Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/B93A46528A9711F09F0F70C8DAE4EC9C.roa
File: B93A46528A9711F09F0F70C8DAE4EC9C.roa (raw, json)
Hash identifier: CkFb39x15nirobdbbaooeI5/m16fCdvIYH2/odp17kc=
Subject key identifier: 2A:47:FE:37:B8:1E:54:9B:27:17:BA:46:27:85:AC:D7:D5:1A:23:40
Certificate issuer: /CN=F36BA482AF/serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Certificate serial: 01A1
Authority key identifier: EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/B93A46528A9711F09F0F70C8DAE4EC9C.roa
Signing time: Fri 05 Sep 2025 20:34:30 +0000
ROA not before: Fri 05 Sep 2025 20:34:25 +0000
ROA not after: Thu 05 Sep 2030 20:34:25 +0000
asID: 329379
IP address blocks: 102.210.100.0/23 maxlen: 24
2c0f:2740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA482AF, serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Validity
Not Before: Sep 5 20:34:25 2025 GMT
Not After : Sep 5 20:34:25 2030 GMT
Subject: CN=68bb4956-1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:ee:c6:28:7d:63:ca:04:9a:83:a9:fd:af:
d6:28:c3:6e:03:76:9a:4d:88:53:52:86:72:82:d1:
67:56:41:fe:0a:03:d6:8a:85:39:80:57:67:df:ac:
2a:d4:de:90:c4:d4:db:6c:99:aa:af:ae:d0:4e:e9:
a9:25:d6:66:98:72:a6:24:02:27:4e:02:ce:2f:23:
d1:3c:54:ef:41:a3:9b:88:96:41:5f:ab:e2:c3:34:
09:de:41:1f:50:f7:15:2b:b0:37:97:4e:12:96:ce:
d2:c4:ea:a1:6a:41:95:4b:00:14:b8:61:4e:0b:49:
86:74:1c:27:58:b6:ed:40:42:1b:1a:c7:d8:3e:21:
82:fb:18:05:19:9a:b1:e3:9f:65:50:15:c6:c2:39:
8c:42:f5:d6:a3:5f:e5:6f:2a:3c:29:97:00:1d:09:
93:7d:5e:a8:e1:e1:3b:e1:4c:6b:b8:d1:2c:8c:32:
e9:2e:e6:87:93:23:4a:88:bd:4a:f9:ad:ba:4a:ef:
5e:fd:7e:92:af:75:2e:5f:1d:01:64:86:ec:cb:42:
1e:bb:6c:e5:a9:4e:9f:f1:3e:30:3d:d5:24:13:da:
51:1c:3a:53:57:d6:06:01:e9:01:47:03:c7:d6:79:
ef:b5:ee:dc:b7:bc:f3:9a:7f:93:5d:a6:1f:61:ae:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:FE:37:B8:1E:54:9B:27:17:BA:46:27:85:AC:D7:D5:1A:23:40
X509v3 Authority Key Identifier:
keyid:EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/B93A46528A9711F09F0F70C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.100.0/23
IPv6:
2c0f:2740::/32
Signature Algorithm: sha256WithRSAEncryption
89:5b:f5:46:96:29:a7:70:5e:2b:c8:40:44:86:b2:00:c2:24:
5c:8a:38:cc:20:7d:f0:40:25:dd:2d:34:76:df:52:cf:f9:5d:
12:67:ed:59:51:f4:7a:77:26:4e:2a:ee:45:62:14:e4:a1:94:
7a:bb:47:67:3c:52:3d:b7:77:37:6b:22:41:d2:05:c0:df:61:
50:c5:2c:cd:2f:45:17:28:6c:d1:86:61:92:7c:7a:2a:33:43:
9b:a4:8a:b0:26:f0:d9:11:07:92:7d:e2:2c:3b:9f:a1:7a:84:
04:70:72:01:8c:9d:f7:f6:9a:08:b7:95:6e:ab:61:03:a2:26:
a8:61:47:41:ac:76:5e:30:56:ef:82:2f:4b:88:b3:57:32:26:
74:59:cd:a8:52:97:9e:cd:3e:4e:55:18:14:ec:66:db:1c:4b:
3b:77:8e:d1:99:55:f5:b3:f7:bb:54:fd:a3:66:ad:ca:7e:12:
81:6a:2d:2b:94:c8:9e:9a:e7:56:dd:90:fb:88:e8:0d:88:78:
e7:e8:aa:b8:3c:1a:a9:e8:3a:38:15:25:20:0c:b1:4b:c6:40:
b1:5b:28:d2:b8:31:00:a2:bc:c8:70:98:00:43:d1:c2:df:91:
09:53:07:dd:23:a0:52:62:4b:6d:2c:37:9f:ca:fe:a5:2b:0c:
cc:a2:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:57:39 2025 by rpki-client