Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/ADE00A565D6211F098A518CBDAE4EC9C.roa
File: ADE00A565D6211F098A518CBDAE4EC9C.roa (raw, json)
Hash identifier: jpOBdkhBjVVYI3nmszZNhPcIYkBWvx4dgsFhzZiXUPs=
Subject key identifier: 01:DB:47:6E:31:55:67:7C:3E:CC:48:AE:44:25:A1:AE:7C:D6:CE:7B
Certificate issuer: /CN=F361B707AF/serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Certificate serial: 07
Authority key identifier: 03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/ADE00A565D6211F098A518CBDAE4EC9C.roa
Signing time: Thu 10 Jul 2025 07:51:26 +0000
ROA not before: Thu 10 Jul 2025 07:51:21 +0000
ROA not after: Wed 10 Jul 2030 07:51:21 +0000
asID: 37604
IP address blocks: 102.207.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B707AF, serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Validity
Not Before: Jul 10 07:51:21 2025 GMT
Not After : Jul 10 07:51:21 2030 GMT
Subject: CN=686f70fe-5a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:ab:17:0b:1f:66:30:37:1e:aa:80:0f:58:
a5:88:0d:0e:5f:22:09:45:5b:2d:f4:10:a7:11:99:
47:2b:61:c3:d1:e8:5b:dd:f9:b9:7d:c4:74:21:cb:
4e:c1:4d:ff:9c:e1:ca:c3:ad:81:6d:ec:7f:eb:8e:
f6:7a:00:8a:36:10:7f:aa:32:b5:54:8f:89:22:29:
55:18:ed:7f:29:27:0f:e0:b5:88:2a:16:d9:38:db:
c5:56:40:80:c4:ad:52:a9:05:54:ff:d8:8f:d7:2f:
67:b4:a9:57:a7:da:16:be:1c:9d:25:34:d8:3d:b9:
4c:8e:3a:01:75:ee:30:eb:32:1d:40:38:5f:60:fb:
85:f5:ab:4e:b7:d6:1e:9b:15:f6:60:e8:33:cb:d1:
58:a6:4c:35:e3:c0:74:55:a7:9b:01:86:d2:f2:0c:
d7:08:b3:4e:49:45:59:b0:6d:35:b2:e9:ad:22:be:
68:29:8d:6c:76:6b:5f:35:46:aa:3b:04:ac:3d:d1:
f9:bb:32:a2:4f:ec:a4:a0:61:87:6e:e8:84:c3:79:
8c:e0:a1:89:27:14:d3:df:0d:ac:8f:49:8d:a0:90:
27:d8:c5:fe:ad:9a:09:98:cb:db:5e:40:18:6e:8d:
df:af:4c:f4:92:d8:d8:c7:33:0e:21:28:41:14:fb:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:47:6E:31:55:67:7C:3E:CC:48:AE:44:25:A1:AE:7C:D6:CE:7B
X509v3 Authority Key Identifier:
keyid:03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/ADE00A565D6211F098A518CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.236.0/22
Signature Algorithm: sha256WithRSAEncryption
03:87:47:05:28:88:40:9c:ce:51:b2:d1:5e:16:44:ea:12:cd:
c3:79:3e:58:db:94:ad:02:f9:04:87:3d:60:c3:08:be:53:85:
c6:bc:d3:2b:a0:7f:7a:06:10:07:45:a2:20:ef:34:09:af:84:
76:b6:85:2b:34:fb:ed:ff:bb:27:33:c2:17:93:17:a4:e0:a5:
b8:54:07:6a:ee:83:07:ba:f7:7e:d3:06:34:55:79:ff:ea:86:
68:f7:01:5f:cc:85:e3:4a:ba:80:58:ce:2a:a8:96:cc:95:15:
1c:78:cb:48:08:e7:97:62:9a:9d:78:e8:bd:36:80:06:ea:5c:
70:75:9e:c4:b1:1d:fa:82:15:08:ab:0e:77:09:c9:17:28:fd:
d7:08:99:22:dd:bf:ec:f0:a7:38:5b:65:ee:cf:d5:17:3a:4a:
b3:22:75:44:92:25:4c:cd:bc:fc:57:a2:16:9c:ab:05:80:60:
f1:65:75:d0:29:0e:b0:42:6f:e6:fb:69:d7:be:2f:2b:cd:29:
1d:27:25:49:79:b6:bf:7b:88:67:73:1c:05:ed:4f:e6:9a:b7:
cf:86:55:e7:35:bb:02:2e:ef:2c:44:2b:54:fc:45:51:9e:ed:
96:8c:9a:73:73:ba:6e:15:66:bb:6f:a3:ef:3a:98:a3:96:ab:
b3:d3:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:14 2025 by rpki-client