Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/7D6077E4868E11F0AF530F88DAE4EC9C.roa
File: 7D6077E4868E11F0AF530F88DAE4EC9C.roa (raw, json)
Hash identifier: pUZkioyU/9imSW0EM5QU9OmW3QOk9L2q8xE1jtVTtPg=
Subject key identifier: DF:65:A7:E3:85:E4:62:C4:E5:48:59:0B:A5:C0:70:AB:ED:C7:98:76
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 075B
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/7D6077E4868E11F0AF530F88DAE4EC9C.roa
Signing time: Sun 31 Aug 2025 17:18:20 +0000
ROA not before: Sun 31 Aug 2025 17:18:14 +0000
ROA not after: Fri 31 Aug 2035 17:18:14 +0000
asID: 328748
IP address blocks: 102.216.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Aug 31 17:18:14 2025 GMT
Not After : Aug 31 17:18:14 2035 GMT
Subject: CN=68b483dc-8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:97:ff:33:43:6b:56:9d:7a:73:56:0d:5d:
b7:39:10:fc:f1:b5:ee:93:3d:15:66:b0:9c:86:07:
73:76:9f:28:47:f2:e3:0b:f5:90:39:be:fd:0a:e3:
a6:b3:71:f9:99:86:9e:7e:21:6e:7a:85:b5:4d:0b:
e3:23:6a:46:64:6a:fe:d5:d1:01:06:1a:e4:59:b0:
b2:b1:22:62:72:84:f7:3c:a9:ec:53:7f:9d:97:86:
33:77:f1:83:f6:77:fa:98:64:2a:26:a5:02:3d:f3:
41:86:db:63:b2:ce:ac:39:78:37:8e:bd:f3:63:ca:
3e:d1:8f:17:5a:75:61:a1:de:a8:a3:de:ee:ca:7b:
53:3c:55:9f:9a:37:c0:0a:16:04:ca:2f:1b:3f:a8:
a0:33:6f:f1:86:33:04:2e:b7:42:22:aa:5a:5c:73:
c9:a8:2f:16:34:30:e2:99:41:29:55:e5:a0:43:fa:
51:b0:f6:56:b1:72:29:78:f7:5c:d0:69:b0:26:7f:
e7:a4:bf:ec:c8:d9:7d:0c:11:88:86:bc:23:25:b0:
c8:be:5b:6f:8e:d1:51:b6:0d:a9:c0:89:92:26:c1:
76:b3:34:61:d6:5e:19:35:fb:7d:9b:cf:4d:a5:12:
81:ad:70:87:bf:c0:fb:a6:ed:71:75:19:c0:8a:76:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:A7:E3:85:E4:62:C4:E5:48:59:0B:A5:C0:70:AB:ED:C7:98:76
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/7D6077E4868E11F0AF530F88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.156.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ca:67:42:62:35:0e:95:ef:6a:c5:55:33:49:55:22:62:97:
0d:99:69:31:0f:88:56:d1:48:c7:57:8c:bd:95:d3:0f:7c:99:
f1:c1:fd:3d:ab:3f:82:fc:b5:94:d9:d4:38:06:91:35:55:10:
36:d2:2f:18:e4:59:94:92:ae:b1:46:d2:c4:c2:40:f6:ef:2f:
53:b7:f6:3e:3f:9b:9a:15:d9:26:44:74:94:a6:cb:2d:7b:23:
26:0c:39:57:3a:01:55:cc:0b:89:19:27:9f:8c:9c:4f:ff:57:
25:cb:0a:3c:53:75:db:47:12:b4:c6:e4:b9:2e:28:03:a6:86:
e5:1d:1a:eb:3a:26:fe:67:9c:41:df:83:75:ec:dc:97:98:ba:
70:94:a8:5b:d2:f1:57:52:0e:b8:20:6c:46:0a:ee:5d:d1:b5:
0b:64:d6:33:21:07:de:eb:70:8a:0d:91:cc:e8:c3:72:bc:3a:
fc:6c:7c:98:3c:59:cf:c9:77:8f:f3:91:50:8f:ff:67:8b:39:
b6:ee:1c:38:5c:98:b4:7f:b4:8b:d3:85:73:6d:b6:73:03:d8:
58:42:ff:ec:2c:72:66:ad:5b:b9:a1:b1:3b:1f:3c:d1:a9:36:
ce:5e:2f:73:1b:8a:ca:42:9c:e0:ef:08:fb:f6:6d:ba:11:4c:
65:13:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:54:38 2025 by rpki-client