Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/17D463FAAFF511F0B975AED4DAE4EC9C.roa
File: 17D463FAAFF511F0B975AED4DAE4EC9C.roa (raw, json)
Hash identifier: uEEpdNuGoqMfO9ULAvKg2BMD81cIEqcZ6f8n1EIXeQU=
Subject key identifier: 01:1C:0A:CA:46:C6:59:0F:D1:46:C6:4C:18:A4:ED:57:C9:A6:34:BB
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 0748
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/17D463FAAFF511F0B975AED4DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 09:46:05 +0000
ROA not before: Thu 23 Oct 2025 09:46:00 +0000
ROA not after: Wed 23 Oct 2030 09:46:00 +0000
asID: 25198
IP address blocks: 102.215.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Oct 23 09:46:00 2025 GMT
Not After : Oct 23 09:46:00 2030 GMT
Subject: CN=68f9f95d-796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:fb:7d:ee:04:20:3f:1a:b6:fa:3d:b3:b3:
8e:25:e8:cd:ea:ab:c5:e7:90:f5:64:7e:14:17:a9:
7c:63:dd:84:b9:31:fc:e6:56:ad:ad:3c:2f:39:e7:
1f:d8:68:96:ed:ba:87:e4:49:09:25:e6:6d:94:92:
ef:08:05:15:64:2e:ad:3a:2b:b4:7b:24:f7:bd:e7:
37:58:0a:5b:1b:78:a8:00:2f:6e:64:99:d4:f2:e3:
b5:ab:04:39:c4:bb:52:cb:3a:3f:4d:58:ef:ff:92:
7f:af:58:fc:4f:ae:23:c0:a3:52:91:36:b9:82:8f:
be:8d:53:0d:a2:3f:20:94:88:3c:ab:e6:5b:ad:3f:
66:2a:96:11:80:96:38:f7:21:7d:52:4a:80:13:79:
56:1b:fe:ae:84:88:94:fe:89:4d:3b:88:2d:fb:3c:
86:35:bb:91:c9:56:7f:d1:74:99:38:85:3b:de:ca:
62:08:af:c0:fe:f7:50:3f:68:8c:ab:2f:ff:6d:a7:
d2:df:55:d4:97:5c:ac:5e:21:53:db:ab:10:5f:23:
51:1d:43:ed:c2:19:d3:b1:99:66:ef:18:a7:87:71:
c2:e3:c7:56:bf:cb:45:ae:af:12:ed:57:0b:3c:39:
a0:6d:87:9e:78:8c:45:28:4d:66:d8:68:53:ee:58:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:0A:CA:46:C6:59:0F:D1:46:C6:4C:18:A4:ED:57:C9:A6:34:BB
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/17D463FAAFF511F0B975AED4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:43:e4:1b:3d:6c:ef:f2:60:bc:4a:6d:3f:46:b6:d7:90:ba:
e0:c8:5a:df:c7:fa:bd:bb:30:76:c9:ee:00:c1:eb:eb:f1:cd:
05:d9:62:84:18:33:58:62:d0:99:50:51:b1:ec:44:91:71:a1:
68:bf:e2:6c:1d:82:37:53:a5:6f:b9:f7:f9:81:f2:6f:2f:9c:
b6:e4:b3:c7:35:f2:8f:c4:04:3b:dd:5f:50:f0:b6:3d:02:f7:
ad:62:60:e1:80:c6:e1:cd:3e:e4:e7:e1:76:3d:34:02:8e:00:
28:84:47:df:d4:f5:d5:5a:4e:84:09:de:04:38:76:3d:f3:4c:
fc:c3:bc:2f:0a:37:93:d9:5e:ee:13:c4:44:51:fc:56:ee:16:
ce:72:66:76:f8:60:13:19:c6:ee:95:a7:cc:9a:10:c4:9e:5b:
17:ae:25:6d:ae:27:dc:45:bd:e2:b5:e4:c9:94:12:e1:cf:8d:
c7:21:a5:4d:03:85:20:5c:14:de:88:5a:32:55:b1:36:01:51:
6b:a8:91:3c:52:25:15:bf:96:85:83:4f:2e:f5:42:12:9c:b6:
8a:d9:dd:79:4e:db:82:0e:47:70:22:ab:d1:36:9e:86:ca:dc:
39:47:a3:d9:92:ef:10:c6:aa:2e:0b:c1:e3:be:9a:d1:55:ff:
3f:b4:55:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:08 2025 by rpki-client