Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/E4460EB690C911F0A8D522A7DAE4EC9C.roa
File: E4460EB690C911F0A8D522A7DAE4EC9C.roa (raw, json)
Hash identifier: gq0+snJ4YzungwMzQAQdM4ZskvqZ8xZnbVHc06ab0mI=
Subject key identifier: C6:59:42:3A:C7:EE:C6:3E:C1:F6:A3:88:5C:2A:D7:98:2B:EB:9B:27
Certificate issuer: /CN=F36140BEAF/serialNumber=984574043D91AF402827B7DA4C9924F456CE4ADE
Certificate serial: 02
Authority key identifier: 98:45:74:04:3D:91:AF:40:28:27:B7:DA:4C:99:24:F4:56:CE:4A:DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/E4460EB690C911F0A8D522A7DAE4EC9C.roa
Signing time: Sat 13 Sep 2025 17:48:44 +0000
ROA not before: Sat 13 Sep 2025 17:48:40 +0000
ROA not after: Mon 31 Dec 2040 17:48:40 +0000
asID: 329539
IP address blocks: 102.205.216.0/22 maxlen: 22
2c0f:5fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.mft
rsync://rpki.afrinic.net/repository/afrinic/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36140BEAF, serialNumber=984574043D91AF402827B7DA4C9924F456CE4ADE
Validity
Not Before: Sep 13 17:48:40 2025 GMT
Not After : Dec 31 17:48:40 2040 GMT
Subject: CN=68c5ae7c-c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:b6:98:d6:a3:6b:90:8d:93:80:fe:06:f8:
78:8e:f5:83:85:82:4e:b1:8b:f3:aa:3c:07:5f:67:
5e:81:17:dc:b6:38:ea:aa:0d:38:57:26:91:23:80:
62:82:cd:bc:ed:65:7c:22:af:40:7d:5d:29:62:b1:
9d:e8:3f:4c:8e:d0:8d:12:07:21:ef:7c:ff:18:05:
53:09:a4:34:49:eb:88:44:12:61:14:bc:cb:1e:a5:
65:fa:49:7b:22:50:34:50:0e:ae:61:4d:49:2d:77:
ac:09:f5:67:d6:68:48:d4:90:65:e3:a2:65:cf:9e:
cc:63:df:8b:ef:95:b2:8d:c8:2c:29:dc:be:8a:b1:
96:65:0a:2d:7d:bd:41:b2:5e:d8:6d:bf:95:02:96:
62:e3:4b:3a:6c:f4:14:dc:d8:31:e6:40:e8:54:b4:
20:57:5b:03:59:83:97:f1:42:54:a4:c1:11:ef:42:
96:d5:72:90:5c:bb:0d:f5:5f:ad:1b:21:e9:cb:7e:
79:1d:bf:a4:fd:dc:17:00:38:1e:b9:23:b7:7b:45:
74:e0:b8:d9:6c:48:5c:cd:2f:7c:3b:b6:67:ed:00:
f5:09:54:9e:2f:e0:39:d6:23:a6:11:82:74:92:14:
4f:4c:8f:46:4e:9b:53:a4:87:32:5f:98:5e:d0:e6:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:59:42:3A:C7:EE:C6:3E:C1:F6:A3:88:5C:2A:D7:98:2B:EB:9B:27
X509v3 Authority Key Identifier:
keyid:98:45:74:04:3D:91:AF:40:28:27:B7:DA:4C:99:24:F4:56:CE:4A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mEV0BD2Rr0AoJ7faTJkk9FbOSt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36140BE/460BB22890C911F0B205E2A2DAE4EC9C/E4460EB690C911F0A8D522A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.205.216.0/22
IPv6:
2c0f:5fc0::/32
Signature Algorithm: sha256WithRSAEncryption
68:f5:b6:6a:44:4f:f5:11:d7:3d:19:32:77:44:c4:22:55:fe:
f4:4c:bd:7b:bb:06:3b:c7:7c:de:65:86:36:ed:5a:4f:85:09:
eb:71:03:a2:46:cd:66:43:fe:5c:fd:1d:c7:4a:53:7f:de:a0:
fe:f5:b9:06:a9:39:2c:79:92:25:1f:9c:a0:aa:20:11:6c:f7:
3c:66:51:4b:ad:e5:d8:91:cd:dd:46:16:c4:11:c5:28:63:80:
10:e1:2b:b1:3f:39:f0:f6:55:11:54:37:d1:a2:00:b4:d1:a4:
d3:4f:e8:fd:1c:8b:f4:aa:36:d2:98:51:58:25:1a:77:e6:b6:
ee:99:94:4f:e3:fa:a3:cf:d1:1f:9a:71:c9:aa:78:2d:72:c1:
d8:26:49:e9:60:dd:df:07:24:8c:b4:4c:05:c2:66:b8:c2:af:
ce:c1:3c:be:3e:a4:58:72:e1:b9:60:7c:f0:32:2b:b4:46:ad:
65:52:cf:ab:06:f0:17:30:a8:24:10:83:d4:8e:87:bc:28:d0:
8f:7e:9c:66:32:85:de:06:22:8c:06:aa:bd:c3:6c:ac:5f:ea:
8f:98:64:8d:a9:00:42:7e:92:e4:4c:5b:4b:6c:4e:60:60:64:
65:63:25:26:7c:cc:06:42:8d:03:52:b5:46:86:79:5b:5b:6f:
6f:30:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:00:11 2025 by rpki-client