Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/0DD894EC849A11F09FE3ECD5DAE4EC9C.roa
File: 0DD894EC849A11F09FE3ECD5DAE4EC9C.roa (raw, json)
Hash identifier: AniVLtWLvlDPHvPaJgWBDz6THQGdmRvkdFZ34Ig1BDI=
Subject key identifier: ED:CA:C7:82:B8:3B:3E:1D:9A:88:F2:CB:D9:4B:ED:73:97:89:D2:D9
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0781
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/0DD894EC849A11F09FE3ECD5DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 05:36:04 +0000
ROA not before: Fri 29 Aug 2025 05:35:56 +0000
ROA not after: Sun 28 Sep 2025 05:35:56 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 29 05:35:56 2025 GMT
Not After : Sep 28 05:35:56 2025 GMT
Subject: CN=68b13c44-b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:41:5d:fd:a0:d1:aa:50:5e:19:a1:6d:1b:
05:6f:2c:9f:42:69:28:bc:2e:f2:c7:e2:ac:ec:ca:
d7:38:9d:58:98:99:6a:ac:a6:d7:b4:41:af:33:d3:
b6:75:8c:4b:ef:6e:3f:24:af:d3:91:71:a2:52:08:
d6:03:e4:25:58:22:14:f0:4f:7a:be:d8:58:28:6d:
30:b5:5a:cc:b4:30:da:c6:98:37:13:e1:b9:3a:da:
ce:2c:17:f2:4d:15:d0:97:ae:1f:06:1b:08:5e:c0:
85:63:e4:11:5e:33:18:a1:79:31:a6:b4:1f:0c:5b:
ef:e0:63:35:4e:8e:06:21:66:5e:2e:c0:6a:f3:a3:
ac:23:8e:0b:03:a2:55:ad:a2:c6:b0:fc:fe:d9:cf:
3c:5b:88:f8:39:87:9e:45:55:a7:48:49:64:72:50:
7b:5c:e0:40:75:51:e0:f3:8c:06:ae:fe:aa:47:a6:
8d:00:b2:4b:29:57:41:77:6e:37:28:33:cf:93:74:
90:c4:00:98:bf:1f:ad:de:41:07:58:57:dd:9f:e5:
05:ea:a8:35:d6:fc:5a:a2:07:2f:ee:9c:79:e7:c2:
a0:15:3d:f2:29:9d:c5:b7:38:cf:aa:a9:a4:2d:5c:
57:c5:f7:92:6c:ea:e7:59:04:b0:cc:0c:1f:db:8e:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:C7:82:B8:3B:3E:1D:9A:88:F2:CB:D9:4B:ED:73:97:89:D2:D9
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/0DD894EC849A11F09FE3ECD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f1:1a:d7:29:e5:ff:63:e4:93:d2:d1:0c:2e:ba:8f:2e:72:
b9:af:9e:f0:f1:99:29:c5:e7:92:71:12:82:70:a0:41:2e:2d:
34:11:6f:df:31:ba:42:fa:30:b4:bb:a6:f0:91:e5:60:02:22:
df:55:d6:d7:73:35:19:23:1a:63:6a:81:a0:86:c9:9f:a2:e2:
91:6f:1d:b5:64:d8:bc:83:d4:c2:35:94:ee:1d:7e:c6:b9:48:
a0:69:be:54:9d:68:7a:c4:0b:f6:eb:11:ed:9a:66:61:0f:2c:
d7:6f:5b:c2:62:3c:7b:24:25:64:21:52:36:20:89:1e:a5:93:
b4:93:94:cc:2d:e5:c0:9f:d9:c5:8c:9e:b2:73:f5:54:c0:35:
7a:41:69:46:45:32:94:76:24:74:31:0f:22:af:5c:47:67:c7:
34:65:6d:6c:17:b2:e3:7d:b9:a3:ab:a2:8b:fe:54:84:21:71:
46:cc:97:1b:08:be:0e:0e:72:5d:a8:28:fa:ef:2a:ac:75:20:
15:0f:cf:2e:35:4c:84:5e:64:62:8e:f3:67:ec:26:8e:53:72:
95:d2:cb:3f:df:af:93:16:49:26:9d:46:a8:90:83:89:d9:d6:
cd:3a:62:ee:e0:b9:2c:df:ce:8d:0a:3b:94:6e:14:2a:3d:50:
da:1d:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:42:01 2025 by rpki-client