Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA1A054C9D1611F09AE7B0D1DAE4EC9C.roa
File: DA1A054C9D1611F09AE7B0D1DAE4EC9C.roa (raw, json)
Hash identifier: eR56hWkhA0MrQhrAUxWTnHNf/MAucls0KlipKWDI75I=
Subject key identifier: 5D:62:3B:59:8C:E6:9F:C2:DB:67:6C:E9:16:F9:2F:09:C9:73:25:FF
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1607
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA1A054C9D1611F09AE7B0D1DAE4EC9C.roa
Signing time: Mon 29 Sep 2025 09:29:53 +0000
ROA not before: Mon 29 Sep 2025 09:29:48 +0000
ROA not after: Wed 29 Sep 2027 09:29:48 +0000
asID: 154049
IP address blocks: 102.129.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Oct 2025 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5639 (0x1607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 29 09:29:48 2025 GMT
Not After : Sep 29 09:29:48 2027 GMT
Subject: CN=68da5190-74df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:54:aa:70:17:6a:ef:17:93:b4:28:75:5d:
d0:61:bc:39:db:3c:f8:55:f6:bd:34:26:de:72:6d:
a6:c5:0b:97:04:bb:8e:dd:bf:22:0c:6c:09:c9:b0:
3f:dc:e1:96:e8:07:c3:a6:0b:f6:ef:ef:7f:cf:e4:
c8:18:ba:c2:64:07:21:f0:ed:0f:90:94:65:3a:40:
0d:7b:52:f7:db:e1:f8:a3:02:ef:ed:70:be:66:30:
07:0e:78:6e:9d:60:1f:8f:79:e3:b5:88:1c:bc:bd:
07:33:e2:b3:18:ff:a2:6c:03:e5:1d:5f:68:81:d5:
d5:b2:60:04:fe:d0:72:68:7b:e9:94:cd:ef:16:26:
c6:39:62:70:ae:78:a4:2d:a1:5e:f4:00:54:ff:a6:
a5:d2:9f:72:7d:4f:bc:0e:6b:9a:b2:6b:74:94:68:
b3:0c:18:87:15:3e:12:7e:79:a6:7d:1c:53:77:ef:
4b:53:af:7b:3d:63:99:59:cb:0b:2a:91:76:ed:8d:
8f:d0:75:07:6d:a7:df:7e:0f:1d:a0:7c:73:a0:65:
90:56:0a:83:39:1b:13:c5:eb:d7:6e:75:47:5d:c5:
9b:f4:9c:86:8a:ef:1d:7b:70:cb:41:8d:55:6b:d3:
63:11:82:65:e5:04:41:b6:62:15:e8:5e:bd:24:86:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:62:3B:59:8C:E6:9F:C2:DB:67:6C:E9:16:F9:2F:09:C9:73:25:FF
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DA1A054C9D1611F09AE7B0D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.245.0/24
Signature Algorithm: sha256WithRSAEncryption
09:34:7f:2a:bd:d0:e1:9b:be:09:7b:d2:84:ca:8a:a9:78:8e:
51:e8:ac:1d:a9:1f:55:89:28:fa:90:25:3c:63:00:e3:53:7a:
b1:a9:a1:26:2d:70:01:c0:7b:8e:d4:4b:fe:c3:04:44:7e:f0:
ac:ef:1f:db:46:2f:77:5f:cc:a5:2d:34:a8:80:a0:c7:5a:6f:
21:81:84:6c:8a:ea:51:0c:7d:72:0d:5e:1e:60:2d:d5:31:c3:
d0:39:68:84:87:8b:a6:69:ca:a9:cc:54:2a:67:23:3b:50:d9:
f5:2a:87:7d:f1:40:bf:19:ff:4d:96:23:d5:d5:ea:be:81:2f:
5e:0e:02:3c:ea:3f:e5:b9:80:04:7f:f5:ae:e5:4c:d9:f2:0e:
8f:77:30:80:79:22:4d:f0:63:ed:32:33:2c:a8:4b:ab:5f:39:
4a:fe:19:2f:fd:19:dc:a4:73:d4:95:8f:4d:34:e7:63:71:ee:
d7:a8:9f:9e:dd:e3:1b:60:46:80:bb:81:67:52:f7:fe:f9:61:
f8:34:d6:97:cc:47:20:3c:62:35:cd:1c:4e:9c:ce:69:f6:6d:
a8:78:5d:d3:3b:d3:f6:31:22:8f:51:8c:14:31:57:09:f1:8f:
b5:ce:86:1d:c7:4d:da:d8:0c:ad:83:05:6d:58:1a:5f:5e:ef:
94:0a:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:37 2025 by rpki-client