Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/DE56B006B40E11F08B0A0092DAE4EC9C.roa
File: DE56B006B40E11F08B0A0092DAE4EC9C.roa (raw, json)
Hash identifier: BeZrjqtTx/d/Uc+fKo5UXnfAqQ+DGhZvKjC4lkw0Bpo=
Subject key identifier: 91:5A:01:0D:EB:9B:04:5D:59:CB:5F:8A:34:F6:7D:BC:27:3E:7C:C4
Certificate issuer: /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial: 07A5
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/DE56B006B40E11F08B0A0092DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 15:00:40 +0000
ROA not before: Tue 28 Oct 2025 15:00:36 +0000
ROA not after: Wed 31 Oct 2035 15:00:36 +0000
asID: 328748
IP address blocks: 102.216.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Validity
Not Before: Oct 28 15:00:36 2025 GMT
Not After : Oct 31 15:00:36 2035 GMT
Subject: CN=6900da98-dc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ad:12:29:e8:53:d6:54:1a:84:b2:62:2d:da:
4d:75:46:d6:41:2c:5e:5d:b2:8c:33:c0:e1:13:94:
d8:07:a6:a4:24:d5:75:0b:d0:e6:c1:5a:55:20:83:
96:db:36:36:da:ec:ed:9c:d3:55:0d:04:bd:ec:40:
72:26:2f:d2:32:e8:fa:7d:b3:37:7d:77:75:ac:46:
fa:af:16:78:df:7e:73:4e:81:85:1b:be:33:93:eb:
5b:a4:8c:53:5d:fd:e8:6c:eb:55:e8:a7:0e:c9:5f:
7c:74:14:1f:da:00:ae:e2:9d:c7:bb:dd:30:a0:64:
83:17:ed:0b:f2:7c:56:ba:f2:6b:48:99:b9:21:28:
ac:64:92:c5:b2:a3:da:3c:fc:e0:8b:39:13:76:c4:
25:ae:ee:a9:61:69:0a:aa:d5:6b:9d:8c:e9:86:e6:
9b:53:1f:6b:0c:71:c0:29:67:30:82:12:61:3a:b6:
61:c4:ae:97:a6:be:b0:bd:52:4b:8b:8d:a7:fa:08:
0e:ca:45:b9:06:40:74:23:60:21:a4:23:e3:52:6a:
e0:07:71:6a:7e:8a:59:d0:08:1b:04:bd:88:de:88:
be:d3:e2:ee:8e:27:34:67:ac:f5:b9:ba:85:34:6a:
a4:67:ed:0f:e1:e6:2e:86:f6:68:c9:1f:64:2b:d3:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:01:0D:EB:9B:04:5D:59:CB:5F:8A:34:F6:7D:BC:27:3E:7C:C4
X509v3 Authority Key Identifier:
keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/DE56B006B40E11F08B0A0092DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.158.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f2:40:85:62:9a:9d:0e:44:d8:59:95:c1:4b:93:ff:9d:64:
c7:ed:9d:78:32:45:ab:fe:fc:90:db:18:b7:29:3f:a8:3b:ec:
a6:f5:57:0f:a9:13:1d:c7:82:22:16:aa:7d:10:0b:0a:db:ed:
77:b9:1f:8c:29:1d:dd:7b:80:21:fc:0f:77:b5:4f:5f:81:47:
ff:08:9c:0a:32:d4:36:fb:10:9f:c8:74:fe:17:bb:7c:5c:02:
86:33:f3:a0:aa:42:64:f0:a6:80:20:28:6a:8b:6f:70:d3:58:
c2:c0:3c:e6:54:4f:23:d7:9f:12:0f:54:03:24:5a:e2:cb:58:
f6:7f:0d:7e:44:cd:7b:2c:63:d9:34:bc:1e:4d:c9:1f:c7:8b:
8b:d3:95:e8:cd:d0:0e:a8:3b:04:91:e2:a8:03:da:b6:db:0c:
9a:a4:bb:e5:24:7f:27:13:f0:7d:f7:23:c9:f1:88:3a:60:60:
f8:27:a5:69:ea:ec:a1:a3:40:f1:e6:b6:91:e7:1e:41:82:19:
df:70:94:f6:24:ac:7f:18:3d:b5:7d:be:87:e1:7b:e5:2d:7e:
2e:f4:7b:c2:66:20:9d:5f:cc:b5:82:b6:e1:64:ed:d6:f8:f9:
66:29:4f:ac:56:48:c4:3d:01:9a:f1:b5:a0:07:be:70:e0:2a:
3b:0a:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 21:16:08 2025 by rpki-client