Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/A2111EC092F711F0BD7EB2C9DAE4EC9C.roa
File: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (raw, json)
Hash identifier: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=
Subject key identifier: 52:4F:CE:29:8C:56:36:13:DA:82:8F:3C:31:98:28:0D:E6:21:8F:70
Certificate issuer: /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial: 05
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/A2111EC092F711F0BD7EB2C9DAE4EC9C.roa
Signing time: Tue 16 Sep 2025 12:21:12 +0000
ROA not before: Tue 16 Sep 2025 12:21:08 +0000
ROA not after: Thu 16 Sep 2027 12:21:08 +0000
asID: 329521
IP address blocks: 102.207.48.0/24 maxlen: 24
2c0f:56c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Validity
Not Before: Sep 16 12:21:08 2025 GMT
Not After : Sep 16 12:21:08 2027 GMT
Subject: CN=68c95638-fca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:04:27:f8:62:9d:79:4e:cb:30:95:14:f0:
fd:be:e9:3f:c8:34:06:1b:07:f2:61:0e:38:5a:2a:
de:48:cb:14:5c:64:e3:35:f3:f8:7d:a7:c7:04:81:
7d:53:23:6a:14:00:93:75:3d:62:6c:d6:a4:ef:98:
8d:68:30:ca:1f:67:5e:cc:50:d4:67:43:ac:68:d0:
8b:fd:46:5d:6a:d9:bd:79:aa:f6:46:8b:4f:a8:d4:
c4:f7:d2:02:b0:2f:a6:27:0b:76:f9:27:b4:45:73:
b3:0b:3c:83:17:39:99:0f:19:1c:c6:88:18:21:97:
6c:56:69:35:30:cf:8a:9b:f1:a7:c6:36:4e:46:8a:
c6:40:ad:5b:11:8f:7d:45:34:12:83:1f:7d:ef:ad:
92:54:27:11:3f:17:75:8f:be:fc:f7:02:0d:82:c0:
f3:d5:40:4f:e2:0c:ae:b2:b6:3b:07:cb:05:2b:f0:
ae:5e:fa:73:87:43:88:99:6d:6e:0f:ad:c5:b1:69:
5d:4a:72:01:9e:ec:95:84:bf:f6:e5:f7:60:b2:43:
5e:84:4f:b5:29:d2:7b:c7:a3:f9:18:57:e9:7a:68:
da:a0:f7:ce:3b:ad:c7:72:4e:10:fa:96:b3:ed:b9:
f5:d3:8e:6f:3c:cb:c0:a0:58:5b:76:2c:c4:88:32:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:CE:29:8C:56:36:13:DA:82:8F:3C:31:98:28:0D:E6:21:8F:70
X509v3 Authority Key Identifier:
keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/A2111EC092F711F0BD7EB2C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.207.48.0/24
IPv6:
2c0f:56c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:4c:da:9a:4e:88:c4:e3:6a:91:36:8b:8c:38:6f:a3:16:0e:
bb:62:8f:ea:58:f3:35:27:9f:ee:1d:52:e4:cf:b1:0f:68:8d:
a3:51:7f:17:14:1e:cb:48:72:b8:19:7e:87:f2:d2:95:cc:1a:
6c:4e:19:0d:10:63:87:15:43:df:08:b6:4b:f4:cd:f2:f9:40:
4f:9f:4e:89:08:74:e1:09:de:79:38:98:b7:74:a8:4f:d9:cf:
29:33:ec:e4:cb:b9:f6:9c:fa:6a:9a:48:8f:d1:0c:0a:81:fd:
b0:7d:df:17:aa:52:15:45:45:66:6d:2f:3b:fb:85:f0:cd:7c:
b0:43:91:6b:0d:f3:6e:8a:a1:7a:f2:12:8e:55:52:8c:23:bc:
73:cc:68:e6:cb:b7:5e:8c:33:71:dc:2a:d4:92:44:21:c2:9a:
5c:7f:21:5d:a5:cd:83:bf:b5:b9:fa:b6:05:40:24:c6:6e:4b:
d2:29:72:8d:ca:e1:e7:46:50:88:1a:16:09:66:ce:e5:fb:6b:
d5:87:f3:b4:e7:9e:d5:ef:80:56:36:ce:eb:53:ea:57:8e:44:
14:9a:d0:6b:f3:a6:89:3e:2e:fc:3f:6d:41:ec:85:0a:be:fa:
ff:f9:22:25:d6:23:4e:58:9a:e0:4b:92:d1:09:98:f5:d8:db:
81:27:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:28:43 2025 by rpki-client