Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/8D17AF328E8A11F08ADA7699DAE4EC9C.roa
File: 8D17AF328E8A11F08ADA7699DAE4EC9C.roa (raw, json)
Hash identifier: /c4Pr5dL8dZA6rP0S9KDuFVTcWIEPFW1C6D480fT3JM=
Subject key identifier: 07:26:0B:E3:0D:21:DE:C6:2C:22:8B:50:7A:51:56:6C:39:E5:72:99
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 0274
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/8D17AF328E8A11F08ADA7699DAE4EC9C.roa
Signing time: Wed 10 Sep 2025 21:10:18 +0000
ROA not before: Wed 10 Sep 2025 21:10:13 +0000
ROA not after: Tue 01 Sep 2026 21:10:13 +0000
asID: 329386
IP address blocks: 102.209.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Sep 10 21:10:13 2025 GMT
Not After : Sep 1 21:10:13 2026 GMT
Subject: CN=68c1e939-0b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:26:31:99:4c:99:e0:1c:a3:22:8a:e4:1e:
b8:54:e1:bb:8f:76:51:4a:21:bb:1a:b1:5f:c7:ae:
d5:cc:80:60:bb:83:43:a8:4e:41:9c:dc:8f:ad:3c:
c3:42:d0:ba:de:19:b3:b9:02:98:4a:9a:72:50:03:
bd:48:b4:5a:b8:bd:46:0d:69:9a:43:16:a3:93:9f:
ea:67:cd:65:3f:eb:d4:de:4f:4d:a7:5f:1e:3e:ee:
52:a4:22:89:39:09:3d:c0:cc:33:8a:7f:ae:24:d8:
20:a6:6b:c2:d5:f2:5d:3c:91:31:0e:c9:b9:1c:9a:
c0:4d:db:54:35:a7:9b:96:44:db:08:34:0b:46:31:
d9:22:a1:85:8e:11:62:2e:7d:41:01:6c:be:91:0e:
0f:d7:01:da:d9:cf:00:07:23:5b:5a:4b:56:63:df:
69:65:86:56:9b:e6:db:e6:5a:14:4b:ae:6b:b8:15:
14:5a:65:75:4c:dc:35:f3:b6:d7:57:0c:82:b7:50:
0b:b4:5b:42:3f:07:6a:c0:f4:ec:54:bc:e1:31:00:
a1:e1:46:9a:57:07:83:6c:db:88:1a:68:fb:4b:59:
1c:bc:6b:ab:b0:5e:bc:f4:65:8b:66:49:49:5e:9b:
ea:60:ed:87:b8:ae:3b:f5:59:03:30:74:1e:8c:45:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:0B:E3:0D:21:DE:C6:2C:22:8B:50:7A:51:56:6C:39:E5:72:99
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/8D17AF328E8A11F08ADA7699DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.240.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bc:78:6e:6b:7d:c8:74:ab:1d:dd:a2:40:29:dc:e1:4b:14:
71:6b:fc:53:33:ac:31:d8:58:2b:86:92:f5:91:62:92:40:9b:
c1:27:7c:80:cd:f2:31:51:d9:c8:c4:31:f4:e2:e8:dc:d0:3d:
a1:0c:7f:0d:72:5c:32:07:c7:63:88:93:04:c8:51:62:92:c7:
37:9f:f1:26:59:4c:3d:31:d6:98:f8:95:e0:ca:2c:eb:c3:35:
a3:45:a2:13:2d:ce:16:49:57:fa:d0:b5:4a:58:fd:66:65:cb:
a2:c3:44:ec:ff:5d:5e:c0:31:23:a4:20:b3:30:38:d7:5b:be:
87:c6:66:ef:f4:fb:7c:61:a5:e2:a4:c8:dd:ed:4b:33:79:88:
2a:73:94:1d:0d:38:0d:ea:47:f0:1f:bd:2c:18:b0:02:e3:cb:
6c:e3:56:2a:fa:d8:b7:44:2e:bb:b7:44:0e:e5:f1:ae:d3:66:
80:16:d0:06:1c:bb:89:f7:19:97:fd:86:aa:52:55:70:a5:0c:
47:0e:db:60:1a:a7:2c:6f:2b:fb:f8:55:4a:18:bb:e3:1f:37:
ab:d0:67:9c:8c:76:85:7a:c5:20:a7:b3:3e:41:92:fd:bf:c0:
01:97:48:bf:39:5a:57:55:0f:de:65:a7:32:f9:53:1c:5f:16:
e4:ed:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:50:51 2025 by rpki-client