Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/40BD1AEA710811F0BBFCC79FDAE4EC9C.roa
File: 40BD1AEA710811F0BBFCC79FDAE4EC9C.roa (raw, json)
Hash identifier: 0kr/kH4+wxBld2vJuwRH1Iwyn6s6iUt+vPvZo3OMSa4=
Subject key identifier: E2:C5:00:36:1D:24:FE:58:01:A2:79:AF:0F:4E:44:D8:02:C3:33:22
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 074E
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/40BD1AEA710811F0BBFCC79FDAE4EC9C.roa
Signing time: Mon 04 Aug 2025 07:54:31 +0000
ROA not before: Mon 04 Aug 2025 07:54:26 +0000
ROA not after: Thu 28 Aug 2025 07:54:26 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 02:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 4 07:54:26 2025 GMT
Not After : Aug 28 07:54:26 2025 GMT
Subject: CN=68906737-af5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:25:07:f6:b3:25:2a:c2:07:a2:9a:07:d1:
2f:1c:fc:82:d1:ee:0d:76:46:85:ca:b4:21:88:dc:
6d:ee:91:c1:ca:bc:1a:59:8f:d9:5b:bb:d2:47:73:
da:2e:75:08:85:e6:d0:da:93:a0:28:d8:72:24:26:
56:bf:f9:c7:f5:56:0a:c2:e8:f7:bf:7b:3c:f3:e2:
4b:48:54:b0:c9:10:ad:95:59:cb:8b:85:c1:0e:43:
30:51:ae:fa:0a:29:1f:2d:38:3f:c4:cf:dd:ec:5f:
3d:b2:6f:a9:f1:77:ef:54:49:bf:a6:3d:2c:8a:09:
ad:c9:63:d9:02:56:61:c2:ad:43:41:e0:12:d8:2b:
d6:51:35:06:a8:8a:6d:9f:55:74:7e:b1:f3:7e:0d:
4e:61:e3:4d:7f:f6:7a:c3:0c:03:1b:c1:d8:47:79:
a0:85:84:83:ea:78:b7:c1:67:55:6f:94:fb:4e:47:
b9:6a:e2:f4:00:a4:38:cc:5a:e2:b2:3e:77:dc:3f:
7c:58:f4:ef:38:e2:e3:98:74:52:fc:93:d5:27:23:
b5:79:8e:16:85:b9:f0:42:a5:9e:e7:c2:42:27:b7:
c4:be:95:8d:df:7f:c6:a3:07:ee:d2:f7:73:59:c8:
ae:e6:aa:eb:19:cf:ba:e2:dc:2c:17:e5:cd:33:a8:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:00:36:1D:24:FE:58:01:A2:79:AF:0F:4E:44:D8:02:C3:33:22
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/40BD1AEA710811F0BBFCC79FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:5c:92:c6:39:f2:47:25:e3:60:65:64:8e:54:45:f2:35:
94:61:d1:98:47:ef:4f:eb:5f:6c:39:c4:19:9d:ac:be:2f:1c:
b4:2e:3a:a6:19:de:ab:b3:c7:da:4c:54:58:9e:39:98:3b:41:
f7:6e:0a:ca:6d:25:6d:c0:6b:d8:06:28:41:b1:73:46:e4:22:
ac:f0:ab:12:02:e6:49:28:20:fc:0e:ef:19:a1:ed:9a:0c:77:
77:85:12:ef:51:a7:87:bc:d0:7f:9e:77:cd:09:0a:f2:23:f6:
0c:16:a3:e3:11:9b:6b:95:ca:5b:3d:06:16:61:06:59:47:38:
7f:6c:1d:4c:9c:95:27:bb:f3:ef:7e:6f:ad:5f:09:cb:c7:4d:
94:4d:0a:b9:c4:76:cf:04:54:d2:4f:4a:e9:ea:8e:9a:2e:c2:
62:1f:fc:0f:62:1c:a2:9f:d9:70:1c:d3:94:7d:53:86:74:37:
6b:fe:f6:cb:8b:1c:ff:72:f3:8d:97:01:b1:9f:64:1c:7c:18:
f1:9b:e3:8f:40:a0:7f:e2:af:c7:4f:03:e0:11:a1:72:4e:ba:
37:df:c5:49:e9:56:8e:b5:51:89:c2:25:e7:92:77:f6:98:20:
65:a7:82:db:db:43:da:ac:60:73:85:be:f2:f0:ad:1d:fc:65:
84:b1:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:46 2025 by rpki-client