Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8EC0956E70A411F094929688DAE4EC9C.roa
File: 8EC0956E70A411F094929688DAE4EC9C.roa (raw, json)
Hash identifier: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=
Subject key identifier: AF:F3:0D:6E:15:78:F5:D0:D0:B5:88:1B:D8:CE:06:18:C0:44:1B:B0
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 073F
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8EC0956E70A411F094929688DAE4EC9C.roa
Signing time: Sun 03 Aug 2025 20:00:52 +0000
ROA not before: Sun 03 Aug 2025 20:00:48 +0000
ROA not after: Wed 22 Apr 2026 20:00:48 +0000
asID: 21859
IP address blocks: 102.177.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 3 20:00:48 2025 GMT
Not After : Apr 22 20:00:48 2026 GMT
Subject: CN=688fbff4-891b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:b5:1b:a3:9a:7f:91:fc:31:d6:67:08:f7:
d7:91:4e:62:b2:18:58:2f:6d:f9:0f:cb:2f:89:08:
5e:f0:eb:a4:f9:5c:9e:d5:2f:a2:40:60:1f:7f:2b:
14:0a:f1:79:12:64:db:84:25:55:ca:a0:c8:36:b9:
26:81:35:43:2c:8c:9d:45:eb:2c:88:fe:27:ca:2e:
1c:6d:99:fd:16:aa:47:8e:43:b7:13:a2:4c:eb:3a:
01:48:4b:e2:6e:2f:5d:ee:0c:84:0c:6a:f6:95:1c:
be:3b:6d:2f:27:66:35:12:d5:06:b5:b3:99:6b:90:
f4:6b:d0:3b:96:62:4c:3c:1b:33:76:20:47:b2:17:
5f:28:ae:aa:ef:cb:fd:b0:21:00:bf:2f:0c:5d:d1:
7d:ac:7e:70:a9:0f:ba:ef:4d:96:99:34:ab:d3:0f:
58:c0:60:0b:b0:30:a8:ce:05:3c:2a:93:c9:86:78:
86:ee:81:25:37:c7:43:fe:7b:cd:49:55:61:17:ab:
6f:c0:53:bb:23:1e:93:96:e4:b5:a6:fe:e6:25:22:
b2:06:86:e9:67:23:38:49:4e:83:75:44:c5:83:bd:
58:11:b1:2e:c4:d7:aa:04:a2:ad:be:64:79:fc:d3:
98:8c:95:c2:dc:7a:0c:95:af:c8:de:b4:7e:a7:eb:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:0D:6E:15:78:F5:D0:D0:B5:88:1B:D8:CE:06:18:C0:44:1B:B0
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8EC0956E70A411F094929688DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:73:a9:9e:5a:bb:fb:85:c6:4c:80:17:57:c6:1a:52:b9:f8:
aa:c6:b2:27:59:3b:89:fb:45:e3:96:d3:84:64:25:bd:fe:8e:
e8:54:4e:5c:23:c8:b9:0d:13:9e:3a:90:32:31:46:dc:f7:c2:
0c:8f:e1:04:70:c3:eb:de:f5:3b:46:c9:bd:87:c7:86:e6:dc:
53:21:81:87:bd:de:3e:a3:32:f7:18:4a:e9:ea:ef:44:84:5c:
36:16:06:5a:07:9e:7f:7e:35:d1:e5:d8:b9:74:8b:9a:a4:28:
1b:4c:da:b2:85:88:23:73:8c:3b:84:40:e4:44:e5:86:a4:51:
33:d0:6c:ae:6f:b4:03:17:ed:3e:36:05:bb:0d:c0:9d:fa:ab:
79:e1:c6:fb:d1:a7:c5:fa:1d:ce:52:cf:a5:dd:62:26:a4:c8:
2e:e6:91:f6:67:51:cb:9c:e0:64:95:fb:5b:e7:e7:b5:a3:4a:
ec:64:79:c4:c5:b0:aa:e0:99:16:14:b8:b5:fe:27:0a:06:42:
52:c3:0f:42:3f:94:52:6c:89:ff:32:06:f2:93:c3:c4:52:fd:
cf:96:8f:35:e8:6b:a7:f4:7d:2a:43:a4:12:8c:54:9e:b3:b7:
4a:f7:2b:39:85:c4:cb:9d:2a:03:c2:70:2f:aa:15:fa:6b:b3:
42:99:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:39:33 2025 by rpki-client