Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/845849AA629911F094123B7FDAE4EC9C.roa
File: 845849AA629911F094123B7FDAE4EC9C.roa (raw, json)
Hash identifier: Yquy7lg+89nLssAsEAQYTmSrAV7dfqopFLqC+l9lG4Q=
Subject key identifier: 68:2C:AE:B1:AA:33:4F:5E:6C:66:7E:94:76:3E:6D:74:4D:B7:BE:E8
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 1A
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/845849AA629911F094123B7FDAE4EC9C.roa
Signing time: Wed 16 Jul 2025 23:06:34 +0000
ROA not before: Thu 17 Jul 2025 23:06:29 +0000
ROA not after: Fri 17 Jul 2026 23:06:29 +0000
asID: 329532
IP address blocks: 102.205.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 05:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Jul 17 23:06:29 2025 GMT
Not After : Jul 17 23:06:29 2026 GMT
Subject: CN=6878307a-09e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:ab:58:9f:f9:e2:a2:3c:9e:4a:76:b0:08:
03:c3:e5:59:80:04:57:ca:bd:4d:1d:7b:a3:16:b7:
1c:87:65:11:fa:ca:61:75:14:38:22:92:fa:7c:39:
a2:1a:0a:1b:c7:20:4d:8d:b0:b4:b9:5b:ce:3b:65:
c5:18:16:82:63:07:e0:c3:3b:81:d5:8f:b5:c4:eb:
12:6d:e4:df:da:84:71:78:59:ed:8a:c1:87:71:c2:
2d:61:0e:59:d0:f2:dd:a5:20:47:c6:73:5a:ee:23:
3a:51:36:f8:18:ff:73:c6:8b:dd:ee:10:68:a9:6b:
65:85:1e:fa:64:64:c0:c5:17:cd:d9:c8:45:21:0a:
3c:f4:85:1e:2c:8e:10:d4:03:0f:84:ef:41:d9:28:
64:13:bd:04:83:aa:dd:c8:72:4e:4c:b9:68:51:7e:
02:86:de:d7:aa:3d:94:b6:37:30:c4:88:c8:f7:28:
c9:ce:4a:86:af:f9:0b:d1:a9:c7:5d:eb:d9:7d:1e:
6e:b7:99:44:0d:aa:bf:23:e5:25:b7:71:b6:af:f4:
56:ea:a4:4e:c4:0c:1d:4a:2a:3a:57:bb:dc:ed:74:
74:8f:53:68:f1:dd:66:f2:a3:ba:16:55:d7:3c:a9:
73:6c:3b:20:2d:1b:c0:24:bb:68:91:e6:db:90:3b:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:AE:B1:AA:33:4F:5E:6C:66:7E:94:76:3E:6D:74:4D:B7:BE:E8
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/845849AA629911F094123B7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.242.0/23
Signature Algorithm: sha256WithRSAEncryption
67:53:be:5d:c4:b4:74:f1:e3:02:35:75:9b:61:a7:b2:69:e4:
5c:b8:1b:33:10:bf:f3:85:2c:92:e9:34:40:dd:0c:27:0f:d2:
b3:c0:73:5d:fe:08:83:ce:9c:a9:64:45:55:f6:62:e2:42:75:
2e:b0:e9:d6:47:7c:c2:b4:2a:38:b0:c7:64:e8:34:4e:51:af:
8d:63:e4:8f:04:5f:47:2c:84:e4:2e:7d:34:4e:20:da:a8:02:
0f:8c:ab:a8:43:86:b4:16:87:50:e5:f7:d0:d0:f0:0f:00:55:
7f:bd:99:65:01:ed:e0:27:0c:ab:2e:48:33:cd:54:dd:45:83:
d1:03:5c:22:36:32:f1:a3:b0:4e:7a:16:d9:ab:5b:f0:50:33:
ef:8c:63:32:75:e8:a9:21:7a:6f:0c:65:68:da:52:58:5e:08:
41:eb:3c:55:7a:07:d6:65:04:46:a2:05:16:4b:d3:70:e3:fd:
5b:7d:fc:2a:ce:e6:3f:3e:a9:8c:80:9e:a2:81:b5:67:7b:e9:
81:82:04:46:a3:ef:ca:78:70:12:7d:2f:b8:79:51:7f:d5:fa:
c4:12:78:ad:27:d5:38:22:41:ed:44:0f:50:9d:ad:43:59:97:
c4:66:d8:67:93:13:9e:e1:81:b5:03:f1:bf:d6:99:ef:75:58:
fd:8b:89:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:07 2025 by rpki-client