Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BC9C52986C5811F099231397DAE4EC9C.roa
File: BC9C52986C5811F099231397DAE4EC9C.roa (raw, json)
Hash identifier: HouG8yLobXovUgqovzMNrrKkzd8yvO2tiqmIiHxJg5I=
Subject key identifier: 3C:77:31:CA:56:EE:AA:AA:4E:6C:7C:1B:CC:41:56:B4:7A:E6:88:E6
Certificate issuer: /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial: 06DD
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BC9C52986C5811F099231397DAE4EC9C.roa
Signing time: Tue 29 Jul 2025 08:48:03 +0000
ROA not before: Tue 29 Jul 2025 08:47:57 +0000
ROA not after: Mon 29 Jul 2030 08:47:57 +0000
asID: 399073
IP address blocks: 102.217.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Validity
Not Before: Jul 29 08:47:57 2025 GMT
Not After : Jul 29 08:47:57 2030 GMT
Subject: CN=68888ac3-3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:06:55:5d:a1:28:13:7f:df:2d:5c:a3:f4:
65:f6:f5:b1:69:19:36:ab:7d:cb:40:4b:f2:fe:ef:
5f:05:5d:ad:d4:cd:0b:c1:4b:ee:1f:68:c8:7c:09:
1e:33:ba:ed:b3:e5:40:71:dd:ca:bc:e2:a9:2a:60:
e8:33:44:f6:31:d8:bd:69:ed:01:4e:8d:19:90:6a:
43:e3:78:a4:dc:4a:e8:ea:58:8e:70:ad:89:50:e3:
b0:e3:44:f6:44:98:b1:bb:f0:fe:02:7e:e7:5e:a5:
91:3e:fc:e0:19:ee:44:66:c1:7b:9e:0a:e2:69:13:
6e:7b:71:93:df:66:0e:b3:c4:71:7d:0a:38:8c:05:
e2:cf:65:93:f7:f9:3c:79:3c:20:2d:f7:89:4c:32:
da:6f:56:62:30:f6:34:a3:92:4a:38:3a:88:f9:b7:
2c:13:63:bd:15:31:83:ff:34:13:51:a2:de:56:a1:
3a:79:82:e1:39:27:90:04:76:7b:8c:9c:0b:17:88:
fb:e8:0a:d3:ea:52:38:62:6b:83:26:35:a6:55:70:
a9:1f:9a:76:68:9e:9c:fd:d0:83:2e:e3:66:6a:2b:
53:85:db:fc:e0:e8:29:b0:8c:77:6c:27:65:e5:e3:
1b:00:ef:67:a9:17:7f:40:ad:36:0b:d8:11:1a:5a:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:31:CA:56:EE:AA:AA:4E:6C:7C:1B:CC:41:56:B4:7A:E6:88:E6
X509v3 Authority Key Identifier:
keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/BC9C52986C5811F099231397DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.104.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7e:56:98:78:d4:19:f2:25:d0:34:46:72:a3:57:10:9f:95:
f8:45:56:eb:7b:8f:a4:1d:90:08:7f:e6:c5:d3:93:95:db:55:
ee:3a:ef:88:b7:ea:b3:d7:b7:7a:18:b9:33:09:c5:d0:83:37:
03:c9:8b:13:a2:2e:a7:9e:48:31:e0:9c:85:91:e5:b9:d8:f6:
7c:15:69:42:e8:cd:b4:17:36:4e:99:ee:43:94:1e:05:24:5a:
2b:b1:09:33:e5:1f:c7:76:27:05:69:b4:e8:c7:ea:d4:6b:9a:
52:6e:e0:9e:c6:37:22:50:c5:37:4a:92:20:bc:8c:49:9f:05:
f1:50:be:84:62:b0:71:57:b6:b9:08:9d:1c:49:04:24:d3:af:
95:62:42:e6:35:63:82:9e:40:05:c8:5a:8b:e4:72:64:bf:2f:
53:bf:1b:a9:6e:f3:54:18:1d:dd:02:2f:17:cc:eb:08:bc:bc:
51:fa:a8:9c:1e:e8:b1:5b:8d:fc:ee:29:95:52:8e:80:cf:5c:
02:05:37:c0:6f:7e:12:43:9e:d3:64:0d:16:d3:ce:29:bc:8a:
40:d8:94:4d:26:5e:1d:28:e4:02:61:2d:21:09:cd:a7:c2:be:
92:06:7f:a3:75:85:7a:cf:a2:8c:65:c0:f1:94:f7:71:cc:4f:
f3:fb:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:02 2025 by rpki-client