Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/2A4C5F4A87DE11F0A9537CA2DAE4EC9C.roa
File: 2A4C5F4A87DE11F0A9537CA2DAE4EC9C.roa (raw, json)
Hash identifier: ReoeS5MX8EsZQep9uNnRQGgZCzb4DDhuHQ/FKZw8ODA=
Subject key identifier: F3:68:2B:46:7F:15:75:64:2A:44:C1:76:D3:FD:61:04:9C:47:28:71
Certificate issuer: /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial: E3
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/2A4C5F4A87DE11F0A9537CA2DAE4EC9C.roa
Signing time: Tue 02 Sep 2025 09:21:11 +0000
ROA not before: Tue 02 Sep 2025 09:21:06 +0000
ROA not after: Thu 12 Sep 2030 09:21:06 +0000
asID: 327814
IP address blocks: 102.210.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Validity
Not Before: Sep 2 09:21:06 2025 GMT
Not After : Sep 12 09:21:06 2030 GMT
Subject: CN=68b6b707-4f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:dc:43:38:4d:4c:7b:05:80:0d:38:13:dd:
af:d7:a8:d6:3e:64:51:08:42:a7:05:bd:93:78:85:
f0:ad:2e:76:77:b8:7d:43:cf:a7:a4:f1:57:fa:5b:
9b:f4:d5:4c:27:da:96:60:c4:82:ce:db:88:e4:62:
34:82:3b:8c:17:8a:dd:de:93:f0:26:5c:75:af:0a:
18:d7:12:bb:ce:cc:75:26:f4:1e:81:84:5d:ae:ec:
2d:5a:22:66:62:d6:63:d4:51:c8:47:c1:8d:f2:e7:
dc:24:d8:3c:d2:70:14:7a:23:dd:87:b2:07:80:e8:
87:7e:6a:d4:8d:e4:c2:38:c6:51:62:62:d1:b7:37:
67:c1:15:af:c3:22:8f:01:a7:43:35:1f:49:eb:09:
44:95:49:9f:f3:65:8f:ad:d6:16:65:60:32:ac:de:
fb:7a:29:2a:b1:c4:fb:d7:2e:01:02:0d:15:56:6a:
c4:be:a9:92:b1:d5:df:a4:80:85:09:db:2a:db:6b:
35:75:3f:47:29:6f:a3:e3:13:f9:de:b0:87:29:63:
bb:30:0d:7f:bf:d2:6e:62:3c:fc:41:46:f4:88:ac:
05:49:df:98:81:fe:2e:0a:73:52:1b:26:e1:ac:c7:
f9:e8:a0:74:9e:5e:96:76:01:a5:9a:9f:8b:dd:fb:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:2B:46:7F:15:75:64:2A:44:C1:76:D3:FD:61:04:9C:47:28:71
X509v3 Authority Key Identifier:
keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/2A4C5F4A87DE11F0A9537CA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:45:e4:c5:93:ce:49:4f:ee:04:67:e9:93:d5:8e:8a:a0:ad:
a7:55:de:d7:71:3f:0f:52:28:63:da:0c:df:44:f3:ea:8e:db:
f4:dc:d2:9f:a0:71:81:69:3b:ee:cd:c3:22:20:89:a8:8e:a1:
d1:ed:3c:00:6d:d1:af:ce:dc:30:75:2e:49:5e:e6:9a:d3:3b:
2c:82:aa:10:c5:3c:6c:60:f6:38:9a:02:21:08:02:30:1c:ef:
b4:c7:2b:83:38:d0:b3:8c:9d:92:73:69:7a:3f:62:62:74:14:
6e:9e:b1:92:e3:36:e6:de:d3:72:d2:7d:99:45:59:14:fd:c0:
59:29:be:ab:da:c3:f4:05:2b:6f:89:81:5d:45:e1:59:c8:b5:
79:bd:c6:ca:62:7a:a7:3c:ef:1b:58:e0:23:65:1d:9d:fb:c9:
6b:18:6a:94:d0:b3:cf:80:a3:b9:53:a7:22:27:37:61:e9:a3:
d9:c6:f7:15:e6:d0:20:04:51:2d:9d:43:8b:2c:11:44:45:a6:
50:da:f8:ff:48:4c:18:d9:14:93:d9:5a:f8:89:28:d5:ad:94:
8f:5c:3f:e1:ef:48:f1:92:55:f9:08:cc:54:d1:1c:fd:7d:1d:
91:32:86:cd:60:92:8a:89:e3:33:b8:79:0f:2f:25:62:18:b6:
de:18:92:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:31:14 2025 by rpki-client