Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/0ABADEAC831711F08AB92EEBDAE4EC9C.roa
File: 0ABADEAC831711F08AB92EEBDAE4EC9C.roa (raw, json)
Hash identifier: ZrkF0GhmCxfvqijo/YwHXsJCMK6ucZZ7bXMseXzxa9o=
Subject key identifier: D8:5B:D8:5A:CC:63:E4:03:8E:07:DF:46:8C:62:40:41:4A:43:E8:2A
Certificate issuer: /CN=F3671347AF/serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Certificate serial: 1A
Authority key identifier: 31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/0ABADEAC831711F08AB92EEBDAE4EC9C.roa
Signing time: Wed 27 Aug 2025 07:25:44 +0000
ROA not before: Wed 27 Aug 2025 07:25:39 +0000
ROA not after: Thu 31 Aug 2045 07:25:39 +0000
asID: 36983
IP address blocks: 41.222.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671347AF, serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Validity
Not Before: Aug 27 07:25:39 2025 GMT
Not After : Aug 31 07:25:39 2045 GMT
Subject: CN=68aeb2f8-2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:37:19:77:a2:6c:ad:aa:bc:9d:c3:ac:d8:
43:fc:31:5e:24:0b:f6:3a:c6:6d:3f:6e:09:2b:41:
75:d0:58:81:62:f8:1e:f9:7f:50:4e:ee:29:f1:34:
05:11:0c:13:69:c2:ee:42:5b:d8:66:79:97:d0:3f:
5c:c4:52:bf:fe:f3:f8:fc:3b:42:46:c3:aa:67:61:
00:4e:f2:ea:4f:53:9a:92:5d:f5:2c:65:a2:db:99:
73:d4:81:24:c1:37:15:4c:93:aa:d4:d9:96:4c:e7:
80:57:29:a4:3a:b1:b0:23:b0:88:b0:ea:97:c9:3d:
b9:a3:ef:28:8a:9e:2b:a5:55:4b:f5:22:bc:22:7b:
32:17:84:ff:93:94:4b:a1:82:f5:a1:fb:c8:88:50:
43:0c:ef:54:31:95:2d:f9:03:12:2b:99:48:d8:48:
45:af:0a:ad:73:3e:fa:5a:86:ae:62:e2:cf:29:ad:
02:ad:9c:e2:2f:6c:cd:f7:04:f9:69:2a:73:b7:68:
91:ed:88:53:e4:93:2a:02:04:e4:43:c3:e7:51:5f:
1b:83:8f:d8:4d:85:3b:a5:be:82:0e:83:77:68:1e:
af:3c:9b:48:32:e9:99:0e:99:d4:03:b0:60:c2:69:
1c:7e:b5:d5:58:6e:60:e2:5b:2b:c2:91:29:c8:ea:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5B:D8:5A:CC:63:E4:03:8E:07:DF:46:8C:62:40:41:4A:43:E8:2A
X509v3 Authority Key Identifier:
keyid:31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/0ABADEAC831711F08AB92EEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d4:c3:57:1e:d3:ae:f9:a3:31:77:62:53:23:cc:38:90:46:
85:24:ea:30:0d:90:36:ed:5b:e2:15:4e:a4:37:5b:a6:b1:0b:
38:47:25:e4:be:9e:28:47:52:38:a8:98:fd:92:e3:90:07:7d:
b2:09:06:a9:fd:56:ea:cb:dd:4c:0b:78:bf:ef:5a:b4:a9:ff:
fe:6d:61:d4:ad:1a:16:39:51:67:02:3c:26:09:59:5c:44:c5:
10:fb:8a:2e:71:f9:2a:ec:ae:77:a3:17:69:da:53:e1:18:19:
5f:ab:72:68:ad:ee:9c:ac:fb:62:7e:7a:5a:d8:19:f1:8a:1b:
bd:51:77:62:8d:df:f9:dd:31:1b:70:cc:1c:e9:66:bd:4b:48:
d8:86:17:5e:71:dc:19:76:ac:50:3b:2e:b4:af:9a:b3:f1:cd:
ce:45:66:ad:1e:82:59:97:6c:86:f8:f3:b7:c7:de:f9:58:15:
bb:4e:d3:99:c8:17:df:d6:e3:e2:63:a6:be:62:76:df:4d:20:
f4:47:85:83:9e:0a:60:69:1b:08:d8:81:ac:d7:42:13:6c:2f:
79:76:62:0b:82:c8:69:6b:19:36:ca:de:54:f0:e7:c3:62:b4:
92:24:cb:8e:06:7d:ce:78:3c:9d:a7:f3:e8:f0:b9:52:b3:66:
9d:fe:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:10:09 2025 by rpki-client