Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/9045DD5A823711F0A21A98B1DAE4EC9C.roa
File: 9045DD5A823711F0A21A98B1DAE4EC9C.roa (raw, json)
Hash identifier: eyZ9yZrBBgy/71qSkPKciubjX/IL3eKPd8xWFBAiHnM=
Subject key identifier: 04:4F:1D:96:BF:4F:ED:2E:AB:D5:EC:1A:79:2A:6B:2E:62:78:62:77
Certificate issuer: /CN=F3671347AF/serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Certificate serial: 06
Authority key identifier: 31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/9045DD5A823711F0A21A98B1DAE4EC9C.roa
Signing time: Tue 26 Aug 2025 04:46:01 +0000
ROA not before: Tue 26 Aug 2025 04:45:55 +0000
ROA not after: Thu 31 Aug 2045 04:45:55 +0000
asID: 36983
IP address blocks: 41.222.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671347AF, serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Validity
Not Before: Aug 26 04:45:55 2025 GMT
Not After : Aug 31 04:45:55 2045 GMT
Subject: CN=68ad3c09-22e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:66:a3:05:47:58:6f:59:47:d3:0d:3e:e3:
4c:2e:68:ac:e0:25:5e:f4:de:6a:c1:db:6d:49:ec:
c3:3d:82:c8:90:fd:04:71:31:38:7c:76:fb:95:8c:
1b:b2:a9:1a:8a:9e:bd:f7:7e:ae:9f:68:67:83:06:
d9:5c:e2:05:b9:05:d5:fe:05:41:aa:cb:10:72:06:
34:69:1a:de:2e:f9:2b:08:0f:8f:94:cb:a0:83:6f:
34:b7:01:cb:ea:a7:f3:b9:9a:de:6b:82:60:d3:f1:
f9:e7:7d:5b:6c:07:24:42:b7:9c:49:2a:73:78:b0:
fe:75:f0:67:4b:cc:90:5d:4c:a1:8e:8d:e8:30:63:
1c:25:52:9d:cc:13:17:b4:52:1b:21:d7:7d:ae:df:
74:0c:33:4e:bf:70:eb:b2:b6:31:7a:57:dd:8f:33:
e4:43:f7:19:7a:a7:97:3e:85:fc:d3:fa:1a:10:c5:
f1:04:5c:25:41:57:1e:0d:ed:bc:f6:39:ec:eb:47:
55:c6:70:fa:91:23:b8:1a:5f:19:16:75:cc:3a:9a:
3b:02:c7:7c:b9:bd:ca:20:91:48:c6:bf:4b:93:86:
fe:c7:81:ec:4a:79:06:85:34:69:bb:10:d8:fd:55:
fc:8e:51:f8:b2:8f:1a:ea:11:f4:0a:64:a2:f5:3e:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:1D:96:BF:4F:ED:2E:AB:D5:EC:1A:79:2A:6B:2E:62:78:62:77
X509v3 Authority Key Identifier:
keyid:31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/9045DD5A823711F0A21A98B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.108.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f8:89:a6:31:c0:4d:18:57:75:89:93:01:c8:f5:1b:4e:9c:
06:07:82:41:1f:25:59:62:19:f7:b6:7b:ef:11:74:83:f9:14:
76:44:e4:f6:2b:37:e8:bf:d2:5f:e4:fe:73:04:53:24:0f:2e:
ba:48:21:f5:48:72:33:52:86:46:04:27:47:30:78:4a:a8:1f:
ce:e1:21:00:2d:77:ec:c3:09:f6:fe:87:36:26:22:b5:c3:8f:
01:e7:b1:7e:d6:9e:09:c8:8e:67:d5:8d:e2:db:2d:a4:0b:10:
15:1e:39:fe:01:c9:c2:b8:7b:76:e0:ed:65:f3:c9:f9:7c:60:
05:ca:84:50:16:ed:6f:7a:3f:92:0e:22:17:a4:35:a3:01:88:
ef:51:b3:d6:05:8c:1a:0c:45:e9:0a:d2:18:01:ee:2e:87:75:
1b:f4:06:86:fe:78:6e:2e:6e:48:61:05:76:6c:18:b4:dc:05:
ed:f5:d9:63:05:c7:b5:a7:d4:f1:ec:26:ab:f7:8c:23:7f:66:
4a:2a:63:79:e7:c7:0b:ee:f8:ad:15:eb:ac:df:68:de:da:4d:
68:0b:a9:e5:cd:99:32:05:6a:f0:8f:eb:10:d4:c8:e6:da:f0:
42:1e:4d:0c:15:db:56:87:66:2e:a8:5a:ce:10:74:05:fb:69:
66:13:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:19:54 2025 by rpki-client