Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6C26/AAB57924623F11F0819FAAC0DAE4EC9C/5D85713A624011F0B43B1AC5DAE4EC9C.roa
File: 5D85713A624011F0B43B1AC5DAE4EC9C.roa (raw, json)
Hash identifier: RBKvuabSWY3dPLGUt1JwxUA0KHJ6B9FrGFccoTJRvIo=
Subject key identifier: 20:93:BF:5C:DD:DD:24:27:5A:C5:14:3C:BA:90:37:86:78:D8:EC:5F
Certificate issuer: /CN=F36B6C26AF/serialNumber=3AC582D21AC91F10F7BF1D05D7A7DE39BB8C2DF0
Certificate serial: 02
Authority key identifier: 3A:C5:82:D2:1A:C9:1F:10:F7:BF:1D:05:D7:A7:DE:39:BB:8C:2D:F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OsWC0hrJHxD3vx0F16feObuMLfA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B6C26/AAB57924623F11F0819FAAC0DAE4EC9C/5D85713A624011F0B43B1AC5DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 12:28:24 +0000
ROA not before: Wed 16 Jul 2025 12:28:19 +0000
ROA not after: Fri 31 Dec 2027 12:28:19 +0000
asID: 329525
IP address blocks: 102.206.4.0/22 maxlen: 22
102.206.4.0/24 maxlen: 24
102.206.5.0/24 maxlen: 24
102.206.6.0/24 maxlen: 24
102.206.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B6C26/AAB57924623F11F0819FAAC0DAE4EC9C/OsWC0hrJHxD3vx0F16feObuMLfA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B6C26/AAB57924623F11F0819FAAC0DAE4EC9C/OsWC0hrJHxD3vx0F16feObuMLfA.mft
rsync://rpki.afrinic.net/repository/afrinic/OsWC0hrJHxD3vx0F16feObuMLfA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B6C26AF, serialNumber=3AC582D21AC91F10F7BF1D05D7A7DE39BB8C2DF0
Validity
Not Before: Jul 16 12:28:19 2025 GMT
Not After : Dec 31 12:28:19 2027 GMT
Subject: CN=68779ae8-2e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:01:c2:8e:79:e5:4c:f1:7b:b0:a9:32:af:
0e:3e:7d:39:99:fc:dd:0c:a6:36:97:d0:4d:76:2b:
3e:ee:5f:fc:1a:5b:51:bc:c1:fd:5c:49:25:07:62:
c4:9e:2d:49:ae:7f:06:15:3e:01:54:c7:a1:69:02:
6f:d0:a6:55:58:03:b5:d1:b2:13:ba:5b:5e:da:e0:
94:25:8b:13:76:40:58:bb:ac:9a:db:69:5b:3b:0d:
05:d2:7a:8b:38:ec:12:42:68:fa:04:af:64:ef:cd:
f1:f1:af:d3:c1:60:a5:81:fe:0b:29:f6:c4:2c:74:
2e:4b:24:56:6e:19:b6:d8:70:33:27:dd:ca:3f:cb:
d9:c5:44:3f:d2:84:76:89:ab:57:14:c3:77:78:a2:
cc:6b:56:27:88:f0:42:8c:e3:0b:45:77:ba:cc:3a:
32:1a:94:9c:4b:39:5d:e3:79:dd:00:e1:9a:6e:01:
69:27:dd:c7:bf:48:0a:28:4d:c1:bb:12:7f:d9:e0:
57:a1:59:51:82:96:a9:43:c7:be:22:7e:3b:12:69:
00:01:e0:ed:bd:eb:ee:8e:ec:19:00:e0:8f:27:8e:
5e:14:9b:b3:f4:d4:e1:df:e7:07:c5:1b:bc:13:17:
d7:a1:74:3e:b8:8d:28:26:83:f2:e5:f1:a1:9d:2d:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:BF:5C:DD:DD:24:27:5A:C5:14:3C:BA:90:37:86:78:D8:EC:5F
X509v3 Authority Key Identifier:
keyid:3A:C5:82:D2:1A:C9:1F:10:F7:BF:1D:05:D7:A7:DE:39:BB:8C:2D:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6C26/AAB57924623F11F0819FAAC0DAE4EC9C/OsWC0hrJHxD3vx0F16feObuMLfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OsWC0hrJHxD3vx0F16feObuMLfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6C26/AAB57924623F11F0819FAAC0DAE4EC9C/5D85713A624011F0B43B1AC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.206.4.0/22
Signature Algorithm: sha256WithRSAEncryption
88:4e:5a:59:bd:4a:54:f1:6c:69:d0:ac:eb:fa:41:1a:0e:72:
06:20:db:b5:d7:8a:1f:75:6f:35:0d:29:7d:39:8c:6a:49:5d:
c9:c6:21:a5:e9:53:a3:66:30:e7:a9:80:6c:eb:3f:43:04:3c:
0f:9a:ac:bd:49:85:47:25:4f:49:e5:b7:e5:68:f3:17:3f:c5:
db:97:65:eb:f3:35:7b:7f:5b:73:7f:1a:2c:ba:d1:93:cf:3a:
12:01:07:74:56:5d:ce:0a:ac:48:46:60:8e:e0:26:86:bb:28:
9c:43:f3:2e:1d:33:33:3a:63:cb:6f:f0:64:ba:4c:38:60:d3:
a9:69:5e:de:6c:b8:05:c6:fa:d2:48:92:b5:7a:e7:0a:13:3e:
5e:7d:48:c8:e4:03:7b:c4:02:e5:08:17:7f:0d:82:68:7c:0e:
cd:d5:7e:15:30:d8:0a:4c:a6:ea:0c:bf:e5:32:24:3f:09:4d:
a3:3c:7b:43:fa:b3:63:d3:68:8b:9d:f2:79:c7:2e:09:ee:03:
c9:ba:4a:16:f7:c0:4e:e2:c6:7f:90:20:0e:26:5a:71:be:a1:
7b:d5:89:fa:36:68:ed:86:e9:90:f9:f4:23:88:a0:6e:67:0f:
90:85:04:7c:d6:0e:6b:96:7f:9f:2f:02:f4:9a:cd:97:24:b8:
16:a0:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:01 2025 by rpki-client