Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FC379478B04911F08F12ABD4DAE4EC9C.roa
File: FC379478B04911F08F12ABD4DAE4EC9C.roa (raw, json)
Hash identifier: HPTPAfeoCUUy1JZEM95ATSB6VqxNMxcDanxnQwXbtL0=
Subject key identifier: F1:BE:5B:42:2D:21:1E:83:0F:46:F4:E9:37:7C:D5:F8:A8:EE:5A:4B
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 07F3
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FC379478B04911F08F12ABD4DAE4EC9C.roa
Signing time: Thu 23 Oct 2025 19:53:46 +0000
ROA not before: Thu 23 Oct 2025 19:53:42 +0000
ROA not after: Sun 30 Nov 2025 19:53:42 +0000
asID: 22724
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 23 19:53:42 2025 GMT
Not After : Nov 30 19:53:42 2025 GMT
Subject: CN=68fa87ca-c71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:54:6c:77:36:23:b1:46:04:19:4c:49:b5:
0b:9d:2e:94:e7:2a:90:84:05:24:47:3f:56:ef:3b:
e8:5a:d8:b9:cd:7e:47:88:d1:93:e6:92:3d:4e:48:
96:38:4f:ef:1d:ac:7e:f8:d2:e8:c8:c0:63:8f:9a:
b8:41:b8:59:f9:41:88:32:99:9f:53:20:0b:a7:7c:
0d:51:15:9e:0c:7b:96:53:70:7e:2f:09:b3:b3:b2:
ce:6d:c1:87:49:ce:2e:b9:b3:73:9c:f7:15:dd:4b:
21:7f:c8:bf:c6:a6:16:ff:75:dd:40:76:5d:4d:97:
fb:df:c5:fa:50:23:64:4a:e1:84:f5:1f:80:6e:54:
ad:18:6d:c2:61:0a:af:2e:de:b2:2b:b4:96:bb:09:
a2:09:90:a1:0a:4f:e8:97:91:33:68:49:c5:8f:d0:
57:82:f8:46:71:b6:6a:b6:6f:fa:d0:a5:cc:e7:d2:
00:04:ae:fa:1a:f4:e3:05:30:fa:b0:2b:43:3c:55:
ab:c3:3d:67:8b:80:7f:78:36:25:fa:01:ae:91:1f:
a9:c6:a1:f8:d9:aa:fb:32:52:b1:1b:bf:8f:be:8f:
60:7b:2f:3d:2e:1a:6e:d1:46:e2:95:74:96:b1:99:
c8:02:db:70:36:a9:aa:ec:9c:07:d9:e5:dc:63:f3:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BE:5B:42:2D:21:1E:83:0F:46:F4:E9:37:7C:D5:F8:A8:EE:5A:4B
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/FC379478B04911F08F12ABD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6c:d3:24:aa:cf:d7:b0:5d:dc:dd:60:29:d5:4a:94:83:eb:
6b:78:03:31:6b:3c:4d:ad:e6:16:17:cc:81:d5:2f:b4:a3:b6:
87:4c:3b:f6:67:b1:02:d9:84:d0:be:74:00:ca:c8:15:9f:16:
be:28:22:98:46:08:40:56:2a:db:6d:bf:fb:a1:ee:be:5e:c2:
03:8d:52:ca:f9:54:31:0e:16:49:f2:61:80:cf:04:96:73:00:
5d:ab:63:98:f9:b4:a0:66:35:23:ff:8d:9e:b1:4d:8d:ff:cc:
8a:d3:9a:fd:a0:6c:4a:00:19:47:8c:9e:f5:05:9b:73:1b:91:
d1:4f:52:e4:ce:27:85:4e:f6:75:50:49:0b:da:ff:7b:1c:87:
6c:83:6e:0a:c8:83:66:c2:c3:bb:84:08:b0:5e:28:60:c3:97:
b9:cb:d2:ff:e9:0f:fe:95:0d:6f:59:3f:c4:3b:14:7c:1d:ef:
b1:ae:57:c0:06:fb:58:4a:0f:ef:03:9d:22:fc:bb:ef:be:3c:
49:3e:d7:31:c2:f1:4a:15:f4:c0:8a:5a:4d:58:ab:d8:42:16:
71:c0:93:5e:2e:e7:4c:6a:1e:5d:8b:2b:97:95:a6:de:66:d9:
82:93:fe:cf:71:53:af:f8:2b:8e:5f:88:18:d8:a2:b5:d4:82:
95:da:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:06:22 2025 by rpki-client