Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/AEC64E0AB80511F0971756F5DAE4EC9C.roa
File: AEC64E0AB80511F0971756F5DAE4EC9C.roa (raw, json)
Hash identifier: ykyErqJ9jMFlHt469iZFdc3zrZTDRfcAk+IWnW9xqMk=
Subject key identifier: 21:95:71:5C:98:40:9D:8E:5F:0C:F1:58:A2:D5:9B:31:5D:40:27:7A
Certificate issuer: /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial: 8F
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/AEC64E0AB80511F0971756F5DAE4EC9C.roa
Signing time: Sun 02 Nov 2025 16:05:00 +0000
ROA not before: Sun 02 Nov 2025 16:04:55 +0000
ROA not after: Fri 02 Nov 2029 16:04:55 +0000
asID: 329532
IP address blocks: 102.205.243.0/24 maxlen: 24
2c0f:fc78:5300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Validity
Not Before: Nov 2 16:04:55 2025 GMT
Not After : Nov 2 16:04:55 2029 GMT
Subject: CN=6907812c-fc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:7f:fa:62:13:7f:19:fe:ba:1a:a4:08:e2:
db:bc:19:f3:36:cb:05:14:d5:fe:d8:e4:40:a6:3f:
8c:a8:f7:68:57:8b:5e:e7:2a:88:79:85:bb:46:9a:
9d:8b:51:58:de:0d:e0:df:c5:81:6c:9e:6c:ea:39:
6f:89:92:1f:a5:cd:26:c7:91:47:b3:25:91:c7:3e:
5a:f1:c7:a7:08:07:a7:ae:89:d5:54:15:7b:ac:e1:
58:37:63:ea:c3:6d:38:19:d6:b4:dd:2f:48:ed:bc:
90:89:17:aa:21:66:a9:3d:bf:f7:a8:e4:7d:12:b8:
07:88:d4:e8:17:d6:0e:3a:e0:d7:0f:4e:df:ad:c4:
bb:01:8f:1f:10:e4:ee:a8:e2:47:b4:f3:b0:fe:13:
9c:d4:25:bc:ab:4d:33:de:9e:90:80:bc:5b:b5:4b:
2d:6a:44:55:46:ae:af:2e:fc:8d:be:04:af:9a:55:
4c:2a:72:3c:a6:d7:51:c4:16:c2:28:d8:25:de:73:
b4:68:b4:2f:c8:e9:f9:df:ee:6c:ec:33:f3:4b:2c:
8e:f5:7b:4b:fa:0c:b4:ae:ad:c3:58:d6:84:fd:31:
3a:44:0c:7d:e0:d9:1e:15:75:ef:04:17:05:48:ca:
f7:b0:f4:89:be:d2:f3:b3:cf:92:57:e0:bf:2a:12:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:71:5C:98:40:9D:8E:5F:0C:F1:58:A2:D5:9B:31:5D:40:27:7A
X509v3 Authority Key Identifier:
keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/AEC64E0AB80511F0971756F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.243.0/24
IPv6:
2c0f:fc78:5300::/40
Signature Algorithm: sha256WithRSAEncryption
5d:f0:f0:23:92:1e:eb:cd:34:4b:ce:f8:8f:ef:31:6b:1b:75:
2c:ae:fd:12:97:df:c5:2f:26:b1:8f:44:5d:de:00:e2:ec:62:
aa:8a:d8:53:9d:7c:dc:b1:88:32:64:03:a5:cd:e7:70:7c:60:
6b:46:50:0b:cc:c0:a4:22:fd:dd:3d:95:1c:a9:99:46:45:d9:
e4:b1:44:a6:4b:5d:ae:61:1b:7d:87:b8:dc:de:af:4a:82:11:
ff:ba:ea:7b:05:8e:7a:00:d3:5a:24:66:2f:b5:a4:32:70:2e:
15:74:f5:8c:43:91:13:26:87:cf:d3:20:78:fe:61:23:95:63:
04:58:f1:8b:50:bf:2d:40:ed:59:7d:0d:83:ed:fd:39:60:09:
53:4b:9f:9d:ed:fc:92:8f:d6:b0:a1:27:17:e7:68:5c:b7:e6:
9a:4e:db:9e:24:f4:3c:14:c5:02:cc:c5:42:cd:9a:82:f9:37:
17:0d:23:27:30:96:2b:e4:36:e4:7a:7f:0f:f2:8e:d6:8c:d6:
7e:c5:37:31:47:48:42:d8:dc:a1:05:e4:48:f8:a8:2b:5a:e5:
ce:1c:60:09:32:bf:4b:0a:cc:ab:9f:26:75:a0:ee:db:d6:eb:
eb:7b:74:f0:b7:60:da:8f:a5:2d:88:ad:3f:b8:10:e5:c7:ee:
35:57:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:41:42 2025 by rpki-client