Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ABCE2E56B86F11F0B68F4793DAE4EC9C.roa
File: ABCE2E56B86F11F0B68F4793DAE4EC9C.roa (raw, json)
Hash identifier: ClMtYrIHGgBDKfTGhzNiYXv69ryqz9K5Mq09XRN62n8=
Subject key identifier: 0A:03:15:C2:6D:38:C7:0C:3A:FD:B6:84:28:26:41:00:4E:62:DC:FD
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0805
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ABCE2E56B86F11F0B68F4793DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 04:43:41 +0000
ROA not before: Mon 03 Nov 2025 04:43:35 +0000
ROA not after: Sun 30 Nov 2025 04:43:35 +0000
asID: 397423
IP address blocks: 102.177.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Nov 3 04:43:35 2025 GMT
Not After : Nov 30 04:43:35 2025 GMT
Subject: CN=690832fd-48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:34:00:e7:a8:c8:9f:ff:32:cf:6c:20:71:
42:42:d8:b6:1d:38:d9:8a:af:b2:9d:b7:3e:5d:bd:
b6:14:59:13:47:bf:dd:41:80:18:87:f1:43:4d:5c:
f1:4b:91:6a:c1:60:92:cb:fb:fd:8d:cd:48:ef:1a:
86:22:a8:3b:08:2e:5b:d4:be:51:8b:ba:ce:98:e5:
b2:eb:8e:ec:3b:ba:3b:0d:be:61:dd:12:d0:8e:37:
93:5c:fe:2f:61:d2:5c:40:68:fb:1c:49:fd:fb:91:
c4:14:2d:7e:e4:e7:26:3a:a0:ba:b6:21:ef:de:fd:
86:e6:54:11:23:ac:b3:a4:f7:ff:dc:8c:56:94:ea:
84:12:31:d6:13:24:02:fd:d4:51:4c:44:39:ee:5b:
37:c6:e6:7e:ad:b0:ea:6a:c3:32:31:61:0e:0e:14:
96:63:28:04:bd:cf:ae:13:25:dd:61:e4:c1:6b:48:
8c:fe:05:b8:04:4c:de:2c:d4:da:89:a7:e5:c1:a8:
9e:1e:a1:9b:7c:a0:6f:00:7d:17:96:e7:5f:bd:49:
ad:8d:bd:35:f4:04:27:47:00:20:31:11:82:9e:b2:
83:24:77:f3:44:b6:71:db:8a:36:e2:ad:a5:ff:2f:
bd:9d:b5:7e:2d:dc:70:7a:7e:fc:e5:3e:98:a3:3d:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:15:C2:6D:38:C7:0C:3A:FD:B6:84:28:26:41:00:4E:62:DC:FD
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/ABCE2E56B86F11F0B68F4793DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:10:14:19:f7:a2:61:35:02:8d:9e:a6:8e:a8:47:f0:44:9f:
32:cc:07:ea:21:75:fd:15:5c:98:7f:a8:7f:79:8e:44:e5:7e:
32:8a:c8:54:31:93:92:1a:4a:62:67:fb:c2:9d:d6:2f:1d:e8:
ad:36:05:73:d7:bd:d4:1c:36:b1:d1:aa:9a:45:e7:21:6c:6e:
25:e1:5c:23:e6:1d:06:88:6a:3a:52:dc:1c:4c:4d:17:62:39:
ed:48:77:dc:62:1a:d6:5e:9b:87:16:78:18:1d:c9:3a:94:de:
ff:52:b9:60:8e:fb:75:14:d9:1d:41:37:6a:ba:3b:cc:50:db:
d5:f5:d7:e9:58:c7:06:5f:6f:22:60:2f:90:61:bd:d5:53:7b:
e4:4e:b3:3c:bd:51:88:3d:87:b5:f0:74:19:ea:5d:1d:1c:e7:
2f:a0:39:1d:dc:24:7c:86:55:4c:6b:33:61:23:7d:37:dc:a3:
25:2b:5c:3a:20:0b:2d:77:4e:ea:8f:28:d3:af:fa:2f:ed:53:
62:65:e4:f9:92:43:8a:af:c3:eb:33:5a:96:03:a5:5a:77:82:
0b:3e:e8:03:d3:6a:08:b3:15:d6:4f:e2:9e:c5:e8:71:2c:ae:
e0:2d:2f:9b:8b:db:fc:52:fa:25:35:a3:e0:b6:80:83:5f:2b:
d9:6e:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:28 2025 by rpki-client