Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/8F43C038568211F0A084117BDAE4EC9C.roa
File: 8F43C038568211F0A084117BDAE4EC9C.roa (raw, json)
Hash identifier: hs3YcRNfxTcnmTfPtPelb4H6GgCa1TzrxcefG9XnVyQ=
Subject key identifier: 33:4E:28:BC:2A:32:45:DD:71:D8:E0:E6:85:68:16:C1:1D:8E:98:42
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 02
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/8F43C038568211F0A084117BDAE4EC9C.roa
Signing time: Tue 01 Jul 2025 13:52:00 +0000
ROA not before: Tue 01 Jul 2025 13:51:55 +0000
ROA not after: Wed 01 Oct 2025 13:51:55 +0000
asID: 213481
IP address blocks: 102.205.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 05:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 1 13:51:55 2025 GMT
Not After : Oct 1 13:51:55 2025 GMT
Subject: CN=6863e800-a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:d4:1f:3a:f3:17:53:99:03:be:a8:d8:dd:
f8:57:94:ec:54:11:02:b7:de:d6:65:58:e8:50:2e:
e4:8a:d1:e9:12:a0:68:b2:6b:e5:01:fc:8b:5a:d6:
26:da:75:20:37:0e:89:80:f2:60:07:64:03:dc:56:
9a:43:d1:7b:b0:ad:1a:3d:c7:62:45:bf:18:d2:40:
a4:18:de:67:dd:cb:4a:05:75:7a:2a:2c:37:74:60:
b8:4e:1e:ff:ed:94:09:6d:c0:fb:65:aa:96:ad:40:
bd:7e:41:f1:d2:bc:02:ec:77:c6:8e:7b:c3:92:81:
66:91:2b:2a:0a:3c:25:83:54:8d:d3:58:55:85:96:
9c:2e:76:53:8c:d3:d9:f3:f5:27:5f:f1:f3:93:71:
ac:bc:d8:86:2c:a2:c1:35:8f:54:b4:7a:83:8c:27:
ce:d6:16:c1:7f:8b:b9:25:3c:f5:2d:34:e4:b0:a4:
a8:93:d6:b4:44:d4:c3:5a:6b:a2:c7:63:e8:a7:0b:
01:b0:5d:45:6d:34:ff:02:de:94:39:0d:c9:25:05:
a7:79:e2:c1:54:47:22:bb:90:c9:29:2e:59:07:a4:
b6:2e:42:76:40:cc:d6:42:46:f7:41:eb:bd:fc:ce:
c7:ef:17:7e:47:40:1c:1c:8a:90:68:27:ae:7e:7f:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:28:BC:2A:32:45:DD:71:D8:E0:E6:85:68:16:C1:1D:8E:98:42
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/8F43C038568211F0A084117BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.240.0/22
Signature Algorithm: sha256WithRSAEncryption
61:2d:d1:37:18:b9:34:4c:84:d8:26:47:41:b3:7c:72:2d:6b:
2c:99:1f:ce:a3:32:51:75:9f:f6:70:fc:5c:98:be:7a:49:3e:
fa:ae:b9:b0:38:18:a8:f1:bd:07:cd:1d:ec:f9:ef:df:76:25:
b3:52:06:74:42:90:b7:0e:e4:d4:33:e4:45:89:56:87:f1:3a:
62:e9:86:51:1d:13:d0:ba:5f:dc:0f:4f:84:e6:e4:4a:99:c7:
a1:12:ef:ca:e9:33:aa:54:5c:27:00:26:71:9e:b9:9b:d2:85:
63:7b:1e:9b:19:01:4f:fb:cf:df:37:4d:ba:c8:5a:94:65:98:
56:a0:0e:45:69:7a:33:c2:26:86:83:5f:8e:d4:31:c2:33:f8:
b6:82:1e:eb:19:d3:ab:e1:20:55:66:bd:81:7f:95:d0:45:64:
66:bf:a8:43:13:2b:c7:f8:aa:57:4d:2c:e2:6a:d1:03:d1:90:
bc:52:33:ee:5a:6e:69:71:0c:1f:3d:0a:3d:d2:08:66:5c:2f:
53:59:a0:b0:e6:bb:e2:df:8b:f5:e5:e9:ab:29:21:9e:71:b8:
7b:99:1a:96:ef:e9:0d:95:1c:e0:61:5b:d4:40:3d:47:11:91:
dd:11:e2:d8:59:e1:e5:b6:c2:58:63:47:39:49:9c:74:fe:a0:
38:89:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:56:59 2025 by rpki-client