Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/35237092849C11F085DA07E3DAE4EC9C.roa
File: 35237092849C11F085DA07E3DAE4EC9C.roa (raw, json)
Hash identifier: 4GhrXdLBgo+sBVSTLqs5eEid22S/IKE4eBqRbt8OBIA=
Subject key identifier: 06:0F:8E:CF:5F:4D:67:A6:E4:6F:FF:22:BF:FC:3F:72:A3:11:27:BF
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0789
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/35237092849C11F085DA07E3DAE4EC9C.roa
Signing time: Fri 29 Aug 2025 05:51:29 +0000
ROA not before: Fri 29 Aug 2025 05:51:25 +0000
ROA not after: Tue 30 Sep 2025 05:51:25 +0000
asID: 23470
IP address blocks: 102.177.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 29 05:51:25 2025 GMT
Not After : Sep 30 05:51:25 2025 GMT
Subject: CN=68b13fe1-daf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:64:a6:98:ee:ac:f4:b8:6f:d6:81:01:29:
5f:5c:c5:09:8f:eb:26:22:e4:d9:ae:b7:7a:62:49:
97:d3:36:96:7c:3a:46:70:49:ea:e7:4a:12:05:6b:
86:9f:80:71:2c:6e:94:54:4a:79:7d:4e:8f:3c:ac:
4f:69:10:b1:7f:9c:7f:0a:c4:0a:4d:6e:4b:8f:09:
2f:ef:2c:1d:07:c1:d5:1a:d5:3c:7c:8e:80:73:bb:
a2:8e:07:0f:c0:32:36:66:c2:ee:69:11:89:9c:d7:
1a:56:65:ef:c1:17:60:55:4f:a2:ab:a8:f3:0f:b6:
7d:03:7d:56:5f:c5:7e:32:86:b2:97:ce:ee:df:42:
ea:94:fd:08:1c:dc:18:92:cb:fb:f1:56:35:4d:d9:
ca:75:aa:1a:d4:51:c4:0a:d2:73:e7:c1:52:20:85:
56:ca:33:96:ce:4e:1d:96:a7:7b:2f:7b:1c:6d:09:
68:20:33:07:fa:ba:41:bc:36:c3:cc:b2:92:3e:9f:
f2:a5:40:08:62:b1:b7:60:1a:06:a1:71:9c:54:bf:
e0:b5:c7:b3:b0:31:f7:69:18:94:54:90:64:c3:61:
0d:75:f2:b9:47:06:68:92:9c:01:ed:49:4d:5e:0d:
b1:e0:9c:bc:29:ef:b4:01:1d:67:51:14:22:e5:7a:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0F:8E:CF:5F:4D:67:A6:E4:6F:FF:22:BF:FC:3F:72:A3:11:27:BF
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/35237092849C11F085DA07E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:aa:ad:ba:e2:aa:44:20:00:a6:74:83:4e:27:14:90:54:c0:
bd:97:31:e2:31:50:07:1c:a7:73:ae:7f:bb:53:3a:d1:2f:86:
cf:40:f3:6c:6e:20:84:8c:c7:c0:01:9b:59:16:52:cb:2b:28:
d2:4e:dd:cf:fd:86:b1:4f:d5:5a:76:3b:3f:a3:2b:82:b7:a6:
f6:81:3a:88:98:a2:34:d0:0f:d4:2b:72:2c:73:5d:ff:0f:d3:
b0:8f:f8:b5:61:c4:f0:80:91:3c:fb:b6:f0:fc:76:08:cb:9d:
d5:6f:3b:66:74:7e:7d:65:2f:6f:1f:47:aa:91:0a:2c:39:38:
bc:45:be:c6:ed:55:87:0f:fc:c4:3d:1a:74:6e:95:02:66:73:
85:28:51:2b:85:3a:43:c3:d7:fb:d9:82:1f:6f:50:f8:e5:e0:
7d:a4:f7:83:44:11:e0:eb:b1:7b:73:6a:9f:7e:b4:6a:31:f2:
c6:a8:a2:ae:57:32:f4:f9:03:a8:42:89:ec:4e:e6:22:30:8f:
05:a2:94:39:b5:c3:8f:84:fd:d2:26:1e:93:af:50:6a:2d:03:
b2:bb:e0:9c:51:cb:24:27:d8:18:f3:fe:5b:56:92:e3:43:12:
4c:c7:eb:90:7f:4f:0a:b7:f5:22:d5:da:66:d1:28:10:74:f8:
2e:49:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:41:00 2025 by rpki-client