Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9307AC26864211F0B10DDAA0DAE4EC9C.roa
File: 9307AC26864211F0B10DDAA0DAE4EC9C.roa (raw, json)
Hash identifier: asyiiPpBOEH3XPd0A+rm4Mn5TAQ1pyZZcQW8jLn0FfU=
Subject key identifier: DA:4D:81:87:FA:E9:DE:5C:26:CB:00:A2:67:F0:28:4C:A4:70:BD:AC
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0790
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9307AC26864211F0B10DDAA0DAE4EC9C.roa
Signing time: Sun 31 Aug 2025 08:14:54 +0000
ROA not before: Sun 31 Aug 2025 08:14:47 +0000
ROA not after: Wed 10 Dec 2025 08:14:47 +0000
asID: 203020
IP address blocks: 102.177.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Sep 2025 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 31 08:14:47 2025 GMT
Not After : Dec 10 08:14:47 2025 GMT
Subject: CN=68b4047e-00bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:6e:ec:f7:1f:c7:b5:c5:a7:09:6a:7b:3d:
2a:91:01:e2:5e:9f:6d:95:e1:88:e2:cc:38:16:8c:
b8:93:de:fc:0c:2f:4b:5f:25:f2:5e:92:61:72:37:
bb:5b:12:88:47:ce:1e:b0:e9:c2:f2:6d:9f:5c:5c:
37:8d:f6:96:2f:20:34:e6:42:5e:a3:ab:9f:af:4f:
df:3e:92:67:b7:02:2e:c7:e7:f6:58:e1:57:64:99:
d2:b4:86:c9:e2:68:da:23:72:08:77:3a:a9:b2:85:
17:6d:4c:3d:69:65:18:59:23:08:10:bc:4b:88:2c:
8b:64:aa:fc:5c:26:4b:87:dd:08:b9:6c:70:49:f5:
a0:28:2e:91:60:98:7e:43:76:9d:fa:3a:0c:57:19:
bb:77:f9:22:06:0e:f9:1f:2b:e8:dd:0e:d1:68:a9:
0b:c7:94:f5:dc:30:78:64:32:f0:b5:4f:8d:e8:93:
0e:a3:73:92:05:13:23:83:e5:7d:73:b4:f7:fd:47:
4a:5a:19:1c:e5:ab:65:22:b1:db:1f:3e:73:3d:bb:
37:58:bb:55:97:bb:09:33:2d:9b:00:fd:7f:ee:5f:
39:0f:6e:f4:e1:b0:8d:8f:72:6d:fd:7a:0d:74:07:
92:91:aa:43:dc:cf:44:ed:c2:64:5b:ee:25:30:72:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:81:87:FA:E9:DE:5C:26:CB:00:A2:67:F0:28:4C:A4:70:BD:AC
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9307AC26864211F0B10DDAA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.191.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8f:bd:45:ad:a9:a8:5a:6e:96:8c:4b:92:ae:39:01:8c:32:
fb:4e:9c:54:cb:6f:a6:95:0c:05:27:65:86:69:f2:56:f9:da:
2b:bf:57:cc:14:b2:bd:a1:ab:14:0f:6a:09:86:07:e2:69:41:
7f:eb:a9:08:a2:d8:96:ae:2b:c5:53:10:fe:5b:f4:30:64:de:
63:f3:3b:71:31:92:75:7f:5a:6a:a3:43:48:6d:06:0f:e7:13:
dc:5e:36:90:f6:b6:82:c1:c2:36:40:f8:c3:5c:21:5d:48:c7:
07:63:79:ef:2e:bb:f9:d3:a4:a3:c8:da:31:0c:78:81:1c:0d:
d8:0a:12:14:f1:32:a9:08:9d:d9:81:0f:4a:61:58:4d:b3:78:
ec:3c:46:94:ee:89:c7:c0:64:ed:f9:a6:48:14:f0:10:cf:58:
9c:5d:9c:18:f3:51:f6:e4:7f:7d:8f:75:1b:e5:f8:11:dc:a6:
33:04:db:df:ae:18:44:0e:21:50:87:b1:dd:62:6e:b5:c2:0b:
21:a8:cf:47:0b:ce:3a:7c:48:19:ee:8a:d9:18:70:64:68:6b:
dd:83:5b:8d:b8:ae:32:c0:09:ce:03:48:c8:70:dc:8f:95:85:
9a:12:b2:d6:06:50:98:63:b0:48:ec:7f:71:1e:ce:56:59:5c:
a4:43:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:53:15 2025 by rpki-client