
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/0CA767AC70A811F0896F719EDAE4EC9C.roa
File: 0CA767AC70A811F0896F719EDAE4EC9C.roa (raw, json)
Hash identifier: SP0RSUZ6bVUNGUKHrurAD/wGVrwxMlkmsVFklO79tfM=
Subject key identifier: 11:E4:71:AD:61:39:47:F9:16:B9:0C:EC:E1:75:72:C7:01:BF:CB:5B
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0747
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/0CA767AC70A811F0896F719EDAE4EC9C.roa
Signing time: Sun 03 Aug 2025 20:25:52 +0000
ROA not before: Sun 03 Aug 2025 20:25:47 +0000
ROA not after: Sat 30 Aug 2025 20:25:47 +0000
asID: 23470
IP address blocks: 102.177.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 02:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 3 20:25:47 2025 GMT
Not After : Aug 30 20:25:47 2025 GMT
Subject: CN=688fc5d0-4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:87:e9:40:6a:2e:54:1e:23:61:26:ee:68:
57:a2:80:76:8d:c9:90:95:21:26:17:e4:f0:10:0c:
56:f2:34:48:e1:28:cf:f3:06:93:c9:e0:be:a7:6d:
69:8e:18:f1:bc:60:3f:26:29:61:30:b7:14:45:b0:
4f:a4:48:98:a2:1c:06:0c:d1:bf:28:5d:fe:1a:67:
dc:c8:bd:8b:8a:55:64:91:31:57:c1:72:ac:1b:98:
9a:7d:a3:5b:6d:15:09:9a:be:96:82:90:42:3f:75:
23:1e:31:87:66:01:e2:33:35:39:ea:fa:1e:84:da:
5b:7d:b3:e2:de:5e:7c:17:26:b4:6f:31:c2:77:98:
c8:03:00:eb:57:26:1c:62:a9:36:9c:3f:a1:f6:49:
72:1f:c3:74:b7:bc:d9:e2:a6:8f:05:2b:75:a8:9f:
92:aa:c0:56:cb:43:86:fc:b7:0c:05:5f:e7:95:e5:
5f:bc:b1:1b:85:f7:13:61:58:88:7b:0e:f0:37:d8:
20:65:f3:0a:9e:47:d4:e7:53:a2:da:d4:64:45:ff:
34:29:a4:f3:6b:03:3b:7e:ae:2a:83:70:76:8c:77:
84:88:d2:9b:9e:aa:64:2c:0a:ba:c8:0a:18:92:27:
2e:aa:0c:37:67:72:d1:5c:96:27:f3:74:9c:9b:71:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:71:AD:61:39:47:F9:16:B9:0C:EC:E1:75:72:C7:01:BF:CB:5B
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/0CA767AC70A811F0896F719EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.181.0/24
Signature Algorithm: sha256WithRSAEncryption
46:12:17:0d:f0:58:8b:30:d4:65:6d:6f:ed:05:54:93:ac:72:
60:90:0c:81:be:28:e0:d4:d8:47:cc:78:48:6b:7a:33:c6:81:
2f:a3:97:d9:2f:70:1e:db:54:ce:ae:b4:f9:92:b7:72:61:28:
42:c1:66:a0:56:c0:ff:33:96:bc:a2:9a:5e:cb:3b:90:64:5d:
03:b8:b3:0f:93:fb:fa:87:14:3a:16:59:c4:fc:bd:65:f2:30:
cf:91:d9:5f:b6:ce:ed:49:0e:37:f0:22:03:73:7d:71:0c:ab:
63:0f:19:21:6c:29:6f:9f:12:a2:e8:0a:d5:38:16:a2:b7:c5:
69:45:7e:73:29:30:83:9b:d6:39:e2:31:1e:33:10:78:1d:fd:
9b:67:82:6b:60:f6:ae:8b:5f:cd:be:a7:d5:77:b6:c4:56:12:
7a:82:f8:30:bf:22:21:22:dc:80:62:28:13:93:76:52:c5:20:
3d:a5:5d:c4:c1:f8:c2:be:ea:be:d6:b3:34:ee:da:93:61:8b:
a6:35:70:62:1c:72:2b:0b:b0:4c:13:eb:3c:a9:cb:2e:bf:5c:
3b:5e:a1:40:63:31:15:91:35:47:08:b3:4a:9a:8e:79:71:e4:
10:b4:9b:50:70:5f:19:eb:73:0a:0f:57:c6:5f:fd:53:24:70:
42:4a:7a:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTA4MDMyMDI1NDdaFw0yNTA4MzAyMDI1NDdaMBgxFjAU
BgNVBAMTDTY4OGZjNWQwLTQwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZRYfpQGouVB4jYSbuaFeigHaNyZCVISYX5PAQDFbyNEjhKM/zBpPJ4L6n
bWmOGPG8YD8mKWEwtxRFsE+kSJiiHAYM0b8oXf4aZ9zIvYuKVWSRMVfBcqwbmJp9
o1ttFQmavpaCkEI/dSMeMYdmAeIzNTnq+h6E2lt9s+LeXnwXJrRvMcJ3mMgDAOtX
JhxiqTacP6H2SXIfw3S3vNnipo8FK3Won5KqwFbLQ4b8twwFX+eV5V+8sRuF9xNh
WIh7DvA32CBl8wqeR9TnU6La1GRF/zQppPNrAzt+riqDcHaMd4SI0pueqmQsCrrI
ChiSJy6qDDdnctFclifzdJybcfgXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEeRx
rWE5R/kWuQzs4XVyxwG/y1swHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzBDQTc2N0FDNzBBODExRjA4OTZGNzE5RURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbUwDQYJKoZIhvcNAQEL
BQADggEBAEYSFw3wWIsw1GVtb+0FVJOscmCQDIG+KODU2EfMeEhrejPGgS+jl9kv
cB7bVM6utPmSt3JhKELBZqBWwP8zlryiml7LO5BkXQO4sw+T+/qHFDoWWcT8vWXy
MM+R2V+2zu1JDjfwIgNzfXEMq2MPGSFsKW+fEqLoCtU4FqK3xWlFfnMpMIOb1jni
MR4zEHgd/Ztngmtg9q6LX82+p9V3tsRWEnqC+DC/IiEi3IBiKBOTdlLFID2lXcTB
+MK+6r7WszTu2pNhi6Y1cGIccisLsEwT6zypyy6/XDteoUBjMRWRNUcIs0qajnlx
5BC0m1BwXxnrcwoPV8Zf/VMkcEJKehc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:21:23 2025 by rpki-client