Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/74594750819011F0BAAC22EBDAE4EC9C.roa
File: 74594750819011F0BAAC22EBDAE4EC9C.roa (raw, json)
Hash identifier: lk3pCRLCUb/HUyRGwNR07aBltjh1UJhq7uZ69Xw/koU=
Subject key identifier: 1D:E7:36:89:5F:41:BB:FC:2B:D8:B7:82:8E:BB:D5:37:DF:9E:EE:63
Certificate issuer: /CN=F3671347AF/serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Certificate serial: 02
Authority key identifier: 31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/74594750819011F0BAAC22EBDAE4EC9C.roa
Signing time: Mon 25 Aug 2025 08:49:48 +0000
ROA not before: Mon 25 Aug 2025 08:49:40 +0000
ROA not after: Thu 31 Aug 2045 08:49:40 +0000
asID: 36983
IP address blocks: 41.222.104.0/21 maxlen: 21
41.222.104.0/23 maxlen: 23
41.222.104.0/24 maxlen: 24
41.222.106.0/24 maxlen: 24
41.222.107.0/24 maxlen: 24
41.222.108.0/24 maxlen: 24
41.222.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671347AF, serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Validity
Not Before: Aug 25 08:49:40 2025 GMT
Not After : Aug 31 08:49:40 2045 GMT
Subject: CN=68ac23ac-ce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:7b:31:46:3f:9b:87:f5:cb:a1:26:44:48:
50:84:ae:df:a8:1b:a1:da:ed:42:75:d3:d1:49:44:
89:73:af:c1:c6:9e:5f:00:9d:5a:f2:d7:56:1c:a8:
87:75:9b:b8:f5:70:8d:42:25:bb:61:09:a5:20:41:
a6:75:3d:39:7f:6c:a1:f0:95:a0:5d:d1:23:01:5d:
f6:b0:de:b0:24:39:fe:85:8b:03:72:fb:47:49:ff:
d2:f5:12:51:9a:9e:a3:24:22:1b:35:fa:d0:5e:3c:
3c:6e:0b:7c:6d:33:22:58:0a:e8:a1:a1:be:05:20:
cd:97:11:dc:38:12:81:2c:97:49:ba:bd:e5:81:cb:
82:b8:3b:3a:6d:04:dc:47:f7:14:a4:24:89:50:00:
e0:c0:f0:fd:15:c7:47:77:3f:40:d2:8f:a7:8e:17:
8f:11:c2:68:9d:72:1c:cc:b5:e4:e1:c5:53:0f:3d:
dc:3e:e4:80:f5:57:8f:4f:40:8c:99:d6:fe:fb:80:
7a:3c:5d:8c:f8:9f:c7:95:15:e1:e9:03:e5:ff:d3:
30:4e:54:18:45:42:55:c4:73:44:45:81:1a:b6:03:
fd:cf:5c:5c:2c:c5:10:79:98:5b:9e:74:61:45:56:
b6:8e:e6:fb:a5:ed:41:b2:24:2d:7e:20:e3:cb:03:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E7:36:89:5F:41:BB:FC:2B:D8:B7:82:8E:BB:D5:37:DF:9E:EE:63
X509v3 Authority Key Identifier:
keyid:31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/74594750819011F0BAAC22EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.104.0/21
Signature Algorithm: sha256WithRSAEncryption
93:51:40:d0:be:f6:8e:c1:14:46:73:48:5a:a6:74:12:a6:2b:
d0:5d:73:b8:a5:ee:1a:14:47:d1:df:2e:a3:da:d6:9e:e9:a6:
f6:5f:52:cf:64:ba:75:dc:5c:89:c3:79:05:57:74:7e:37:1b:
ac:bb:82:c6:75:57:25:c5:83:6e:ae:ab:39:40:e9:54:18:9c:
42:0e:48:21:8c:f3:76:0c:3c:d5:7e:14:ee:ca:0c:1b:f8:2c:
5b:fc:b4:5b:81:7e:28:89:4b:b3:eb:b0:d7:74:82:9d:2f:24:
98:4a:b3:7c:53:52:6a:2a:dd:ca:07:ca:3a:bf:e1:71:2d:bb:
5e:c6:dc:54:d0:30:00:e9:e0:f1:de:8c:d0:72:1c:bc:c9:e2:
f0:7b:0e:0e:0c:0f:29:ad:63:4d:ff:6d:3a:ea:66:4e:30:90:
06:42:6f:a6:ce:ad:d0:94:0a:e9:6a:34:3c:c3:e2:18:38:df:
6d:cf:45:6f:87:7c:f7:e0:04:b9:6e:1a:98:a5:41:8e:b0:8a:
55:e7:78:78:b9:00:74:be:c5:52:2e:c6:0d:29:e9:f8:ac:8e:
aa:c7:3f:3c:6b:18:88:94:2b:97:19:19:94:5a:6a:91:5a:12:
f3:7d:24:4e:1e:6b:02:fe:e4:44:af:3d:2d:cf:9e:43:8a:bf:
76:ab:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:10:37 2025 by rpki-client