Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D0108F1CB04911F0B3C8A0D4DAE4EC9C.roa
File: D0108F1CB04911F0B3C8A0D4DAE4EC9C.roa (raw, json)
Hash identifier: CDg6LHXRfBRyjGxOBbHM4enqEATip+pe3F7eWpCXfWM=
Subject key identifier: BF:62:AD:C2:92:3E:95:88:0C:4B:5F:CC:C6:20:F8:1D:93:7B:CF:E7
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07F1
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D0108F1CB04911F0B3C8A0D4DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 19:52:32 +0000
ROA not before: Thu 23 Oct 2025 19:52:27 +0000
ROA not after: Sun 30 Nov 2025 19:52:27 +0000
asID: 22724
IP address blocks: 102.177.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 23 19:52:27 2025 GMT
Not After : Nov 30 19:52:27 2025 GMT
Subject: CN=68fa8780-d5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ff:9f:a7:6f:71:1f:18:20:f7:25:79:2b:cd:
01:ab:2d:7b:a7:99:9b:1c:69:32:50:53:eb:2b:7b:
f3:ad:3f:35:73:af:64:5a:49:a5:7a:88:e1:6a:17:
4f:95:3b:a0:f0:c6:33:87:6e:f3:b6:86:10:48:4d:
f0:2c:77:4d:69:3b:c9:9f:88:7b:4c:f5:c0:37:d1:
89:f9:60:8d:7d:c8:2b:a1:d9:86:a1:06:eb:c3:fa:
ca:02:9d:05:d4:89:af:63:c0:72:e1:f1:b4:e7:03:
18:33:31:8a:15:48:84:0b:37:6d:ac:b9:06:16:96:
ea:73:f4:1c:e4:81:66:cf:00:69:73:04:f9:2a:cd:
bc:87:b8:6c:7e:38:45:02:cd:31:ff:13:26:49:0f:
b5:bc:d8:99:d3:4b:60:d8:e9:40:6b:6a:bf:0f:37:
32:15:89:d3:31:07:73:02:67:ba:fa:b1:80:b0:36:
33:c9:45:55:14:a5:f1:dc:e5:cf:c3:9e:17:1f:46:
a0:e7:b9:77:0e:56:3e:ce:92:fa:14:44:c7:9e:31:
29:e2:5e:6d:2a:29:ac:94:81:8e:af:f5:3c:49:fd:
0d:8e:49:d0:f6:0d:d0:10:0a:39:52:d3:5a:89:e5:
46:3b:c1:a8:5d:7c:2d:cb:19:14:a1:82:b2:54:66:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:AD:C2:92:3E:95:88:0C:4B:5F:CC:C6:20:F8:1D:93:7B:CF:E7
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D0108F1CB04911F0B3C8A0D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.174.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ec:9b:e4:50:56:d6:6d:e5:4c:3c:1e:3d:11:74:f3:d1:12:
fb:ed:28:e5:40:d5:20:96:59:49:25:d4:82:03:84:2d:76:57:
cf:4d:09:f8:a5:6f:50:80:3a:70:84:f9:6b:42:f5:2b:bb:33:
37:ab:77:b7:f2:16:f5:59:a4:09:ce:c1:e8:f1:49:dd:1f:db:
bc:64:0e:ee:09:94:c8:90:2a:66:ab:d7:c1:2b:85:ba:90:36:
d0:96:20:31:8a:89:cd:2e:a0:0c:0c:b2:d6:0c:03:99:ec:af:
86:8b:d7:6b:bd:e5:d8:c1:6c:f4:80:a7:7c:8c:55:73:42:0f:
ee:77:bd:95:be:c7:ca:41:0d:c1:1e:d9:22:8a:27:2e:62:07:
df:05:ba:a1:89:a9:33:f9:5e:74:06:42:a6:54:bd:e8:02:be:
5a:9f:73:c6:29:ce:72:11:c0:37:65:33:af:c9:fd:fd:d3:6d:
8d:00:77:45:2d:27:56:78:ac:e8:35:8a:d2:eb:45:56:a7:7f:
66:45:85:f3:02:19:9d:dd:d7:15:81:78:4a:cc:5b:6d:d1:05:
29:f3:69:d3:30:58:ba:92:bc:25:5f:56:1c:0f:03:54:1d:b4:
2f:2b:d2:e1:84:b2:9d:8b:10:31:92:1f:6f:2a:1b:32:bf:92:
84:dc:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:57 2025 by rpki-client