Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/FFB77080B4C411F0B753E586DAE4EC9C.roa
File: FFB77080B4C411F0B753E586DAE4EC9C.roa (raw, json)
Hash identifier: wg3JwuDVSQejTto/9mkXyfwhYSQy1FeZB58JMG4S9jU=
Subject key identifier: 47:7F:AA:BA:71:D8:ED:42:AC:7F:FE:56:67:D1:35:A0:FF:29:79:07
Certificate issuer: /CN=F364111CAF/serialNumber=10CF938AC2D7BBEA275DA358B574A9C36C00941F
Certificate serial: 02
Authority key identifier: 10:CF:93:8A:C2:D7:BB:EA:27:5D:A3:58:B5:74:A9:C3:6C:00:94:1F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/FFB77080B4C411F0B753E586DAE4EC9C.roa
Signing time: Wed 29 Oct 2025 12:44:25 +0000
ROA not before: Wed 29 Oct 2025 12:44:20 +0000
ROA not after: Mon 29 Oct 2035 12:44:20 +0000
asID: 60171
IP address blocks: 102.204.52.0/22 maxlen: 24
2c0f:7cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft
rsync://rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364111CAF, serialNumber=10CF938AC2D7BBEA275DA358B574A9C36C00941F
Validity
Not Before: Oct 29 12:44:20 2025 GMT
Not After : Oct 29 12:44:20 2035 GMT
Subject: CN=69020c29-9043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:39:d5:5d:cb:6d:17:9f:fa:bb:2b:0b:7f:
cf:77:a8:69:b2:b1:9c:d7:c5:29:12:50:86:0c:38:
71:0e:ff:28:0e:d3:42:dd:1a:83:84:b1:2a:2e:8d:
e4:7a:96:fc:05:83:8e:c6:5d:87:b2:f3:7b:b3:b8:
6a:6d:27:19:db:6e:c4:12:3c:70:b5:5f:52:d4:c5:
91:a9:27:36:3b:4a:eb:5a:25:9f:ff:42:3e:18:7e:
8e:7f:d0:bd:39:9b:92:b8:66:51:1b:e3:f9:8c:88:
4c:0c:c9:75:70:b8:ae:67:03:71:ec:00:09:df:d9:
a2:74:d9:9f:42:3e:af:5f:64:61:f2:0e:f7:85:ca:
b9:e6:57:3b:10:80:64:c2:1f:06:50:d3:2a:b3:6b:
3c:40:13:7d:26:96:ef:10:d6:e5:55:f0:74:51:2a:
a4:09:ac:5a:ad:18:23:5c:07:72:54:fe:3e:ba:00:
b6:9b:bd:b2:6a:47:36:20:bf:ba:ba:ca:d5:1a:f0:
f4:45:6a:5c:aa:1f:cf:15:f6:7f:55:6a:d8:a4:88:
19:65:bb:32:3c:2f:7e:d9:8a:49:35:fb:5d:38:bb:
f1:a7:e0:b2:fc:47:31:c5:58:7b:b4:55:e3:8f:ae:
91:e0:2d:58:a8:0c:d6:41:b1:cf:9b:dd:7b:6c:d6:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:AA:BA:71:D8:ED:42:AC:7F:FE:56:67:D1:35:A0:FF:29:79:07
X509v3 Authority Key Identifier:
keyid:10:CF:93:8A:C2:D7:BB:EA:27:5D:A3:58:B5:74:A9:C3:6C:00:94:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/FFB77080B4C411F0B753E586DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.204.52.0/22
IPv6:
2c0f:7cc0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:71:2a:3c:ea:cb:75:25:99:85:72:13:8b:9a:cf:98:2a:20:
a0:e8:d1:7b:76:30:f2:3b:69:5e:65:a5:79:50:54:0c:88:0f:
92:85:ec:38:e9:30:9e:60:62:c8:1e:a9:08:23:e7:c5:d0:24:
90:66:f2:85:9d:72:c0:b6:3e:86:9a:94:49:7f:46:d1:f1:fa:
45:33:f0:0f:7f:b4:48:a9:54:f4:f3:01:20:3e:a6:ed:71:76:
0c:fe:f7:21:15:21:fb:c1:0d:11:6c:b3:4a:52:dc:99:c9:15:
80:79:95:3f:7a:85:b3:07:76:03:af:0c:10:3c:2d:0a:a0:44:
1e:4e:bc:7e:63:50:de:77:93:04:35:a2:6b:31:5e:3b:6e:6c:
fe:77:fd:e5:91:fe:95:53:66:a5:a8:f2:4d:79:29:c5:c7:e2:
b3:0d:f1:1a:13:9a:cc:0e:67:5b:f7:30:38:43:d5:af:87:ad:
f3:33:bf:73:8e:bb:11:0b:ed:ef:19:d3:e0:1a:bd:cd:7d:13:
43:8b:ce:cf:71:97:0f:77:e4:6a:a1:c8:90:a8:cf:bb:9e:8f:
81:46:fc:f3:39:31:91:9c:02:cd:e9:c6:27:45:bc:e3:09:a5:
38:d5:85:a0:28:5e:94:09:db:a2:cf:fa:9c:c1:18:98:68:81:
55:5e:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:06 2025 by rpki-client