Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7DFFD740AF1E11F09974FEE2DAE4EC9C.roa
File: 7DFFD740AF1E11F09974FEE2DAE4EC9C.roa (raw, json)
Hash identifier: 05pUEJYVlzsT6hoEBGKouCrbR+JUBlrPj8nbP+9PHsQ=
Subject key identifier: 69:2D:FD:9F:0C:DA:63:3D:EC:AE:12:F6:62:BA:58:D2:04:A7:CC:74
Certificate issuer: /CN=F369FC1BAF/serialNumber=ED57E0B468C4847E203E5FDA56E35B50BF37F4BB
Certificate serial: 02
Authority key identifier: ED:57:E0:B4:68:C4:84:7E:20:3E:5F:DA:56:E3:5B:50:BF:37:F4:BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7VfgtGjEhH4gPl_aVuNbUL839Ls.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7DFFD740AF1E11F09974FEE2DAE4EC9C.roa
Signing time: Wed 22 Oct 2025 08:09:55 +0000
ROA not before: Wed 22 Oct 2025 08:09:50 +0000
ROA not after: Sun 22 Oct 2028 08:09:50 +0000
asID: 329518
IP address blocks: 102.207.44.0/22 maxlen: 22
2c0f:15c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.crl
rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.mft
rsync://rpki.afrinic.net/repository/afrinic/7VfgtGjEhH4gPl_aVuNbUL839Ls.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Oct 2025 00:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FC1BAF, serialNumber=ED57E0B468C4847E203E5FDA56E35B50BF37F4BB
Validity
Not Before: Oct 22 08:09:50 2025 GMT
Not After : Oct 22 08:09:50 2028 GMT
Subject: CN=68f89153-2216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:75:04:1d:21:9c:60:c5:20:ed:b8:bd:67:
63:fe:ce:d2:0e:00:69:ed:25:1e:63:21:d7:87:57:
ad:6a:2f:de:79:c7:46:22:a0:e4:a7:10:ac:15:df:
d2:73:27:c5:74:c0:7e:3d:db:7d:c1:e9:c2:10:29:
07:fc:6b:a8:f3:47:37:55:0f:4e:1e:16:a7:8f:b9:
50:be:27:c3:25:13:3b:35:df:7c:4b:f4:47:6a:37:
1e:13:41:27:3b:32:4e:12:be:54:8d:52:c9:9b:de:
dd:14:54:2f:f5:84:2c:19:3f:0b:3b:bc:54:9b:b7:
3e:77:b5:ff:ef:9d:ca:e0:20:3f:89:bb:5a:86:0c:
9d:d5:c3:e2:a9:f7:40:6e:64:53:55:71:58:b7:ff:
d7:14:fb:e7:33:62:04:69:8e:4f:75:2f:bf:a5:be:
af:e2:fb:8c:eb:d7:10:b2:65:44:94:3c:b8:ac:28:
0b:72:aa:4e:6e:7c:b2:e0:da:21:c0:90:8a:5c:0c:
d3:06:5c:47:54:e6:3a:32:34:2f:5e:c4:91:10:6c:
24:54:5b:cd:9b:41:fe:69:ed:44:7f:9b:fe:f7:54:
50:2a:b7:39:f5:3d:e2:4b:51:01:ea:ec:58:0b:59:
21:cd:b2:f2:9f:e7:b5:29:43:a7:de:aa:03:60:16:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2D:FD:9F:0C:DA:63:3D:EC:AE:12:F6:62:BA:58:D2:04:A7:CC:74
X509v3 Authority Key Identifier:
keyid:ED:57:E0:B4:68:C4:84:7E:20:3E:5F:DA:56:E3:5B:50:BF:37:F4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7VfgtGjEhH4gPl_aVuNbUL839Ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7DFFD740AF1E11F09974FEE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.44.0/22
IPv6:
2c0f:15c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:0c:03:76:65:f0:e7:c3:c2:16:21:66:1e:99:bd:19:6d:22:
ce:f1:ee:4f:8d:21:8e:39:2d:27:cb:e3:38:6d:ec:a8:98:cc:
dc:60:68:dd:cd:68:72:e1:8e:2d:c3:06:31:02:9f:a7:a7:16:
2a:09:4c:c6:42:b1:a1:45:c1:49:f2:61:4d:8f:7f:76:61:17:
53:b5:fd:67:7d:b3:4e:0a:8e:48:68:1c:41:44:b3:3d:5c:9f:
2f:6f:ff:d6:57:7e:89:8d:83:74:97:97:4a:90:46:2f:01:eb:
05:80:73:e5:9d:42:40:f5:71:92:ec:f6:60:a6:5f:07:07:02:
aa:aa:71:6a:17:d7:50:38:8e:af:22:f3:e8:d1:b1:54:7f:47:
0d:d6:37:66:36:fd:c3:8a:4c:84:f2:12:32:08:8b:a6:64:34:
a0:0a:04:66:da:7a:ea:bf:ad:9b:9c:4f:c8:01:4c:a0:e2:ac:
71:6f:9d:ca:1a:89:e5:5d:e3:1c:90:32:f8:5a:0b:4d:2f:4b:
a0:21:b1:41:c8:69:c5:f3:06:6a:60:6e:05:7b:1a:18:ea:ed:
89:eb:6e:ef:ad:c6:a3:99:11:f4:33:6f:5a:e9:80:c6:95:0f:
e5:8f:10:09:27:48:d7:76:ac:4c:96:a9:7e:ad:08:e4:3d:04:
88:f3:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 23:24:04 2025 by rpki-client