Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7FF565AE849B11F0AF3EAEDEDAE4EC9C.roa
File: 7FF565AE849B11F0AF3EAEDEDAE4EC9C.roa (raw, json)
Hash identifier: yqhEa/X79zR1eIlNu/RDuCWEuBIN03wmFicK7uPcAxk=
Subject key identifier: C4:38:F7:84:6D:D8:90:FA:5C:89:CB:A6:D2:15:82:1D:99:32:97:8C
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0787
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7FF565AE849B11F0AF3EAEDEDAE4EC9C.roa
Signing time: Fri 29 Aug 2025 05:46:25 +0000
ROA not before: Fri 29 Aug 2025 05:46:20 +0000
ROA not after: Mon 29 Sep 2025 05:46:20 +0000
asID: 22724
IP address blocks: 102.177.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 09 Sep 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 29 05:46:20 2025 GMT
Not After : Sep 29 05:46:20 2025 GMT
Subject: CN=68b13eb1-51c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:b9:ef:a8:ef:46:c5:69:d5:a5:f9:42:d8:
5c:df:3e:81:4f:c0:54:7d:af:1a:73:7f:71:38:08:
e4:35:54:98:a3:d3:3d:f5:aa:11:3f:67:7a:54:56:
e5:e3:c1:12:d8:af:04:3c:ae:2b:fd:62:7b:42:be:
a9:39:cb:5e:d8:96:ec:4b:2e:29:08:2a:9a:c2:72:
14:c5:ff:d4:03:27:6d:c0:ba:4b:5f:03:46:65:6f:
48:0f:8b:45:45:ba:6b:be:b5:76:39:18:fc:7f:f7:
67:34:d8:37:1a:e8:86:ee:34:b1:5d:fc:24:4f:bf:
6f:f9:4d:10:86:88:0a:e2:54:86:a7:7f:b5:a9:7c:
53:68:89:4c:09:88:27:9b:c3:09:ff:f2:47:d3:d9:
54:d5:a5:b2:9e:08:15:03:0f:ba:ea:7d:f5:4e:e8:
0f:73:0f:fb:46:21:ed:b7:8a:8b:29:b4:42:43:1f:
1d:71:37:f5:d5:91:24:21:59:6b:48:0e:14:b8:07:
f9:09:fb:33:85:f0:3a:3f:a0:20:6b:6a:d4:a2:e4:
1d:e9:a8:65:3d:e7:52:03:cd:e5:8f:14:7f:85:ed:
5e:a4:73:20:e0:5a:64:b9:63:0d:e4:a1:e8:e1:cd:
4b:1c:bd:41:8d:8b:87:54:e7:43:0d:70:1b:ac:4c:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:38:F7:84:6D:D8:90:FA:5C:89:CB:A6:D2:15:82:1D:99:32:97:8C
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7FF565AE849B11F0AF3EAEDEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:b4:f1:65:40:38:40:28:73:b7:b0:6a:ca:c2:64:2c:f1:14:
c9:fa:03:03:63:2c:d5:0c:29:08:91:b6:bd:85:1a:86:78:4f:
5f:73:80:1c:81:1f:d8:81:6f:a2:17:e1:a1:7f:c6:ee:1a:5c:
d7:2f:52:04:85:30:b0:29:dd:28:8d:18:3f:a0:8b:e5:ed:e8:
6b:29:5c:21:99:b6:d4:9c:e8:c9:70:a3:98:d3:0f:3a:e7:bd:
59:85:ad:7a:fd:1b:21:5b:01:ac:e9:43:dc:f5:64:59:ca:c3:
06:97:fd:80:17:af:f0:ec:73:4b:bc:c8:6f:d9:99:fd:a5:1e:
51:5c:8c:a6:2b:ae:18:d8:76:8e:71:2b:26:5e:eb:24:29:cb:
74:3f:f2:dd:23:4b:fc:86:ce:d3:84:27:48:4f:b7:bf:e6:bc:
ae:d6:10:b1:a1:24:ed:0f:08:fd:7c:48:ed:27:9d:a6:36:5f:
11:2e:20:5a:75:de:58:89:0b:4e:c0:62:99:b6:c4:27:61:bd:
35:ab:60:03:03:d4:99:2c:9b:a7:24:e2:4f:8d:54:c2:91:87:
52:e7:03:90:dc:de:9f:7a:c8:a2:8a:70:85:45:ff:8b:d9:d4:
1b:74:f6:54:57:2f:14:dc:d6:bf:e9:6b:ea:67:92:9d:11:f6:
ed:5f:3c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:40:17 2025 by rpki-client