Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/712F322AA28211F0B6B56D81DAE4EC9C.roa
File: 712F322AA28211F0B6B56D81DAE4EC9C.roa (raw, json)
Hash identifier: QBWFXHW+Go5rg0Xj7p9zOmxqK64h+qwzrGrj4iK7u2c=
Subject key identifier: 4C:7E:4D:B6:17:0A:E5:5B:C6:7B:BD:5D:FF:07:4F:F9:07:3B:0D:A3
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07CC
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/712F322AA28211F0B6B56D81DAE4EC9C.roa
Signing time: Mon 06 Oct 2025 07:02:38 +0000
ROA not before: Mon 06 Oct 2025 07:02:33 +0000
ROA not after: Sun 02 Nov 2025 07:02:33 +0000
asID: 23470
IP address blocks: 102.177.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Oct 2025 02:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 6 07:02:33 2025 GMT
Not After : Nov 2 07:02:33 2025 GMT
Subject: CN=68e3698e-ad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:de:91:b9:d8:27:ca:ce:fc:9b:cc:78:cc:
4c:d7:08:04:1d:4f:b7:fc:6c:80:8a:da:cf:51:9b:
81:39:3e:58:f8:0e:41:95:c3:55:d7:c3:20:e6:89:
40:ec:a5:4c:58:87:b0:61:5a:38:5d:fe:02:24:09:
14:2a:17:8e:e7:8f:f8:d5:7c:c3:fd:17:e0:fa:20:
46:de:35:d7:30:72:48:b6:db:e3:7e:15:c2:26:a0:
32:f4:9e:26:de:1f:6b:00:66:22:8e:ea:3b:6b:a9:
ec:be:3d:cf:45:23:cf:af:a1:a6:54:15:64:29:9c:
6c:d5:19:10:3f:8b:84:05:21:59:e9:0e:c1:7c:27:
a2:47:ef:8f:1c:77:7b:8c:fc:98:49:ed:86:88:ad:
36:f4:94:28:a4:53:14:6b:98:fa:ce:cc:ec:bb:9f:
19:28:2d:dc:02:3a:3c:0e:23:c0:1d:5b:f3:1e:b8:
36:e5:93:d4:0a:68:8a:65:3d:7c:7c:ba:d8:a9:31:
83:51:8f:30:b2:69:b7:4e:89:ea:3d:5e:33:cf:0e:
0c:66:d8:bd:7b:eb:fa:5f:49:f8:f3:9c:b5:e6:0a:
45:c9:44:b9:eb:c0:ed:7b:3c:e5:35:14:f0:d4:7c:
50:b8:a3:90:5d:d0:f7:76:b3:c5:fb:90:84:1a:09:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7E:4D:B6:17:0A:E5:5B:C6:7B:BD:5D:FF:07:4F:F9:07:3B:0D:A3
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/712F322AA28211F0B6B56D81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:70:fd:15:bd:2a:7d:02:c1:20:7e:41:fc:1f:fa:6c:95:94:
b0:1a:89:a0:ac:3f:ee:6c:b2:6e:08:a0:f0:9b:6b:6e:a7:fc:
f4:96:f1:a3:26:d3:e7:76:bb:f2:90:79:71:16:84:03:30:40:
51:8b:52:1c:98:db:91:61:78:c9:f7:7b:c4:e6:14:67:08:4a:
e1:de:a0:e7:22:00:3f:12:66:4f:8c:73:c3:8d:8e:33:c4:34:
5c:fc:6d:3b:e4:c6:39:cc:54:a8:0a:11:95:19:e2:5c:72:19:
dd:14:ad:aa:81:9c:7a:49:0f:31:81:65:56:7b:02:83:d1:d1:
3f:01:f4:5f:fe:1b:8e:d2:c0:fe:4c:44:d2:03:7a:de:1e:70:
51:03:ad:4d:c9:c7:9e:1e:c1:32:97:60:9e:1e:39:33:0d:9e:
e4:8b:55:4f:5c:48:32:ba:d1:c5:88:8a:92:26:54:fe:ab:4e:
2c:46:42:3e:7e:f9:78:c0:57:e5:a0:4c:80:35:4f:49:66:00:
af:1b:77:d3:cf:0b:20:00:9b:ba:db:f9:d5:c3:30:84:04:e5:
3d:83:0e:6f:71:d7:1f:0c:02:f0:5c:8c:52:4f:0b:f1:24:3e:
81:2e:06:81:52:47:5d:ad:e0:82:07:5e:01:55:58:cb:a0:76:
0f:38:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:58:46 2025 by rpki-client