Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/1DE97BC05EEE11F091903BA7DAE4EC9C.roa
File: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (raw, json)
Hash identifier: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=
Subject key identifier: 62:9A:E2:32:0F:50:02:10:D0:7A:1A:78:97:10:D1:A5:BD:E7:06:D1
Certificate issuer: /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial: 0384
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/1DE97BC05EEE11F091903BA7DAE4EC9C.roa
Signing time: Sat 12 Jul 2025 07:02:05 +0000
ROA not before: Sat 12 Jul 2025 07:01:59 +0000
ROA not after: Tue 31 Jul 2035 07:01:59 +0000
asID: 37228
IP address blocks: 105.178.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Validity
Not Before: Jul 12 07:01:59 2025 GMT
Not After : Jul 31 07:01:59 2035 GMT
Subject: CN=6872086d-a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:b2:35:61:19:1a:0c:69:37:0f:49:c8:d2:
bf:91:02:f6:bf:7c:ca:b1:91:79:8f:64:a1:aa:53:
11:63:7e:fe:f7:d7:ce:42:54:57:e4:ec:07:f3:42:
fd:8b:c5:52:f7:fd:0e:86:3a:0b:9a:00:37:2f:7d:
54:bc:1f:4d:c6:39:1b:21:16:9e:9b:8f:2a:e4:1c:
74:1d:23:f6:f5:02:0c:0b:09:16:5e:e2:b3:35:92:
ff:5d:b6:0b:71:7a:d9:37:fd:6e:d0:21:be:bc:18:
16:9a:a3:8d:2a:db:ad:00:42:26:cc:c3:44:4a:9b:
c2:99:4d:bf:af:d3:8d:e3:ab:b7:23:c8:f2:fa:68:
ad:f7:4c:59:36:5a:4b:35:d8:51:e4:ac:9c:ea:34:
a0:4c:f3:71:1d:8c:5f:05:bb:0e:8a:72:54:fd:c7:
05:9a:25:6b:01:b9:23:94:61:22:ee:6a:09:f3:ad:
d4:be:d6:9d:71:43:07:30:ec:bb:73:4c:21:ba:19:
3d:5b:b8:5c:ae:91:5f:ea:a2:9b:3e:19:df:b8:f4:
da:b4:44:20:57:1a:4e:14:17:bd:8c:07:68:fc:cc:
30:63:8f:05:fb:60:ac:a1:64:a2:89:84:1a:14:7c:
5d:9d:74:39:38:e6:da:19:63:9b:77:f2:73:b9:ea:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:E2:32:0F:50:02:10:D0:7A:1A:78:97:10:D1:A5:BD:E7:06:D1
X509v3 Authority Key Identifier:
keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/1DE97BC05EEE11F091903BA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.178.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:00:c4:17:13:1f:e3:57:e9:aa:94:7e:a9:8a:a5:f4:d8:92:
66:0d:43:ca:e3:5c:cc:04:f3:0a:3a:6e:b5:e3:60:6e:9b:da:
b3:c2:59:c3:97:65:82:ef:59:0b:f6:24:8d:b3:75:76:2d:31:
3b:77:3c:c8:c1:eb:97:88:49:3a:83:92:fd:04:06:7c:16:16:
08:f6:96:6c:ec:e1:73:17:66:ff:e0:14:88:ba:4f:9c:d9:ca:
6e:6e:61:a4:45:c8:e8:68:42:24:8b:84:97:9f:cd:c0:92:30:
49:97:8e:73:a3:60:1a:67:04:25:5f:2c:89:5b:02:96:09:9a:
c3:8e:52:77:47:07:86:fd:d4:82:83:6a:40:c0:df:1f:29:e0:
d4:61:6e:4c:85:62:37:f3:f7:d0:0e:12:4f:80:e6:14:d1:46:
aa:e0:4c:96:35:0d:34:96:75:a6:7b:66:fc:3a:45:be:79:ab:
fb:ef:20:2f:e7:10:db:6a:6d:1b:fc:fd:ab:40:d1:7b:9c:a9:
7c:86:98:e4:13:63:ef:c6:84:a5:c0:8d:d2:a9:46:38:92:b9:
13:df:f2:53:c7:82:cc:1b:79:dc:3e:2d:02:26:a9:5f:7d:b0:
7a:5b:2e:5a:37:37:b6:4a:db:8b:68:a8:8b:6d:4d:79:2d:a2:
4a:20:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:34 2025 by rpki-client