Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa
File: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (raw, json)
Hash identifier: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=
Subject key identifier: 41:1E:B4:BD:D8:4D:AD:08:A8:06:8C:55:66:2A:13:9D:0A:D2:B0:31
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07E6
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 19:12:00 +0000
ROA not before: Wed 22 Oct 2025 19:11:49 +0000
ROA not after: Sat 31 Oct 2026 19:11:49 +0000
asID: 60171
IP address blocks: 102.177.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Oct 2025 00:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 22 19:11:49 2025 GMT
Not After : Oct 31 19:11:49 2026 GMT
Subject: CN=68f92c80-f4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:6d:34:48:8e:a6:ea:20:f9:0a:1c:04:68:
96:69:65:ff:19:e2:18:16:30:9f:3a:d7:a5:83:66:
38:2e:9c:aa:89:64:0b:73:51:67:54:28:ec:c3:e7:
c8:72:9f:7b:75:ae:01:d6:59:f7:a6:c3:94:3b:e6:
8d:ea:2c:10:b1:6a:f8:47:52:0f:68:a2:26:c8:46:
b6:17:ec:8b:89:1a:26:34:89:5b:c3:9f:af:84:96:
d0:c6:0d:a4:1b:91:ac:2e:67:fe:93:63:a8:f8:02:
9d:a7:93:1c:60:63:14:fd:97:37:d6:72:e3:86:e8:
f8:d5:1c:0f:9f:bd:99:8a:25:60:0b:79:5b:fe:ff:
f7:bb:fd:02:1d:51:d6:24:64:11:ad:b5:37:38:73:
9e:b0:7d:92:c4:33:76:99:ec:f9:2f:77:88:f4:97:
a6:69:24:70:e3:ed:07:5d:07:b3:e8:e9:fa:b1:1d:
5e:df:3a:b6:7e:0b:c0:9b:ca:3f:07:a3:8f:42:10:
e0:93:9e:0b:3b:5e:1d:e4:ec:32:e6:09:ff:ea:b9:
99:54:16:a8:1a:a6:6a:b0:9b:ad:bb:ef:05:57:5e:
35:0d:c4:ae:1f:de:d3:48:2f:ff:b6:21:b7:9f:d0:
b9:1d:df:a3:78:39:3f:b7:b6:51:c1:8f:44:52:e3:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:B4:BD:D8:4D:AD:08:A8:06:8C:55:66:2A:13:9D:0A:D2:B0:31
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.154.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:16:f4:a5:11:82:f4:b2:a0:9d:65:34:7a:a5:78:58:17:c2:
7f:5f:d8:5e:c8:89:89:10:03:f7:90:54:73:b8:d4:f6:77:33:
f8:7f:fe:26:a4:d4:dd:be:dc:2c:ee:12:82:f4:fc:af:fb:ae:
b6:43:a9:60:07:7e:b4:92:26:5c:15:bc:c6:09:80:b9:fb:c3:
33:38:6b:16:6d:d7:eb:b4:15:0e:bf:a9:94:3c:6d:b3:4d:47:
65:bd:e7:7e:b7:e2:1d:59:32:4e:08:e5:c3:e3:b5:4a:4e:18:
e2:93:f2:53:fa:f8:94:8e:53:70:36:2a:81:bd:a1:d9:90:a3:
e6:4c:d9:33:b5:95:b5:90:75:3c:eb:4b:fc:21:e9:ee:5c:79:
be:5d:af:3c:0d:e6:2f:ff:ef:f3:8e:60:9d:d6:7d:61:ca:71:
5d:f2:45:53:e0:4d:26:9d:30:bb:9d:31:b4:d1:9f:30:fc:ee:
51:ef:c5:62:b4:5c:b6:d9:05:51:b9:95:fb:c1:b4:85:a1:15:
e0:ce:1f:34:dc:2b:40:4b:4d:20:ba:07:36:3f:7d:9c:35:01:
53:cc:24:ab:27:f8:33:ea:0e:9c:4c:2d:32:ae:a4:05:4e:ff:
2c:67:a7:7f:b1:98:97:16:83:02:65:ef:b6:f9:43:b3:66:2c:
39:6c:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:34:05 2025 by rpki-client