Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/924A5592B5CF11F083499A8BDAE4EC9C.roa
File: 924A5592B5CF11F083499A8BDAE4EC9C.roa (raw, json)
Hash identifier: vI5//pHlGWHAgoJjpRzv1Mv4Rju5P+7W+b9IA6ocMm8=
Subject key identifier: 67:5C:D8:B7:69:59:ED:5E:A6:5A:D1:DA:42:43:B0:38:41:44:6B:B7
Certificate issuer: /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial: 054E
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/924A5592B5CF11F083499A8BDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 20:32:37 +0000
ROA not before: Thu 30 Oct 2025 20:32:33 +0000
ROA not after: Wed 31 Oct 2035 20:32:33 +0000
asID: 59895
IP address blocks: 102.223.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Nov 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358 (0x54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Validity
Not Before: Oct 30 20:32:33 2025 GMT
Not After : Oct 31 20:32:33 2035 GMT
Subject: CN=6903cb64-d7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:3f:56:4f:87:78:53:b5:f3:04:44:74:f5:
f5:ba:37:b4:7b:79:08:8a:6e:44:25:c2:12:6f:9d:
09:cf:ca:d9:ea:1c:45:8e:5f:2c:b5:09:89:78:97:
62:f2:00:bf:32:45:72:e8:28:f7:e1:e3:83:cf:18:
a5:ce:90:a3:f3:59:7c:8c:d4:11:6f:e6:d0:5e:af:
94:66:ff:9e:b7:23:41:cf:fd:d4:55:9e:7e:a8:a1:
b2:8c:09:8c:a4:2f:c2:8c:1e:46:05:4a:5e:b1:46:
29:4e:0c:db:d3:72:ce:7a:71:cb:39:e5:4c:c4:50:
fc:54:db:b6:34:fb:7c:b0:9e:53:1c:ef:65:33:b7:
32:f3:0d:e3:7f:cc:d8:91:45:53:29:23:8d:98:db:
b6:c1:3b:3e:60:df:09:ca:74:ca:49:c1:47:54:8f:
ef:b5:17:a2:1b:11:3f:42:6a:de:37:af:e8:96:bf:
bc:85:e1:5f:a5:7e:12:06:aa:33:ea:32:27:a8:0d:
b3:e6:d7:9b:b9:6a:75:de:eb:29:5c:3f:67:06:8a:
a3:d0:cd:63:4a:61:3d:e5:ad:a6:05:d8:9c:46:8e:
64:27:4a:17:32:40:61:24:b8:cd:b2:8f:c6:7a:7a:
35:22:ce:94:32:14:5c:ff:07:3a:15:35:49:ac:1c:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:D8:B7:69:59:ED:5E:A6:5A:D1:DA:42:43:B0:38:41:44:6B:B7
X509v3 Authority Key Identifier:
keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/924A5592B5CF11F083499A8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.187.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0c:40:b7:32:05:9a:cf:23:94:00:b7:56:33:10:14:ec:5b:
02:28:8c:07:fd:62:70:51:d0:e6:ed:0b:bc:37:00:bf:00:fb:
bc:ec:6a:57:f4:c8:39:e2:db:c3:1c:d8:0d:bb:7a:1d:f0:7f:
9e:ce:78:a4:7e:d3:58:e7:1c:54:c4:87:e5:2e:84:f0:4f:03:
93:98:97:37:04:c0:87:2b:14:19:2e:7a:07:9f:cb:98:50:93:
b9:e6:b6:05:06:ed:a1:21:3c:36:74:c9:6b:73:32:b4:b0:57:
94:ec:ff:37:79:88:89:48:7b:e6:ed:f7:24:5f:fb:6d:99:dc:
b6:68:cb:c5:0a:f8:e4:8f:35:18:0b:68:8c:d9:45:a6:34:64:
6a:f5:52:bd:33:fa:2c:bd:8a:06:7b:77:62:4f:c0:10:3e:2f:
6f:94:28:e4:93:c3:0a:86:a3:36:d8:ac:a2:31:83:97:1a:c8:
58:1c:87:c5:9e:7f:da:94:7d:c1:ff:cc:a6:50:c4:71:2a:db:
11:0d:47:df:a2:85:c2:c8:0f:ed:18:75:3e:15:dd:53:de:79:
37:33:8d:21:b2:bb:0b:fc:af:06:a5:2e:d8:e4:24:d5:fd:4f:
49:ed:47:4f:73:27:d4:79:f3:c3:21:fb:a9:f4:ad:c9:0c:0c:
7c:fc:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:04:03 2025 by rpki-client