Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/10ADB37E831811F090A7F4EFDAE4EC9C.roa
File: 10ADB37E831811F090A7F4EFDAE4EC9C.roa (raw, json)
Hash identifier: UL+zMdT8VFlD4pExBN8QAWnV1J1gl4BF2ZVgsv/tt1o=
Subject key identifier: FF:F2:F8:81:73:1A:85:EA:CA:63:8C:90:57:2F:F0:FA:0A:00:47:4C
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 0A71
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/10ADB37E831811F090A7F4EFDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:33:04 +0000
ROA not before: Wed 27 Aug 2025 07:32:59 +0000
ROA not after: Mon 27 Aug 2035 07:32:59 +0000
asID: 36916
IP address blocks: 41.180.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.mft
rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF, serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Aug 27 07:32:59 2025 GMT
Not After : Aug 27 07:32:59 2035 GMT
Subject: CN=68aeb4af-048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:50:01:eb:7b:7b:d0:d3:17:99:4d:ea:7d:
53:4d:6f:8f:15:82:89:ff:da:ad:cf:2c:16:20:11:
82:88:5b:48:72:12:08:c4:40:bc:b1:a7:ca:ba:5d:
c3:94:d1:bf:2c:a0:fe:24:50:e4:dc:99:ef:42:c4:
f2:5b:a7:72:fa:42:f1:57:05:fe:8a:9d:48:8f:ad:
ec:5b:13:9a:8f:65:34:02:48:ff:aa:e6:93:93:ac:
47:d9:2e:f6:4e:b6:1e:0c:55:2f:73:e5:e3:3a:6b:
5a:2a:26:26:3b:57:98:8d:7b:82:5a:2a:d3:dc:49:
7e:58:9a:67:41:eb:04:f6:39:26:cd:04:6b:27:bc:
15:9e:f6:73:68:34:dd:2b:3b:59:e7:3d:99:00:19:
57:04:44:b6:42:a1:a3:8f:c3:75:fa:c6:1f:fb:46:
06:06:e4:cb:53:8d:3a:2a:d1:b5:35:5b:e2:c2:74:
d5:fc:15:f4:ae:c0:46:14:94:5e:ad:64:d7:74:7e:
c7:f8:ec:79:83:0e:e6:86:65:3d:44:1d:e2:9d:20:
b3:99:82:4e:3f:4c:45:01:f4:84:4f:89:0c:93:8f:
2d:31:bb:0c:72:17:d8:3b:df:54:ef:43:7f:3a:67:
c5:e2:0e:0b:4b:99:1a:3f:15:e3:ac:17:6d:81:57:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:F8:81:73:1A:85:EA:CA:63:8C:90:57:2F:F0:FA:0A:00:47:4C
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/10ADB37E831811F090A7F4EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.117.0/24
Signature Algorithm: sha256WithRSAEncryption
59:42:ec:f5:8f:97:87:27:de:bc:94:c5:c1:6d:5a:40:f3:11:
04:1b:a0:e5:d6:48:b3:09:3d:dc:9d:cd:4b:82:55:9c:fa:2f:
f9:8c:b3:c8:fb:9b:ab:a4:6e:49:3d:d1:be:94:ed:e0:47:40:
df:8a:aa:f1:0e:4a:bf:0b:ee:11:a1:78:69:2b:d8:05:a8:dd:
55:6a:d0:32:2f:d0:54:35:23:3f:88:f8:57:fa:7c:bc:52:23:
50:30:f9:31:79:ca:48:6b:f1:ef:16:62:09:ce:96:76:91:0f:
b8:5d:52:79:a1:1f:84:89:2f:81:7b:df:8f:f7:31:e0:74:8f:
3b:39:d4:9e:d7:30:3b:85:da:de:4a:f9:fc:7c:31:df:f8:67:
ec:21:9e:2e:c0:c9:70:65:b4:e3:48:5f:1b:61:9f:a9:f8:6e:
99:1e:f3:13:99:a5:38:29:75:09:01:0d:68:96:73:8c:d2:7f:
cf:1b:9a:b6:94:fd:5e:98:50:fe:46:5d:57:30:51:b6:d1:76:
72:18:a1:dc:05:27:e4:43:90:02:c0:bc:38:f2:a1:2b:eb:d2:
37:03:95:e4:8e:5f:81:b7:e7:11:f4:20:9e:a5:0f:d0:8c:c0:
e1:95:ae:c0:f8:ec:c2:2e:da:0e:4e:56:62:18:15:18:4a:77:
76:6a:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:48:06 2025 by rpki-client