Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa
File: 7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa (raw, json)
Hash identifier: f8ypJFzZi/+69BhBnv9bsOOJoTGmoh2yg/JFPVO+hyE=
Subject key identifier: 3B:B3:8F:BD:8E:B8:D2:BF:74:5C:87:32:1B:D1:D9:C2:AB:0D:AC:E0
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 097F
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa
Signing time: Fri 12 Sep 2025 06:34:10 +0000
ROA not before: Fri 12 Sep 2025 06:34:05 +0000
ROA not after: Fri 01 Dec 2028 06:34:05 +0000
asID: 328366
IP address blocks: 102.204.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Sep 12 06:34:05 2025 GMT
Not After : Dec 1 06:34:05 2028 GMT
Subject: CN=68c3bee1-b923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:d4:f4:51:d5:8c:4c:4d:4b:a3:56:d8:e6:
c2:d3:11:b6:b0:10:df:de:e5:37:51:76:95:cf:2e:
67:cd:1b:ec:dd:4b:ee:28:61:f0:db:39:ba:d8:4f:
a6:42:57:ed:6d:19:64:88:ba:df:4e:9d:8f:5e:59:
17:06:07:98:51:fa:f2:62:08:96:83:57:83:26:5d:
a1:c5:0b:e5:b1:3e:c2:1a:dd:b3:89:fe:b3:d2:54:
59:4b:66:de:cb:48:e0:11:91:08:28:6b:d3:e5:38:
ab:cb:9f:96:d2:29:f9:14:48:61:a2:36:97:1f:a6:
a4:ba:a9:e3:5d:84:bf:33:86:74:0b:4a:70:05:7f:
47:9d:a6:d3:d7:e1:8d:e7:1f:06:fe:15:c4:b7:e1:
34:9a:49:4c:13:5c:ca:2d:93:f4:f7:0c:cc:b8:6d:
8a:26:94:8e:5d:71:67:4d:d0:3c:b7:63:73:9b:8d:
88:19:7c:b6:c9:14:60:4f:7d:af:bc:d2:26:b9:98:
ce:fe:c7:5d:4a:f7:8c:9e:9a:d4:a0:1a:97:d8:42:
73:a8:00:1c:ad:82:00:dd:59:e8:2e:1a:70:c2:a4:
c4:00:46:ab:1e:ca:9d:a0:32:2b:f8:b0:4b:9d:69:
3f:6b:6a:10:72:04:5b:ee:e8:d6:50:22:5d:dd:e7:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:8F:BD:8E:B8:D2:BF:74:5C:87:32:1B:D1:D9:C2:AB:0D:AC:E0
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:d8:dd:a5:c9:bc:ed:66:83:5a:e9:c4:37:ba:25:6d:15:d7:
5a:a2:5f:a0:16:3b:a4:1e:62:13:b0:37:bb:56:e6:4a:24:8e:
2a:1e:b9:a0:15:3e:c2:c5:60:4e:f6:3d:db:d4:a0:75:5e:c2:
d0:e2:16:cf:12:85:cf:7e:31:2e:8d:a0:cc:07:ed:fb:7e:41:
92:9d:cf:97:e0:e0:f0:a9:18:f0:9c:f8:02:0e:65:e0:ca:74:
5e:0a:8c:23:91:53:db:6f:2f:51:b1:f8:22:16:60:11:bc:1f:
a4:fa:95:bc:9c:1d:7e:58:59:5c:8c:94:c7:8f:02:42:ee:90:
ea:e9:e5:a0:a0:4f:4b:7d:b7:93:76:a8:93:76:5e:cd:a2:17:
6d:da:92:a6:09:e1:cc:06:f3:2e:e8:7b:93:88:5c:be:ee:83:
60:14:17:8d:92:41:30:f5:73:98:4d:30:bb:43:d1:b2:41:b3:
9e:11:e5:df:d6:ac:ad:4c:ef:9b:3d:5e:a9:36:36:c9:cc:c2:
cf:17:7e:4c:98:b6:f3:32:da:97:a0:ef:b5:28:1e:85:20:1a:
06:35:79:8f:5c:17:13:ff:21:36:4a:d8:32:ac:92:a4:87:ac:
50:13:d2:68:73:c9:8c:ed:bf:be:01:06:8b:98:04:1c:8c:ae:
35:2b:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:06:07 2025 by rpki-client