1:c2:0f:e2:34:08:27:1b:a8:91:98:e8:f4:a4:51:
48:b8:e1:bc:a7:6a:16:a1:e4:a4:e2:54:5b:52:a7:
95:16:a7:f1:18:b4:b7:e4:69:e8:77:ca:99:5b:46:
5d:5a:9e:c7:f3:92:12:83:73:da:89:73:34:e2:d8:
9f:18:f2:84:49:3c:8b:9a:74:0f:cf:c7:b1:af:aa:
a1:0e:eb:16:6e:97:80:45:76:ae:ab:b3:c8:9e:1e:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:92:49:7F:66:1A:C5:16:21:0C:02:4E:60:EF:56:3A:04:51:6E:CF
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/0134E030985211F0B12098EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.81.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2f:16:47:67:7d:9b:5b:57:8d:dd:a8:9e:b2:f1:6e:12:78:
d5:ba:20:89:e2:8c:dd:f2:2b:50:88:0a:5a:0b:e7:b1:b3:56:
00:b4:d2:3f:b0:62:bf:44:73:cb:38:0a:e1:4c:3f:10:9e:eb:
d4:28:ca:97:ef:d5:96:52:03:8e:09:a6:a8:4f:94:f9:93:1b:
ca:b1:dd:66:cb:fb:da:96:4d:95:bb:be:13:a5:6a:48:3a:69:
27:e4:49:b7:23:92:64:a1:70:e2:4f:1a:02:6e:65:b2:b3:fb:
bb:a5:53:38:f6:bb:54:b7:03:8b:f9:79:7c:de:c0:fd:16:0e:
35:fc:23:83:01:bf:c5:5b:0a:0a:e6:d0:a8:ac:c6:93:f3:6b:
a7:3f:6c:28:d9:70:42:28:ff:07:cc:f8:90:a6:d4:23:06:51:
ec:dd:19:8c:cb:3d:12:95:b7:f4:20:6c:e0:aa:fd:2c:0e:30:
7c:86:82:3a:17:86:bf:df:c3:f4:a4:76:44:e5:6c:92:0d:08:
30:27:36:18:01:0b:6f:e5:37:2a:d2:08:bd:b2:76:93:a1:a3:
10:75:7a:a2:36:e5:32:5f:72:2b:9c:c2:f0:17:1a:30:18:35:
f9:85:8e:14:4a:f7:84:9e:64:07:4a:0a:b7:77:c9:68:8d:0a:
d9:ee:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:24 2025 by rpki-client