Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0EBB7DC4AE6C11F0B1CE37E6DAE4EC9C.roa
File: 0EBB7DC4AE6C11F0B1CE37E6DAE4EC9C.roa (raw, json)
Hash identifier: jGebkxANwCa6X8V0unTYKC+IlkwPOA0ABDl5bH2cUVw=
Subject key identifier: D3:26:A4:F8:50:8A:68:A7:F3:32:F7:8F:D1:25:AC:F2:5C:DE:82:84
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1644
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0EBB7DC4AE6C11F0B1CE37E6DAE4EC9C.roa
Signing time: Tue 21 Oct 2025 10:52:38 +0000
ROA not before: Tue 21 Oct 2025 10:52:33 +0000
ROA not after: Thu 21 Oct 2027 10:52:33 +0000
asID: 205886
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Nov 2025 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5700 (0x1644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 21 10:52:33 2025 GMT
Not After : Oct 21 10:52:33 2027 GMT
Subject: CN=68f765f6-8e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:6f:f8:0d:96:4f:69:a7:90:94:c8:bd:94:
17:4b:88:2c:47:40:c7:f3:f7:9d:3c:83:3a:c8:fc:
70:b6:bc:79:06:d3:93:0d:35:a1:2c:31:3b:35:a1:
6a:6c:1d:f5:7f:90:8b:50:1f:9f:4e:52:30:a8:51:
b0:43:16:e8:a9:7e:f5:f7:13:e4:93:4b:4d:3d:b6:
4d:cd:3e:ff:73:22:1d:5a:46:3d:14:d1:40:bc:11:
32:dc:10:ce:27:c9:92:b1:bc:a5:e9:aa:4c:80:d5:
23:af:21:a6:d5:72:4b:12:d3:f6:18:74:40:5e:d9:
64:ee:6c:d4:69:9c:9b:2a:f9:68:0c:73:5c:fd:58:
4f:48:f9:ab:86:04:c5:27:be:6b:92:44:af:26:a0:
39:e2:7d:e0:93:ee:05:98:de:20:48:9b:87:60:63:
fb:b2:a1:4a:95:29:41:a5:31:1c:f1:32:89:a9:04:
bb:ca:f2:a9:96:83:63:e2:77:ea:fd:a7:3b:a9:fe:
72:c8:53:65:26:d8:6d:89:23:67:c2:1c:83:b8:a0:
74:bd:12:ae:54:e8:88:5e:c5:82:5d:ba:63:8f:8b:
54:66:ca:82:c8:b8:65:d7:fb:b8:81:b5:41:4b:aa:
86:ec:1f:83:19:e4:0a:d5:3c:80:4c:03:d0:72:df:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:A4:F8:50:8A:68:A7:F3:32:F7:8F:D1:25:AC:F2:5C:DE:82:84
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0EBB7DC4AE6C11F0B1CE37E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:fc:16:6a:50:1f:57:35:7b:5c:ad:5a:7c:08:33:d3:02:78:
ae:2c:b0:d1:60:c3:87:8c:be:a3:1c:63:28:5e:20:22:42:75:
e6:05:0b:8a:6b:52:0e:96:8a:0e:fa:23:16:a0:37:e8:6e:60:
80:d8:58:d0:fd:3c:f0:98:04:2f:4e:45:3a:06:54:be:b2:3d:
b7:20:72:48:ee:19:6d:77:08:7f:ba:dd:96:7d:cf:e8:f8:c3:
9e:a4:52:49:07:4d:8c:5d:28:d9:90:68:5e:83:9a:e3:78:11:
92:ce:e6:f9:51:c3:7b:28:33:53:c0:d1:57:0e:8f:ff:5e:37:
25:5c:77:ae:b5:27:6c:15:de:fc:72:33:f1:6b:0f:1a:3e:11:
b6:77:5d:45:00:43:1b:35:fd:61:45:f4:bd:94:64:d2:6f:45:
e5:ee:72:a9:67:f8:c7:cc:95:0b:bf:ec:74:14:7d:67:ca:5e:
80:b8:8a:5b:23:33:4b:e8:db:84:22:54:bb:ea:c2:c6:20:ab:
48:af:04:39:da:a1:16:32:a2:81:aa:48:ab:8a:e9:d0:bb:aa:
98:e2:de:d0:3c:27:c5:40:0d:8d:32:5c:cf:4b:ce:ae:c9:b8:
75:a2:8c:a3:80:d9:bc:7a:6c:c5:e9:18:0a:6f:e4:92:61:5f:
67:7c:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:21 2025 by rpki-client